soumyadip718[.]github[.]io

The domain soumyadip718.github.io is assessed as a high-risk generic_phishing site, specifically impersonating Amazon. This type of threat is designed to trick users into disclosing sensitive information such as login credentials, personal data, or financial details, often leading to identity theft or financial loss.

Analysis indicates that soumyadip718.github.io has been flagged by 1 out of 95 security vendors on VirusTotal, suggesting a low but significant detection rate. The domain is registered through GitHub, Inc., and resolves to the IPv6 address 2606:50c0:8003::153, which is located in the United States and is associated with AS54113 Fastly, Inc. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, which is a common provider for legitimate and malicious sites alike. Despite the low detection rate, the presence on a blocklist and the impersonation of a well-known brand elevates the risk level.

To mitigate the threat posed by this domain, users should avoid clicking on any links or entering personal information on the site. Network administrators should consider adding the domain to their firewall or DNS blocklists to prevent access. Additionally, users should regularly check their account activity and enable multi-factor authentication (MFA) for all sensitive accounts. Security teams should monitor for any similar domains and take proactive steps to educate users about the dangers of brand impersonation and phishing attacks.