amazonalert[.]xyz

AmazonAlert.xyz was registered on April 28, 2026 through NameSilo, LLC. The domain resolves to the IPv4 address 172.67.189.76, an address hosted on the Cloudflare network. VirusTotal has recorded detections from 18 of 91 scanned security vendors, indicating that multiple AV engines classify the site as malicious. The domain is currently listed on the PhishDestroy blocklist and appears on one additional public blocklist, confirming that at least two independent threat‑sharing feeds are actively blocking traffic to it.

No public SSL certificate details, HTTP status codes, or page‑title information have been published, so the exact content served by the site remains unverified. The lack of additional contextual data prevents a precise determination of the phishing kit or targeted brand, but the classification as a generic phishing campaign aligns with the observed vendor detections.

Defenders should add the domain and its resolved IP address to outbound filtering rules, monitor DNS queries for lookups to 172.67.189.76, and ensure that email gateways flag any messages containing the domain. Continuous re‑scanning on VirusTotal and periodic checks against emerging blocklists are recommended to capture any changes in the threat posture.