staging7[.]comparemyvpn[.]com

Analysis of staging7.comparemyvpn.com shows a high‑risk, active brand‑impersonation campaign targeting Amazon. The domain was registered on February 23, 2019 through Tucows Domains Inc. and resolves to the IP address 35.214.14.132, which is hosted in Great Britain and belongs to AS15169 (Google LLC). The site presents a valid Let's Encrypt certificate (R13) but returns HTTP 403, indicating restricted access or a protective block. Infrastructure fingerprints reveal a WordPress stack backed by MySQL and PHP, served by Nginx on SiteGround hosting; Yoast SEO, jQuery and Hotjar scripts are also detected. Nameservers ns1.siteground.net and ns2.siteground.net confirm the hosting provider. Security reputation is poor: the domain appears on the PhishDestroy blocklist, has a Gridinsoft trust score of 0/100, and VirusTotal reports 2 of 95 vendors flagging it as malicious. The page title "CompareMyVPN.com | Trusted VPN Reviews By The Experts" does not align with the Amazon impersonation claim, suggesting the site may be used for credential harvesting or fraudulent e‑commerce transactions. Defenders should block the IP address and domain at network gateways, add the domain to local blocklists, and monitor DNS queries for related subdomains. Users should be warned that any request for Amazon credentials or purchases originating from this URL is likely fraudulent, and any credentials entered should be assumed compromised.