Phishing detection: evaglamazon.com

Amazon
https://evaglamazon.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain evaglamazon.com3 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 45.200.32.162
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://evaglamazon.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
16 noiseheuristic risk score · not a probability
Keyword matchCountry mismatchNo CSP header
13 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Amazon by embedding the brand name within its domain string. The domain is 63 days old, hosted in Hong Kong via Zillion Network, and lacks standard HTTP security headers, suggesting a fraudulent storefront or credential-harvesting page targeting Amazon shoppers.

No brand linksKeyword matchCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-30 · confidence 52%
Domain & Network
Whois
Registrar Metaregistrar BV
Network
IP 45.200.32.162
Country Hong KongHong Kong
Hosting Zillion Network Inc.
ASN AS54801
TLS Cert -
External detection No external source flags this
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
m.evaglamazon.com 50 same apex same IP same nameservers similar name same registrar
active 2026-07-30
Top 1 of 1 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Registrar Metaregistrar BV
abuse@metaregistrar.com
Brand owner Amazon
stop-spoofing@amazon.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-30 05:47 UTC  ·  Last refreshed 2026-08-01 13:30 UTC