amruthalahari2704-oss[.]github[.]io

This domain, amruthalahari2704-oss.github.io, is flagged as a high-risk generic phishing site. Analysis indicates it hosts a Netflix clone, designed to deceive users into submitting login credentials, payment details, or other sensitive information under the guise of a legitimate streaming service. The use of a well-known brand increases the likelihood of successful social engineering, particularly among users accustomed to entering credentials on the official platform. No specific drainer kit signatures have been identified, but the site employs standard phishing techniques, including form submission spoofing and SSL encryption to appear authentic. Infrastructure analysis reveals the domain is registered through GitHub, Inc., resolving to the IP address 185.199.109.153, hosted on AS54113 (Fastly, Inc.) in the United States. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. VirusTotal detection metrics show 15 out of 95 security vendors have flagged the domain as malicious, while it appears on one security blocklist. The domain's creation date aligns with recent phishing campaigns, though exact registration details are obfuscated by the hosting provider's policies. Google Safe Browsing (GSB) status is not explicitly provided, but the presence on a single blocklist suggests limited but confirmed malicious activity. As of the latest assessment, the domain remains active and continues to pose a significant risk to users. Automated takedown requests have been submitted to the hosting provider, but no immediate action has been observed. Users are advised to avoid interacting with the domain, and organizations should update web filters to block access. The remaining risk is classified as high due to the domain's operational status, brand impersonation, and confirmed detection by multiple security vendors. Network defenders should monitor for related indicators, including the IP address and SSL certificate thumbprint, to prevent further exploitation.