manikantareddykapa[.]github[.]io

This domain, manikantareddykapa.github.io, is identified as a generic phishing threat. The domain mimics legitimate Amazon pages to deceive users into divulging sensitive information such as login credentials and personal data. The risk level is assessed as high due to the potential for significant data theft and subsequent misuse.

Analysis indicates that the domain has been flagged by 5 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus among security researchers regarding its malicious nature. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.111.153, which is located in the United States and is part of the AS54113 Fastly, Inc. network. The SSL certificate is issued by Let's Encrypt, a trusted certificate authority, which may lend a false sense of security to unsuspecting users. The domain appears on one security blocklist, further corroborating its status as a phishing site. The creation date of the domain is not provided, but its recent activity and limited detection suggest it may be a newly established threat vector.

If users have visited this domain, they are advised to immediately change their Amazon account passwords and monitor their accounts for any unauthorized activity. Additionally, users should run a full system scan to ensure no malware was installed during the visit. It is recommended to avoid clicking on any links or entering personal information on any page that appears suspicious or does not have a valid, trusted SSL certificate. Users are also encouraged to report any phishing attempts to their respective security teams or local authorities.