Scan report · about 2 months agoPublic

www.amazonforum.com

143.204.238.19AS16509 · US

Submittedhttps://www.amazonforum.com/

Landed onhttps://www.amazonforum.com/s/· 1 redirect

Engine tags

Verdict

1 of 7 enginesSuspiciousAutomated

Own this site?

What happened

Step by step, from what the scanner recorded.

Load 8.4 s · 68 requests

01 · Visitor openswww.amazonforum.com

02 · Redirected · 1 hopSame host, another address/s/

03 · Page shown

Amazon Digital and Device Forumstyled as Amazon · high

04 · OutcomeCredential phishingA login page wearing a brand it does not own.

Be careful — warning signs found

Automated

It presents itself as Amazon while being hosted somewhere Amazon does not own. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

SupportingBrand impersonation detected

Amazon · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

InfoCross-domain scripts injected at runtime

2 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 143.204.238.19AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS: CN=Amazon RSA 2048 M01, O=Amazon, C=US · expires Dec 30, 2026
Redirects: 1 hop · / → /s/

WHOIS

Registrar: MarkMonitor Inc.
Created: Jun 13, 2005
Expires: Oct 16, 2027
Nameservers: ns-1022.awsdns-63.netns-1099.awsdns-09.orgns-2019.awsdns-60.co.ukns-451.awsdns-56.com

1 malicious21 suspicious

Hashes & fingerprints

Page Hashd8610312b92119ab303e0f101f56113695506877a7aa78cd6599c605d666535d Favicon Hash6945a742428b769486d09f07f945171fd420e9da31549810c03815442fc54fd1 DOM Hash95c27a3d87a975899f45d90583179d545a07a57c6a49c1dc4254a41bc4029b3f Screenshot pHashd5e08068f09fe70f JARM29d29d00029d29d21c41d41d00041d38d8d683f08c154e73a9de64943d64e4 JA4Xa373a9f83c6b_7022c563de38_2cdf432ec278 Cert ThumbprintD84A1FBA6A15B489657E722F345D072D010550E5 Cert IssuerCN=Amazon RSA 2048 M01, O=Amazon, C=US

Page capture

Live

Title “Amazon Digital and Device Forum” · brand shown: Amazon (high)

Visit Site

Engines

7 · time to verdict