payal135001-ship-it[.]github[.]io

This domain is flagged as a high-risk phishing site, specifically designed to impersonate Amazon and harvest user credentials. The fake login page mimics the legitimate Amazon website to trick users into entering their login information, which can be used for unauthorized access to accounts and potential financial fraud.

Analysis indicates that the domain payal135001-ship-it.github.io is currently active and has been flagged by 13 out of 95 security vendors on VirusTotal. The domain is registered through GitHub, Inc., and resolves to the IP address 2606:50c0:8000::153, which is located in the United States and associated with AS54113 Fastly, Inc. The site appears on one security blocklist and is blocked by PhishDestroy, further confirming its malicious intent.

If a user has visited this domain, it is recommended to immediately change the passwords for any Amazon accounts and any other accounts using the same or similar credentials. Additionally, users should monitor their financial statements for any unauthorized transactions. It is advisable to run a full system scan using updated antivirus software and to report the incident to the relevant authorities or the organization's IT security team.