mantle-bridge-site[.]github[.]io

The domain mantle-bridge-site.github.io is currently active and identified as a high-risk brand impersonation threat targeting the brand Mantle. The site impersonates the legitimate Mantle domain and may be used to deceive users or steal sensitive information.

Analysis indicates that mantle-bridge-site.github.io is flagged by 1 of 95 VirusTotal vendors, suggesting a low but significant level of suspicion. The domain is registered through GitHub, Inc. and resolves to the IP address 198.18.0.177. It appears on 1 security blocklist, specifically PhishDestroy, which further corroborates its malicious nature. The SSL certificate is issued by Let's Encrypt / R12, a common choice for legitimate and phishing sites alike, but the presence of the certificate does not guarantee the site's safety.

The current status of the domain is active, and it is recommended that users avoid visiting this site. Security teams should monitor the domain for any changes in activity and consider blocking access to it within their networks. Additionally, users are advised to verify the URL of any site they visit, especially when dealing with financial or sensitive information, to ensure they are interacting with legitimate services.