swaroop-indukuri[.]github[.]io

On July 29, 2026, the threat intelligence team evaluated the domain swaroop-indukuri.github.io. The site is hosted on GitHub Pages, as indicated by the resolver IP 185.199.109.153 that belongs to the GitHub infrastructure. The domain has been flagged by multiple external sources. PhishDestroy has already blocked the domain, and Google Safe Browsing categorises it as a social engineering threat.

VirusTotal scans show that 16 of 91 security vendors returned a malicious detection for the domain, confirming a consensus of concern among scanning engines. Additionally, the domain appears on one publicly‑available security blocklist, reinforcing its malicious reputation. The current operational status is listed as active and the risk level is high, suggesting ongoing exploitation. The evidence does not include a page title, SSL certificate details, HTTP response codes, or direct evidence of the targeted brand, so the exact content of the hosted pages remains unverified.

Nevertheless, the combination of hosting on a free‑site service, multiple vendor detections, and inclusion on blocklists is sufficient to classify the domain as a confirmed phishing infrastructure. Defenders should immediately block outbound connections to 185.199.109.153 when associated with the host name swaroop-indukuri.github.io, add the domain to local and network‑level deny lists, and monitor for any credential‑theft activity that may be linked to the site. Continuous re‑scanning on VirusTotal and periodic checks of Google Safe Browsing are recommended to capture any changes in detection status. Organizations using DNS filtering should ensure the domain is present in their block policies, and incident response teams should treat any user reports involving this URL as high‑priority.