amzonin[.]com

This domain, amzonin.com, is flagged as an active brand impersonation threat targeting Amazon. Analysis indicates the site presents itself as an official Amazon account security verification page, designed to harvest user credentials or sensitive information. The domain remains operational and poses a high risk to unsuspecting visitors. Infrastructure analysis reveals the domain was registered on June 26, 2026, through CNOBIN INFORMATION TECHNOLOGY LIMITED. It resolves to the IP address 178.16.54.253 and employs a Let's Encrypt SSL certificate to appear legitimate. Security vendors on VirusTotal have flagged this domain, with 15 out of 95 detecting it as malicious. The page title, 'Amazon.com - Account Security Verification,' further confirms its intent to deceive users by mimicking Amazon's branding. The domain remains active as of this report, and users are advised to exercise caution. Organizations should block access to 178.16.54.253 and amzonin.com at the network level. Individuals who may have interacted with the site should immediately reset their Amazon credentials and monitor accounts for unauthorized activity. Security teams are encouraged to update detection rules to include this domain and its associated indicators of compromise.