srujan-hannikeri[.]github[.]io

PhishDestroy identifies srujan-hannikeri.github.io as an active credential theft phishing domain targeting unsuspecting users. This domain is currently engaged in a phishing operation designed to harvest sensitive user credentials under false pretenses. The threat remains live and poses an elevated risk to individuals or organizations who may interact with this site.

This domain was flagged by 14 of 95 VirusTotal security vendors, indicating a significant detection rate for malicious activity. It was registered through GitHub, Inc., resolving to IP address 185.199.108.153. While the exact creation date of the domain is not disclosed in available intelligence, its infrastructure and detection profile suggest recent establishment. The presence of this domain across multiple security platforms highlights its malicious nature and reinforces the need for immediate scrutiny.

Given the active status of this credential phishing campaign, organizations and users are strongly advised to block access to srujan-hannikeri.github.io at the network perimeter. Implement DNS filtering to prevent resolution, and ensure endpoint detection rules are updated to flag this domain or associated IP addresses. Users who may have interacted with this site should reset passwords for any accounts potentially exposed and enable multi-factor authentication where available. Continuous monitoring for associated artifacts, such as IP-based connections or similar domain patterns, is recommended to mitigate further exposure.