Phishing detection: amazon.support24h.app
Amazon Screenshot
No screenshot available yet
Captured automatically on the next refresh cycle
Investigate
Domain
amazon.support24h.app2 CT hosts on apex
urlscan
VirusTotal
Whois
IP
94.152.11.118
ipinfo
Greynoise
URL
https://amazon.support24h.app
Phishunt analysis Beta
25
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +2.6 Brand in subdomain
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.7 Unrecognised DNS provider
- +0.6 Registrar reputation
- +0.6 Suspicious TLD
- +0.4 Long domain
- +0.1 Deep subdomain
16 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Amazon name used as a subdomain of an unrelated '.app' support domain hosted in Poland, with scam-style keywords. Flagged by Google Safe Browsing for social engineering. Likely a fake support or account page collecting credentials.
Brand in subdomainGoogle Safe BrowsingKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-24 · confidence 60%
Domain & Network
Whois
Registrar
Key-Systems LLC
Network
Country
Poland
Poland
Hosting
Cyber_Folks S.A.
ASN
AS29522
TLS Cert
-
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Amazon
Submit to blocklists