amazonjob-opal[.]vercel[.]app

Analysis conducted on August 07, 2026 identifies amazonjob-opal.vercel.app as an active phishing domain targeting job seekers. The domain is hosted on Vercel's platform and resolves to the IP address 64.29.17.3. At the time of assessment, 10 out of 91 security vendors on VirusTotal have flagged this domain as malicious, indicating elevated risk. The domain also appears on one security blocklist, specifically PhishDestroy, which categorizes it as a phishing threat.

Infrastructure analysis reveals the domain was registered through Vercel, a legitimate hosting provider often exploited for rapid deployment of phishing pages due to its ease of use and free tier. The use of 'amazonjob' in the subdomain suggests an attempt to impersonate Amazon's employment or recruitment services, though the exact content and functionality of the site remain unconfirmed in this report. No additional details regarding the phishing kit, brand impersonation beyond the subdomain, or specific scam mechanics are available at this stage. Defenders should treat this domain as an active threat.

Organizations are advised to block access to 64.29.17.3 and the domain amazonjob-opal.vercel.app at the network perimeter. Security teams should monitor for connections to this IP or domain in logs, particularly from endpoints associated with job applications or human resources. Given the domain's presence on a security blocklist and detection by multiple vendors, further investigation into user interactions with this site is recommended to assess potential credential compromise or data exposure. If internal users report contact from this domain, standard phishing response protocols should be initiated, including password resets and device scans for affected accounts.