surajvishwakarma1020[.]github[.]io

The domain surajvishwakarma1020.github.io has been identified as an active generic phishing threat. This domain is currently live and impersonates a well-known brand, Amazon. The primary aim of this phishing operation is likely to deceive unsuspecting users into divulging sensitive information under the guise of a legitimate Amazon page.

In-depth analysis reveals that this domain, registered through GitHub, Inc., resolves to the IP address 2606:50c0:8003::153, which is located in the United States under AS54113, Fastly, Inc. It has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate level of detection by security platforms. Furthermore, it appears on one security blocklist. The domain employs an SSL certificate issued by Let's Encrypt, ensuring that communications over the network appear secure to users, which may enhance its deceptive capabilities.

Currently, the domain remains active, presenting a significant threat to users. It is strongly recommended that organizations implement robust email and web filtering solutions to block access to this domain. Users should be advised to verify the authenticity of web pages before entering any personal information. Additionally, continuous monitoring for similar phishing domains should be conducted to mitigate risks effectively. Immediate action is imperative to protect sensitive information from being compromised.