Phishing detection: ashy-moss-0bc074f03.5.azurestaticapps.net
Amazon Screenshot
Investigate
Domain
ashy-moss-0bc074f03.5.azurestaticapps.net0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
51.124.91.155
ipinfo
Greynoise
URL
http://ashy-moss-0bc074f03.5.azurestaticapps.net/amazon-hel…
Phishunt analysis Beta
25
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.1 Brand in screenshot
- +3.0 OpenPhish
- +2.2 Country mismatch
- +2.1 ASN reputation
- +0.6 Brand impersonation in path
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Deep subdomain
- +0.2 Hyphens
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Page on a Microsoft Azure Static Web Apps subdomain imitates an Amazon Help Center (German/English path). The brand appears off its real host, and OpenPhish flags it, suggesting it harvests Amazon account credentials from visitors.
Brand impersonation in pathOpenPhishKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-23 · confidence 80%
Domain & Network
Whois
Registrar
MarkMonitor Inc.
Network
IP
51.124.91.155 GitHub actions
Country
The Netherlands
The Netherlands
Hosting
Microsoft Corporation
ASN
AS8075
TLS Cert
Microsoft TLS G2 RSA CA OCSP 10
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Amazon
Submit to blocklists