mohitkumar9955458869-afk[.]github[.]io

This domain, mohitkumar9955458869-afk.github.io, is flagged for high-risk generic phishing activity, specifically a fake login page impersonating Instagram. The threat involves attempting to capture user credentials and potentially other sensitive information from unsuspecting users.

Infrastructure analysis reveals that the domain has been flagged by 11 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.109.153, which is located in the United States and belongs to AS54113 Fastly, Inc. The SSL certificate is issued by Let's Encrypt, a common provider for free certificates. The domain appears on one security blocklist and is currently blocked by PhishDestroy, a known security service. The creation date is not specified, but the domain remains active and accessible to users.

Currently, the domain is still active, and there is an ongoing risk of users falling victim to the fake login page. Immediate action is recommended, including reporting the domain to relevant authorities and warning potential victims. The remaining risk is high due to the active status and the credible threat it poses, especially to users of Instagram. Users are advised to verify the URL of any login pages and use official channels to avoid credential theft.