Phishing detection: m.evaglamazon.com

Amazon
https://m.evaglamazon.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain m.evaglamazon.com3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 45.200.32.162
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://m.evaglamazon.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
16 noiseheuristic risk score · not a probability
Keyword matchCountry mismatchNo CSP header
14 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Mobile subdomain of a site impersonating Amazon, sharing the same Hong Kong-hosted IP as its parent domain. The 63-day-old domain lacks standard security headers and follows patterns consistent with a fraudulent storefront or credential-harvesting page aimed at mobile users.

No brand linksKeyword matchCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-30 · confidence 50%
Domain & Network
Whois
Registrar Metaregistrar BV
Network
IP 45.200.32.162
Country Hong KongHong Kong
Hosting Zillion Network Inc.
ASN AS54801
TLS Cert -
External detection No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
evaglamazon.com 50 same apex same IP same nameservers similar name same registrar
active 2026-07-30
Top 1 of 1 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Registrar Metaregistrar BV
abuse@metaregistrar.com
Brand owner Amazon
stop-spoofing@amazon.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-30 05:47 UTC  ·  Last refreshed 2026-08-01 13:30 UTC