rabia-irshad2[.]github[.]io

Analysis of the domain rabia-irshad2.github.io indicates that it poses a significant phishing threat. The site is designed to mimic the legitimate Amazon website, aiming to trick users into sharing sensitive information such as login credentials and personal data. This can lead to unauthorized access to user accounts and potential financial loss.

This domain is flagged by 1 out of 95 security vendors and appears on one security blocklist. The domain is registered through GitHub, Inc., and currently resolves to the IP address 185.199.111.153, which is located in the United States and hosted by Fastly, Inc. Despite the use of a Let's Encrypt SSL certificate, the site remains active and is known to be blocked by PhishDestroy, a security tool. The low detection rate by security vendors does not mitigate the risk, as even a single flag can indicate serious issues.

If a user has visited rabia-irshad2.github.io, it is crucial to take immediate action to protect personal and financial information. The user should change passwords for Amazon and any other accounts where the same credentials were used. Additionally, monitoring credit reports and account activity for any unusual transactions is recommended. Users should also consider running a comprehensive security scan on their devices to ensure no malware was installed during the visit. Reporting the incident to the appropriate security authorities and to the site's registrar, GitHub, Inc., is advisable to help mitigate the threat.