rudrapatel7100[.]github[.]io

Analysis as of July 29, 2026 indicates that the GitHub Pages sub‑domain rudrapatel7100.github.io is currently classified as a generic phishing site. VirusTotal records show that 16 of 91 scanned security engines have raised detections against the domain, suggesting a non‑trivial level of malicious reputation. The domain resolves to the IPv4 address 185.199.108.153, which belongs to GitHub’s public hosting infrastructure; the same address is shared by many legitimate GitHub Pages sites, meaning the IP alone does not provide a definitive indicator of compromise but confirms the use of GitHub’s CDN. Registration details reveal that the sub‑domain is provisioned automatically through the GitHub Pages service, and no independent registrar information is available beyond the platform‑provided metadata.

The domain appears on a single external blocklist and is explicitly listed as blocked by the PhishDestroy threat‑intelligence feed, reinforcing the view that security operators have observed malicious activity associated with this host. While the available data confirms that multiple vendors have flagged the domain and that it is present on at least one blocklist, the specific content hosted at the URL has not been publicly disclosed in the current intelligence set. Consequently, the precise phishing payload, target brand, or credential‑harvesting technique remains unknown.

Defenders should therefore treat the domain as hostile until further analysis clarifies its behavior. Recommended mitigations include adding rudrapatel7100.github.io to network‑level deny lists, updating endpoint and web‑gateway filtering rules to block the host, and monitoring DNS queries for the associated IP address for anomalous traffic patterns. Continuous re‑evaluation is advised, as additional detections or blocklist entries may emerge.