khushi-kumari98[.]github[.]io

This domain khushi-kumari98.github.io is assessed as a generic phishing page designed to impersonate a legitimate e-commerce login portal, specifically mimicking Amazon branding. The page title “Amazon Website” indicates credential harvesting intent, typically targeting user login data and session credentials. Such infrastructure is commonly used in cloned login pages hosted on developer platforms to bypass initial trust filters.

Technical indicators confirm malicious classification across multiple datasets. VirusTotal reports 10/95 security vendors flagging the domain. The domain is hosted via GitHub, Inc. infrastructure and resolves to IP 185.199.111.153, also associated with AS54113 Fastly, Inc. SSL is issued by Let’s Encrypt (R12), and one security blocklist explicitly lists the domain. The page remains active at time of analysis.

The domain is currently still operational, increasing the risk of ongoing credential theft attempts. Users interacting with the page should assume all entered credentials are compromised. Recommended response actions include immediate password resets for any reused credentials, enabling multi-factor authentication, and clearing any session tokens associated with the login attempt. Network defenders should maintain blocking rules and monitor for lateral phishing reuse across similar GitHub Pages deployments.