sushant69005[.]github[.]io

This domain, sushant69005.github.io, is currently active and poses a specific threat of credential theft to users. The domain is designed to mimic legitimate services, coaxing users into entering sensitive information such as usernames and passwords, which are then captured by attackers for unauthorized use.

Analysis indicates that 11 out of 95 security vendors on VirusTotal flag this domain as malicious, suggesting a moderate to high level of suspicion. The domain is registered through GitHub, Inc., a common registrar for legitimate projects, which may lend it additional credibility. The IP address 185.199.109.153, which this domain resolves to, is located in the United States and is associated with GitHub, Inc. Despite the domain appearing on one security blocklist, the page title 'Site not found · GitHub Pages' suggests that the content may have been removed or is currently not accessible, but the underlying threat may still persist.

If users have visited this domain, they are advised to immediately change passwords and enable two-factor authentication (2FA) for any accounts that may have been compromised. Users should also monitor their accounts for any unusual activity and consider running a full system scan using up-to-date antivirus software to ensure that no malware has been installed. Additionally, users should report any instances of credential theft to the relevant service providers and consider using a password manager to generate and store complex, unique passwords for different accounts.