ht[.]ht1[.]htgyuguuu[.]xyz

The domain ht.ht1.htgyuguuu.xyz was designed to impersonate Amazon, posing risks to users attempting to access the site. With a VirusTotal (VT) detection score of 13 out of 95, it was flagged by multiple security vendors, indicating malicious activity associated with it. This domain aimed to deceive users into submitting sensitive information under the guise of a legitimate Amazon webpage.

Registered with Chengdu West Dimension Digital Technology Co., LTD, this phishing domain was relatively new, at 58 days old, and was hosted on an IP address located at 154.92.22.53. It had already been added to at least one blocklist, further highlighting its malicious intent. The infrastructure used shared characteristics typical of phishing attacks, enhancing its potential for exploitation.

As of now, ht.ht1.htgyuguuu.xyz has been taken down. PhishDestroy actively reported this domain, contributing to its removal from the active web space. Continuous monitoring will ensure that any attempt to revive this or similar threats is promptly addressed.