ajey-2003[.]github[.]io

This domain, ajey-2003.github.io, is actively impersonating Amazon to harvest user credentials through a fraudulent login portal. Analysis of the page title and infrastructure confirms it is designed to mimic the legitimate Amazon website, tricking visitors into entering sensitive account details. The threat specifically targets users expecting to access Amazon services, potentially leading to unauthorized account access, financial fraud, or identity theft if credentials are compromised. Technical evidence supports the classification of this domain as a high-risk phishing threat. The domain is registered through GitHub, Inc., and resolves to the IPv6 address 2606:50c0:8000::153, hosted on AS54113 (Fastly, Inc.) in the United States. VirusTotal detection metrics show 13 out of 95 security vendors flagging the domain as malicious. Additionally, the domain appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt (R12), a common tactic to lend false legitimacy to phishing sites. The page title explicitly displays 'Amazon,' further confirming the intent to deceive users. Users who have visited ajey-2003.github.io or entered credentials on the site should take immediate action to mitigate risks. First, reset passwords for any accounts accessed or entered on the site, prioritizing Amazon and linked email accounts. Enable multi-factor authentication (MFA) where available to add an additional layer of security. Monitor financial statements and account activity for unauthorized transactions, and report any suspicious activity to the affected service provider. If personal or financial information was disclosed, consider placing a fraud alert or credit freeze with major credit bureaus. Finally, scan local devices for malware using updated security tools to ensure no additional compromise has occurred.