amazon[.]co-jpy[.]com

The domain amazon.co-jpy.com was registered on February 21, 2026 and is currently active. DNS resolution points to the IPv4 address 43.167.221.21, which is hosted in Japan under AS132203 at a Tencent Building on Kejizhongyi Avenue. Authoritative nameservers are a.dnspod.com, b.dnspod.com, and c.dnspod.com. The site serves HTTP status code 200 and presents a TLS certificate issued by Let’s Encrypt (certificate identifier E7). The page title returned by the server is "Privacy error," and no additional page content has been publicly disclosed. The domain is classified as a brand‑impersonation threat targeting Amazon and is associated with an ecommerce scam type. Risk level is high and the domain appears on two security blocklists, specifically PhishDestroy and PhishingDB. VirusTotal analysis shows that 14 of 93 scanning engines flag the domain as malicious, and Gridinsoft assigns a trust score of 0 out of 100. Registration was performed through Aceville Pte. Ltd. While the infrastructure details are clear, the exact malicious payload or credential‑harvesting mechanisms remain unknown due to the lack of visual page analysis. Defenders should immediately block traffic to 43.167.221.21 and add amazon.co-jpy.com to internal deny lists, monitor DNS queries for the domain, and consider sinkholing the associated IP range. Continuous re‑evaluation is advised as further intelligence becomes available.