yaseenshaik1[.]github[.]io

yaseenshaik1.github.io is a tenant hostname on Fastly, not a separately registered domain. PhishDestroy first recorded this hostname on Jun 21, 2026. Stored content metadata identifies Amazon as the apparent target. The stored content classification is generic phishing. The assembled evidence scores 100/100 (critical).

Three independent sources are positive: VirusTotal, Google Safe Browsing, and Cloudflare Radar. VirusTotal recorded 16 detections among 91 engines: Criminal IP, alphaMountain.ai, BitDefender, CyRadar, Emsisoft, Forcepoint ThreatSeeker, G-Data, Google Safe Browsing, Gridinsoft, Lionic, MalwareURL, Netcraft, Sophos, URLQuery, VIPRE, Webroot on Jul 28, 2026 at 02:51 UTC. Google Safe Browsing flagged the domain: Social Engineering on Jun 21, 2026 at 12:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLScan completed without a malicious verdict (score 0) on Jun 24, 2026 at 08:12 UTC.

HTTP 200 was recorded on Aug 7, 2026 at 10:17 UTC. Fastly is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 185.199.111.153 on AS54113 (FASTLY - Fastly, Inc., US). The associated network metadata labels the endpoint as AS54113 Fastly, Inc. in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is GitHub.com. Captured page title: “Amazon”. DOM analysis completed on Jun 21, 2026 at 14:20 UTC; stored DOM score 100/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 01:59 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. The platform TLS certificate was issued by Let's Encrypt / R12 with validity through Jul 5, 2026; checked Jun 21, 2026 at 13:00 UTC.

Taken together, the page content and independent findings support classifying this hostname as Amazon-themed generic phishing.