madhubharathitl[.]github[.]io

This domain, madhubharathitl.github.io, is identified as a generic phishing site leveraging GitHub Pages infrastructure. Analysis indicates no direct association with a specific brand or drainer kit, but the domain exhibits characteristics consistent with credential harvesting or malicious redirection. The absence of a legitimate site title—displaying only 'Site not found'—suggests the phishing content may be transient or conditionally served to evade detection, a common tactic in low-sophistication phishing operations. Infrastructure analysis reveals the domain was registered through GitHub, Inc. on April 08, 2026, and resolves to the IP address 185.199.108.153, located in the United States and associated with GitHub’s hosting services. Detection metrics show 18 out of 95 security vendors on VirusTotal flag the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on one security blocklist, and its SSL certificate, issued by Let’s Encrypt (R12), provides no additional trust signals due to the automated nature of GitHub Pages’ certificate provisioning. As of the latest assessment, madhubharathitl.github.io remains active, though its phishing content may be intermittently accessible. The domain’s reliance on GitHub Pages infrastructure complicates takedown efforts, as it exploits legitimate hosting services to evade traditional mitigation strategies. Users and organizations are advised to block the domain at the network level and monitor for related subdomains or IP-based indicators. Given the high-risk classification, immediate isolation of any systems that have interacted with the domain is recommended, alongside a review of authentication logs for signs of credential compromise.