drishtiguptaa[.]github[.]io

This domain, drishtiguptaa.github.io, is identified as an active phishing site designed to impersonate Amazon, a major e-commerce platform. Visitors to this site are likely to encounter fraudulent login pages, payment forms, or other deceptive interfaces intended to harvest sensitive credentials, financial information, or personal data. The site mimics the appearance of legitimate Amazon services, increasing the risk of successful social engineering attacks against unsuspecting users. Analysis indicates the domain is hosted on GitHub Pages infrastructure, registered through GitHub, Inc., and resolves to the IP address 185.199.110.153, which is associated with Fastly, Inc. in the United States. The site employs a Let's Encrypt SSL certificate, lending a false sense of security to visitors. As of the latest assessment, the domain is flagged by 7 out of 95 security vendors on VirusTotal, and it appears on at least one security blocklist, specifically PhishDestroy. The page title explicitly displays 'Amazon,' further confirming its intent to deceive users into believing they are interacting with the legitimate platform. Users who have visited drishtiguptaa.github.io should take immediate action to mitigate potential risks. First, cease all interaction with the site and close any open sessions. If credentials or payment details were entered, change passwords immediately on the legitimate Amazon platform and monitor financial accounts for unauthorized activity. Enable multi-factor authentication where available to enhance account security. Additionally, consider running a full system scan using updated security software to detect any potential malware or tracking scripts that may have been deployed. Report the domain to relevant security teams or abuse contacts, such as GitHub's abuse reporting channels, to aid in its takedown.