babadata[.]bashkarpatel[.]xyz

The domain babadata.bashkarpatel.xyz was registered on June 01, 2025 through Go Daddy, LLC. The sole page title observed matches the domain name, and the site currently returns HTTP status 200 without an SSL certificate. Initial analysis indicates that the domain is actively hosting content classified as generic phishing, and it remains reachable at the time of this report (July 12, 2026).

Infrastructure analysis reveals that the domain resolves to the IPv4 address 208.78.220.237, which is allocated to AS13354 (zColo) and geolocated in the United States. Authoritative name servers for the domain are ns43.domaincontrol.com and ns44.domaincontrol.com, both typical of the registrar’s default DNS service. The lack of TLS encryption suggests a low operational security posture, consistent with the observed Gridinsoft trust score of 0 out of 100. No additional subdomains or alternative IPs were identified during the scan.

Threat assessment is supported by multiple indicators. The domain appears on a single security blocklist and is explicitly listed as blocked by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 95 security vendors, reinforcing the suspicion of malicious intent. The combination of a low trust score, blocklist inclusion, and a positive VirusTotal flag aligns with a high‑risk classification for the domain.

Defenders are advised to add babadata.bashkarpatel.xyz to network deny lists and email filtering rules to prevent credential harvesting. Continuous monitoring of the associated IP address and name server records is recommended, as changes could indicate further campaign expansion. Incident response teams should treat any traffic to this domain as malicious and consider forensic analysis of any compromised credentials that may have been submitted to the site.