shruman07[.]github[.]io

PhishDestroy identifies shruman07.github.io as an active phishing domain primarily used for fake login scams designed to steal sensitive user credentials. This campaign specifically targets users by mimicking legitimate login portals, often aiming to drain cryptocurrency wallets or gain unauthorized access to financial accounts. The domain's intention is to deceive victims into submitting private information under false pretenses, posing a high risk to both personal and financial security.

Technical analysis reveals that shruman07.github.io is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153. It is secured with a free Let's Encrypt SSL certificate to appear trustworthy. The domain is currently active and has been flagged by 17 out of 95 security vendors on VirusTotal, indicating a widespread consensus on its malicious nature. Additionally, it is listed in one security blocklist and is blocked by the OpenPhish database. Google Safe Browsing categorizes this domain under SOCIAL_ENGINEERING, further confirming its use in deceptive phishing schemes.

Users who have visited shruman07.github.io should immediately refrain from entering any personal or login information on this site. If credentials were submitted, it is critical to change passwords on affected accounts and enable multi-factor authentication where possible. Running a comprehensive malware and security scan is advisable to detect any potential compromise. Users are urged to verify this threat and stay informed through PhishDestroy to avoid falling victim to this high-risk fake login scam.