sumitkr-2[.]github[.]io

sumitkr-2.github.io is a confirmed generic phishing domain engaged in credential theft activities. This domain is currently active and poses a high risk to users who may interact with its fraudulent content.

This domain was flagged by 15 of 95 VirusTotal security vendors, indicating widespread recognition of its malicious intent. Registered through GitHub, Inc., it resolves to IP address 185.199.109.153 and appears on 1 security blocklist. The domain utilizes a Let's Encrypt SSL certificate to appear legitimate, though its trustworthiness is compromised by its inclusion on OpenPhish's blocklist and Google Safe Browsing's SOCIAL_ENGINEERING category.

Users are strongly advised to avoid accessing sumitkr-2.github.io and refrain from entering any personal or login credentials. If inadvertently accessed, users should immediately change passwords for any accounts that may have been exposed and scan their devices for potential malware. Security researchers should monitor this domain for further malicious activity, as its current status remains active and its threat potential is high.