raushan-k15[.]github[.]io

This domain, raushan-k15.github.io, is currently active and identified as a generic phishing site impersonating Amazon. The infrastructure is designed to harvest user credentials through fraudulent login portals, presenting a high-risk threat to visitors. The page title explicitly matches Amazon’s branding, increasing the likelihood of successful deception. Analysis indicates the domain is flagged by 9 of 95 security vendors on VirusTotal, with additional detections on one security blocklist. The site is hosted on GitHub’s infrastructure, resolving to the IP address 185.199.108.153, which is geolocated in the United States under AS54113 (Fastly, Inc.). The SSL certificate is issued by Let’s Encrypt (R12), a common choice for both legitimate and malicious sites. No historical registration data is available, as the domain leverages GitHub’s subdomain structure, obscuring traditional WHOIS records. The phishing page remains operational as of the latest verification. Users are advised to avoid interaction with the domain and report any suspicious login prompts. Organizations should update web filtering rules to block 185.199.108.153 and monitor for credential theft attempts originating from this infrastructure. Security teams are recommended to review logs for connections to raushan-k15.github.io and correlate with potential account compromise incidents.