iromanhay7[.]github[.]io

The domain iromanhay7.github.io poses a high-risk brand impersonation threat, specifically targeting Google. This fraudulent domain is actively misleading users by simulating Google's branding in an attempt to extract sensitive information under false pretenses. The threat is categorized as brand impersonation and is currently operational, indicating immediate action is necessary to prevent potential data breaches.

In-depth analysis reveals multiple indicators of malicious activity associated with iromanhay7.github.io. The domain is flagged as a phishing site by Google Safe Browsing and is listed on one security blocklist. VirusTotal reports that 11 out of 95 security vendors have identified this domain as engaging in fraudulent activities. The domain is registered through GitHub, Inc., and utilizes an SSL certificate from Let's Encrypt. Hosted under IP address 185.199.109.153, the infrastructure is positioned in the United States, within AS54113 Fastly, Inc.

Users who have visited iromanhay7.github.io are advised to immediately check their devices for any unusual activity, such as unauthorized account access or unfamiliar transactions. It is recommended to reset passwords for potentially compromised accounts, enable multi-factor authentication where possible, and conduct a thorough review of security settings. Additionally, users should remain vigilant and avoid engaging with any communications or prompts originating from this domain. Reporting the incident to relevant security bodies will aid in mitigating the threat.