sahilrohra07-svg[.]github[.]io

Analysis indicates that the domain sahilrohra07-svg.github.io is currently active and has been observed on a single security blocklist. The blocklist entry notes that the domain is blocked by the PhishDestroy feed, suggesting that it has been identified as part of a phishing campaign. The domain resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting service. Registration details show that the site is hosted under the GitHub Pages umbrella, a legitimate service commonly abused for malicious hosting.

VirusTotal has processed the domain with 91 antivirus and URL‑reputation engines; none of the engines returned a malicious verdict at the time of scanning. While the lack of a vendor flag does not imply safety, it demonstrates that automated scanners have not yet identified overt payloads or known malicious signatures. No public Safe Browsing, OTX, or other reputation feeds have been observed for this domain, and no SSL certificate details, HTTP status codes, or page titles have been disclosed in the available intelligence. Consequently, the primary indicators remain the blocklist listing, the association with PhishDestroy, and the hosting on a shared GitHub Pages IP that may be used by multiple unrelated sites.

Defenders should add sahilrohra07-svg.github.io to outbound and inbound deny lists, monitor DNS queries for resolution to 185.199.108.153, and enforce strict URL filtering for any traffic to GitHub Pages subdomains that are not explicitly authorized. Continuous re‑evaluation is advised, as the domain may evolve to host active credential‑stealing pages or other malicious content. Organizations should also consider reporting the domain to additional blocklist operators and request removal if the site is confirmed malicious. Until further forensic analysis of the hosted content is performed, the domain should be treated as a potential phishing threat.