bhagyalakshmis496-cell[.]github[.]io

This domain, bhagyalakshmis496-cell.github.io, is actively flagged as a high-risk phishing site hosted on GitHub Pages infrastructure. Analysis indicates the domain resolves to 185.199.108.153, an IP address assigned to GitHub, Inc. and located in the United States. The domain is registered through GitHub, Inc., and while no nameservers are currently detected, it remains operational as of August 4, 2026. Eight of ninety-one security vendors on VirusTotal have classified this domain as malicious, and it appears on two security blocklists, including PhishDestroy and OpenPhish.

Detected technologies include Varnish, GitHub Pages, and Fastly, which are consistent with legitimate GitHub-hosted projects but are also commonly exploited for phishing due to their free and low-friction hosting capabilities. The exact nature of the phishing content remains unverified, as no specific brand impersonation or scam category has been confirmed in available intelligence. However, the domain’s structure—incorporating what appears to be a user or project identifier (bhagyalakshmis496-cell)—suggests it may be part of a larger, rapidly deployed campaign leveraging GitHub’s subdomain system. The absence of nameservers is unusual for legitimate GitHub Pages deployments and may indicate an attempt to obscure tracking or evade detection.

Defenders should treat this domain as hostile and prioritize blocking it at the network and endpoint levels. Organizations using GitHub Pages for internal or public projects are advised to review their subdomain policies and monitor for unauthorized or suspicious repositories. No SSL or HTTP anomalies were reported, but the domain’s continued activity despite blocklist inclusion underscores the need for real-time threat intelligence integration.