amz0n[.]shop

amz0n.shop is a newly registered domain observed in active phishing infrastructure as of the 29 July 2026 reporting date. The domain was created on 10 June 2026 and is registered through GNAME.COM PTE. LTD., a registrar that frequently appears in malicious registrations. DNS resolution points to the address 43.110.34.173, which is currently listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service.

VirusTotal analysis shows that 17 of 91 scanning engines have flagged the domain as malicious, indicating a consensus among a minority of scanners while the majority have not yet generated a detection. The domain is classified as generic phishing and assigned an elevated risk rating, reflecting the combination of recent creation, active blocklist presence, and partial vendor detections. No public page title, SSL certificate details, HTTP response codes, or content snapshots have been published, so the exact phishing lure or targeted brand cannot be confirmed at this time. The lack of visible page metadata limits the ability to attribute a specific campaign kit or victim profile, but the existing evidence is sufficient to treat the domain as a hostile resource.

Defenders should incorporate the domain and its associated IP address into perimeter blocking rules, DNS sinkhole configurations, and any automated URL filtering solutions. Continuous monitoring of the IP 43.110.34.173 for additional malicious activity is recommended, as well as periodic re‑scanning of the domain on VirusTotal and other multi‑engine platforms to capture any changes in detection status. Organizations using threat‑intel feeds should ensure that the domain appears in their blocklists and that alerts are generated for any internal DNS queries or outbound connections to the address.