# indiratejaswini.github.io — MALICIOUS

> PhishDestroy identifies indiratejaswini.github.io hosting a generic phishing page. 14 of 95 VirusTotal vendors flag the site; stop interaction immediately.

## Summary
The domain indiratejaswini.github.io is actively serving generic phishing content designed for credential theft. No specific brand is being impersonated nor crypto drainer kit detected, indicating a broad, opportunistic campaign aimed at harvesting login credentials via decoy login forms. GitHub-hosted infrastructure is being abused to host the lure, providing an initial cloak of legitimacy. PhishDestroy assesses the payload as generic phishing, targeting unsuspecting users rather than a specific organization or crypto protocol.  

 Technical indicators confirm elevated risk: VirusTotal reports 14 of 95 security vendors flag the page, the domain was registered through GitHub, Inc., and resolves to IP 185.199.108.153. The SSL certificate is issued by Let’s Encrypt, ensuring encrypted delivery of the phishing content. No creation date is publicly visible due to GitHub’s privacy defaults, and the Google Safe Browsing (GSB) status remains unlisted at this time. The platform’s blocklist count currently stands at 14/95, reflecting partial but not universal detection across threat intelligence feeds. These indicators collectively underscore the active, elevated nature of the threat.  

 Current status is active, with the page still accessible and serving phishing content as of the latest scan. The domain remains unblocked by most browsers and security vendors, allowing continued exposure. Immediate mitigation includes blacklisting IP 185.199.108.153 and domain indiratejaswini.github.io across networks and endpoints, disabling access via corporate DNS or endpoint protection platforms, and educating users to avoid any interaction. Remaining risk is elevated due to GitHub’s broad allowlisting and the generic nature of the lure, which complicates rapid takedown. Continuous monitoring and proactive blocking are required until GitHub or Let’s Encrypt action results in full removal.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 14 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/98dc4098-040a-4744-abec-0084c34a737b
- PhishDestroy: https://phishdestroy.io/domain/indiratejaswini.github.io/
- LLM endpoint: https://phishdestroy.io/domain/indiratejaswini.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/indiratejaswini.github.io/
Last updated: 2026-03-24