dandumalleswari7-beep[.]github[.]io

Analysis conducted on July 27, 2026, identifies dandumalleswari7-beep.github.io as an active phishing domain exhibiting characteristics of social engineering. The domain is hosted on GitHub Pages infrastructure, resolving to the IP address 185.199.108.153, a known GitHub hosting range. Infrastructure analysis reveals the domain was registered through GitHub, Inc., with no nameservers explicitly configured, a common trait for subdomains leveraging platform-provided hosting. Google Safe Browsing has flagged this domain specifically for social engineering, indicating it attempts to deceive users into divulging sensitive information or performing actions that compromise security.

Detection coverage remains limited but notable: the domain appears on one security blocklist, PhishDestroy, while a VirusTotal scan conducted by 91 vendors returned no current detections. The absence of detections does not confirm safety, particularly as phishing domains often evade initial scans through obfuscation or delayed malicious payload delivery. The domain remains operational, with no HTTP errors or SSL misconfigurations reported, suggesting it is actively serving content designed to facilitate the phishing campaign. The exact nature of the phishing content is not yet fully analysed, as no page title, brand target, or scam type has been confirmed in available intelligence.

Defenders are advised to treat this domain as high-risk due to its social engineering classification and active status. Network-level blocking is recommended, particularly for organizations vulnerable to credential theft or financial fraud. Continuous monitoring is warranted, as GitHub Pages domains can be rapidly updated or replaced. Further analysis, including sandbox execution or deeper content inspection, is necessary to determine the specific tactics employed and any associated threat actor infrastructure.