ksj[.]d7jyu2dnjykvx[.]amplifyapp[.]com

Analysis of ksj.d7jyu2dnjykvx.amplifyapp.com shows a high‑risk generic phishing operation that was taken offline prior to the report date of July 23, 2026. The domain was registered on February 21, 2026 and hosts an SSL certificate identified as R12, indicating a self‑signed or otherwise low‑trust certificate. The page title returned by the site is the domain name itself, providing no additional context about the intended victim or lure.

Malware scanning services on VirusTotal recorded 18 positive detections out of 95 participating vendors, confirming that multiple security products consider the host malicious. The domain is listed on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating consensus among threat‑blocking communities. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the assessment of a malicious payload or credential‑harvesting intent.

No public information about the hosting IP, autonomous system number, or registrar was supplied, and the site’s content has not been captured for deeper inspection. Defenders should ensure the domain is added to local and network‑level deny lists, verify that any existing URL filtering solutions incorporate the four blocklists that already flag this host, and monitor for any rapid re‑registration attempts or aliases that reuse the same naming pattern. Continuous telemetry from endpoint protection platforms should be examined for the 18 vendor detections to identify any compromised hosts that may have interacted with the site before its takedown.