indoamerica200[.]github[.]io

PhishDestroy has identified indoamerica200.github.io as a high-risk generic phishing domain currently active and posing a significant threat to users. This GitHub Pages site leverages the trusted platform to host fraudulent content designed to steal sensitive information, though no specific brand impersonation or crypto drainer kit has been identified at this time. The domain's association with GitHub may lend it an air of legitimacy, making it particularly dangerous for unsuspecting visitors.

Technical analysis reveals concerning indicators: VirusTotal flags this domain with 13 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. The domain was registered on June 3, 2026, through GitHub, Inc., and resolves to IP address 185.199.108.153. The SSL certificate is issued by Let's Encrypt (R12), which is common for legitimate sites but here used to appear trustworthy. Notably, the page title displays "Site not found · GitHub Pages," suggesting the phishing content may be dynamically served or the site is between configurations. Google Safe Browsing status was not explicitly flagged in the data, but the high vendor detection rate indicates active threats.

As of the latest investigation, indoamerica200.github.io remains active and accessible. PhishDestroy recommends immediate blocking of this domain at the network level and advises users to avoid any interaction with links or content from this source. The combination of a high-risk classification, recent registration, and use of a reputable hosting platform makes this domain a persistent threat. Users are urged to verify any URL through PhishDestroy's verification tools before entering personal information or credentials. Ongoing monitoring is essential as phishing campaigns often evolve their tactics.