vidyastationery[.]in

Analysis indicates that the domain vidyastationery.in is actively impersonating Vidya Stationery Pvt Ltd, as evidenced by its page title matching the legitimate brand name. Registered on April 22, 2026, through GoDaddy, the domain resolves to IP address 92.113.16.185, hosted on infrastructure associated with Hostinger in Germany. The site employs a Let's Encrypt SSL certificate (R12) and utilizes a technology stack including WordPress, MySQL, PHP, RxJS, Swiper, jQuery Migrate, and jQuery, alongside a Hostinger CDN. This combination of technologies is consistent with phishing infrastructure, particularly when paired with a recently registered domain impersonating a specific brand. The domain is currently flagged by one security blocklist (PhishDestroy) and has been detected by 4 of 94 security vendors on VirusTotal, confirming its classification as a high-risk phishing threat. Nameservers ns1.dns-parking.com and ns2.dns-parking.com further suggest a pattern observed in low-reputation or disposable hosting environments. The HTTP status returns 200, indicating the site is operational and accessible as of July 12, 2026. While the exact content and mechanics of the phishing scheme remain unanalyzed, the infrastructure and impersonation of a stationery supplier suggest potential credential harvesting or fraudulent order processing. Defenders are advised to block the domain and its resolving IP at the network level, revoke any associated SSL certificates, and monitor for related domains using similar naming conventions or infrastructure. The Gridinsoft trust score of 0/100 reinforces the domain's lack of legitimacy and high risk of malicious activity.