Phishing detection: loja.amazon-promos.shop

Amazon
https://loja.amazon-promos.shop Access site
Screenshot
Screenshot of loja.amazon-promos.shop
Investigate
Domain loja.amazon-promos.shop0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 78.142.242.34
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://loja.amazon-promos.shop
urlscan Wayback archive.today
Cert Let's Encrypt
crt.sh Censys Google CT
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 urlscan.io
  • +3.7 Brand in domain label
  • +2.4 ASN reputation
  • +2.2 Country mismatch
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.7 Brand in cert SAN
  • +0.7 Bulletproof DNS
  • +0.7 Suspicious TLD
  • +0.5 Young certificate
  • +0.5 Long domain
  • +0.3 Free CA
  • +0.1 Hyphens
  • +0.1 External scripts
  • +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Fake shop

Site impersonates Amazon as a fake promotional store targeting Brazilian users, with Portuguese branding and a promo-themed domain on the .shop TLD. Confirmed malicious by URLscan, hosted in Brazil via Hostinger, and using a Let's Encrypt certificate with Amazon branding embedded in the SAN field.

urlscan.ioBrand in domain labelBrand in cert SAN
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-28 · confidence 75%
Domain & Network
Whois
Network
IP 78.142.242.34
Country BrazilBrazil
Hosting Hostinger International Limited
ASN AS47583
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Hostinger International Limited
abuse@hostinger.com
Brand owner Amazon
stop-spoofing@amazon.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-28 15:04 UTC  ·  Last refreshed 2026-08-31 09:30 UTC