shubhamyadav8081[.]github[.]io

This domain is actively engaged in brand impersonation targeting Amazon, a high-value e-commerce platform. Analysis indicates the site presents a cloned interface designed to deceive users into submitting login credentials, payment details, or personal information under the pretense of legitimate Amazon services. The threat actor has constructed a near-identical replica of the Amazon login and checkout pages, increasing the likelihood of successful social engineering attacks against unsuspecting visitors. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain shubhamyadav8081.github.io is hosted on GitHub Pages and resolves to IP address 185.199.108.153, located in the US under AS54113 (Fastly, Inc.). The SSL certificate, issued by Let's Encrypt (R12), was registered through GitHub, Inc., with a creation date of February 28, 2026—an anomalous timestamp likely indicative of domain spoofing or incorrect metadata. VirusTotal detection ratios show 17 out of 95 security vendors flagging the domain as malicious, while the domain appears on one security blocklist. The page title explicitly reads 'Amazon Clone,' further confirming the intent of brand impersonation. Users who have visited shubhamyadav8081.github.io should immediately cease all interaction and assume credential compromise. If login details were entered, affected individuals must change their Amazon account password using a secure device and enable multi-factor authentication. Monitor financial statements for unauthorized transactions and report suspicious activity to the legitimate platform. Browser caches and saved credentials should be cleared to prevent persistent access. Given the high-risk classification and active status, network-level blocking of the domain and associated IP (185.199.108.153) is recommended for enterprise environments.