yamaxnyvip[.]com
“Amazon”
yamaxnyvip.com — 内容不可用 (HTTP 502). 品牌冒充:Amazon; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 17/91 (alphaMountain.ai, CRDF, CSIS Security Group, Emsisoft, Fortinet); URLQuery 2 alerts; Spamhaus DBL_PHISH; PhishDestroy score 95/100. 注册商: GMO Internet.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, yamaxnyvip.com, is identified as a high-risk phishing site specifically targeting Amazon users. The threat type is credential harvesting through brand impersonation, and the domain remains active as of the latest analysis. The page title explicitly displays 'Amazon,' indicating an attempt to deceive users into believing they are accessing a legitimate Amazon login portal. Analysis indicates the domain was registered on February 23, 2026, through GMO Internet, Inc. Infrastructure analysis reveals it resolves to the IP address 104.21.56.184. The domain has been flagged by 8 of 95 security vendors on VirusTotal, suggesting a recognized malicious presence. No additional blocklist counts or trust scores were provided, but the early detection by multiple vendors underscores its risk level. The domain remains operational, posing an ongoing threat to users who may inadvertently submit login credentials or personal information. Organizations and individuals are advised to block access to yamaxnyvip.com at the network level and update endpoint protection rules to include this domain. Users should be educated on recognizing phishing attempts, particularly those impersonating major brands. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | yamaxnyvip.com |
malicious | Sinkholed |
| DigiCert UltraDNS | yamaxnyvip.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告
PD-20260627-C2F6B7 Recipient: abuse@internet.gmo 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。