shreeyamalla[.]github[.]io

PhishDestroy confirms that shreeyamalla.github.io is an active credential-theft phishing domain posing elevated risk to end-users. The site masquerades as a legitimate service to harvest usernames, passwords, or financial data, and is currently served from GitHub Pages infrastructure via Let’s Encrypt certificates.

This domain was flagged by 11 of 95 tested security vendors on VirusTotal and resolves to IPv4 address 185.199.108.153. The page is served over HTTPS using a Let’s Encrypt certificate, which increases spoofing credibility. Historical telemetry suggests the domain is recent and likely created specifically for this campaign; blocklist presence and low trust scores corroborate its malicious purpose.

Users should avoid interacting with any login prompts or data-entry forms on shreeyamalla.github.io. Organizations are advised to block the domain at DNS and perimeter levels and to inspect outbound traffic for attempted exfiltration to IP 185.199.108.153. Security teams should also reset any credentials that may have been entered and enable MFA on all related accounts.