xn--aaitropicalamazon-9rb.com - malicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned xn--aaitropicalamazon-9rb.com and returned a malicious verdict (score 63), categorised as phishing. The page resolved to 64.29.17.1 on Vercel, Inc in US. 4 domains and 2 IPs were contacted, over 41 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: malicious (score 63) · Confidence 72%
- Scanned URL:
https://xn--aaitropicalamazon-9rb.com/ - Domain: xn--aaitropicalamazon-9rb.com · IP: 64.29.17.1 · AS16509 · US
- Server: Vercel
- Page title: Açaí Tropical Amazon | Açaí Premium da Amazônia
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 17 22: · subject CN=xn--aaitropicalamazon-9rb.com
- HTTP requests captured: 41 · outgoing links: 30
- Scan tier: standard · observed 2026-08-21 06:30:08 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Homograph / mixed-script domain (IDN spoofing)
- Domain impersonates amazon (combosquat)
- Certificate issued < 48h ago
Detected technologies
- Vercel
- Next.js
Contacted infrastructure
- 64.29.17.1 - AS16509 Vercel, Inc (United States)
Observed indicators
- xn--aaitropicalamazon-9rb.com
- wa.me
- hebbkx1anhila5yf.public.blob.vercel-storage.com
- www.google.com
- 64.29.17.1
- 13.238.105.1
- https://xn--aaitropicalamazon-9rb.com/
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/47fe1b7cd6e6ed85-s.p.0~mcdl10zdfb3.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/8e6fa89aa22d24ec-s.p.0uvzar8hswo3p.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/a218039a3287bcfd-s.p.17-1enzs_j91b.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/c875c6f5d3e977ac-s.p.0g_ng0t~d_b9n.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/e2334d715941921e-s.p.12skym0rqknxy.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/media/e8f2fbee2754df70-s.p.0fzkl03jw-sdz.woff2?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/0ni.f8j~zb3vq.css?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/0q~9a0uycvexh.css?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/067y_s5n8-rju.js?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/03cxm7v28798s.js?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/00aczryfco484.js?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/0li_-2gu1ifmy.js?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
- https://xn--aaitropicalamazon-9rb.com/_next/static/chunks/turbopack-0e1t~9md4_sdi.js?dpl=dpl_JBjmbpq39mDcpdpYMMJmrDNDBNUV
Questions about xn--aaitropicalamazon-9rb.com
- Is xn--aaitropicalamazon-9rb.com safe?
- No. MalwareAnalyzer scanned xn--aaitropicalamazon-9rb.com on 21 Aug 2026 and returned a malicious verdict with a score of 63 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was xn--aaitropicalamazon-9rb.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of xn--aaitropicalamazon-9rb.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan