murali-bitt[.]github[.]io

Analysis of murali-bitt.github.io indicates that the domain is registered through GitHub, Inc. and resolves to the IP address 185.199.111.153, which belongs to GitHub Pages hosting infrastructure. Google Safe Browsing has flagged the site for social engineering, confirming its use in credential‑stealing or information‑gathering campaigns. The domain is currently listed on one public blocklist and has been actively blocked by the PhishDestroy service, suggesting that defensive feeds are already distributing indicators for this site.

VirusTotal reports that six of ninety‑one scanned security vendors have identified the domain as malicious, providing additional corroboration of its threat status. No nameserver information is available (NS_NOT_FOUND), and the site’s page title or SSL certificate details have not been disclosed in the available intelligence, leaving those aspects of the infrastructure unverified. The overall risk assessment remains high due to the combination of active hosting, reputable blocklist inclusion, Safe Browsing flag, and multi‑vendor detections.

Defenders should continue to block murali-bitt.github.io at perimeter devices, update DNS sinkhole configurations, and ensure that endpoint web‑filter solutions reference the latest feed from PhishDestroy and VirusTotal. Monitoring of traffic to the 185.199.111.153 address is advised, as any outbound connections from internal hosts may indicate compromise attempts. Given the limited public metadata, further dynamic analysis of the site’s content should be prioritized to determine any additional payloads or credential‑harvesting mechanisms that may be present.