sawanpanchal[.]github[.]io

The domain sawanpanchal.github.io is assessed as a high-risk phishing site. The specific threat type is generic phishing, which involves the use of deceptive web pages and emails to trick users into divulging sensitive information such as login credentials and financial data.

This domain is flagged by Google Safe Browsing as a phishing site. It is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is located in the United States and is part of the AS54113 Fastly, Inc. network. VirusTotal reports that 10 out of 95 security vendors flag this domain as malicious. The site is also blocked by PhishDestroy and appears on one security blocklist. The domain uses an SSL certificate issued by Let's Encrypt, which is valid for the current year (YR2). The exact creation date of the domain is not provided, but it is currently active and operational.

To mitigate the risks associated with this phishing site, users are advised to avoid accessing the domain and to report any suspicious activity to their network administrators or security teams. Security professionals should consider adding this domain to their firewall and DNS blocklists to prevent access within their networks. Additionally, users should be educated on the signs of phishing, such as suspicious URLs, unexpected prompts for credentials, and unverified SSL certificates, to reduce the likelihood of falling victim to such attacks.