health-management-checkup-list[.]s3[.]ap-northeast-2[.]amazonaws[.]com

This domain, health-management-checkup-list.s3.ap-northeast-2.amazonaws.com, poses a significant risk of credential theft through phishing attacks. Analysis indicates that the domain is designed to mimic legitimate health management services, potentially tricking users into revealing sensitive information such as usernames, passwords, and personal health data. The domain leverages the trust associated with cloud storage services to appear more credible, enhancing its effectiveness as a phishing tool.

Infrastructure analysis reveals that the domain was created on May 12, 2026, and is registered through MarkMonitor Inc. It resolves to the IP address 3.5.184.195, which is located in South Korea (KR) and hosted on an AWS EC2 server in the ap-northeast-2 region. The domain's SSL certificate is issued by Amazon, further adding to its deceptive nature. According to VirusTotal, 13 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and has been taken offline. Google Safe Browsing also identifies it as a phishing domain, underscoring the high risk it poses.

If users have visited health-management-checkup-list.s3.ap-northeast-2.amazonaws.com, it is crucial to take immediate action to protect their data. Users should change passwords for any accounts they may have used on the site, especially those related to health management services. Enabling two-factor authentication (2FA) is strongly recommended to add an additional layer of security. Furthermore, users should monitor their accounts for any unauthorized activity and contact their healthcare provider if they suspect their personal health information has been compromised. Staying vigilant and avoiding suspicious links or emails is essential to prevent falling victim to similar phishing attacks in the future.