dharvip2112[.]github[.]io

The domain dharvip2112.github.io is registered through GitHub, Inc. and resolves to the IP address 185.199.110.153, an address known to belong to GitHub Pages hosting infrastructure. Current DNS interrogation does not return a valid nameserver record, indicating that the nameserver information is not publicly available. Threat intelligence sources have placed the domain on two reputable blocklists, specifically PhishDestroy and OpenPhish, confirming that it is recognized as a malicious resource by multiple security communities. Google Safe Browsing classifies the domain under social engineering, reinforcing the suspicion of phishing activity.

VirusTotal analysis shows that nine out of ninety‑five scanned security vendors have flagged the domain, providing independent confirmation of its malicious reputation. The overall risk rating is high and the domain status is listed as active, meaning it continues to be reachable on the public internet. While the available data establishes the hosting environment, registration details, and blocklist presence, several aspects remain unknown: the exact HTTP response code, TLS certificate details, page title, and any observed payload or credential‑harvesting behavior have not been disclosed.

Consequently, defenders should treat the domain as a confirmed phishing vector and implement preventive controls. Recommended actions include adding dharvip2112.github.io to DNS‑based blocklists, updating intrusion detection signatures to match the observed IP address, and monitoring outbound traffic for connections to the GitHub Pages IP range. Continuous re‑evaluation is advised to capture any changes in hosting or content that may affect the threat profile.