Skip to content
Live
Medium riskfirst seen 3 h ago

amazon-cloud-accounts-admin-bq.ph

55of 100

Credential phishing, aimed at employees. 94% likely a scam.

Copies AmazonHosted in SingaporeNew domain

Why it was flagged

How the score works
  • Name and certificate
  • Registration and DNS
  • VAKYN verdict
  1. "amazon-cloud-accounts-admin-bq" contains brand keyword "amazon", lure "account" (common-word brand)+25
  2. no mail servers, AS63949 AKAMAI-LINODE-AP Akamai Connected Cloud, same IP hosts 50 other flagged domain(s)+14
  3. lure words: account+10
  4. 4 hyphens, 30-character name+5
  5. certificate covers only this name+1

Evidence

Registration

Hosting

Country
Singapore
Network
AKAMAI-LINODE-AP Akamai Connected Cloud
IP
45.79.222.138

DNS

A
45.79.222.138
MX
none

Certificate

Issuer
Let's Encrypt
Names
1
Seen
30 Oct 2026 06:55 UTC

VAKYN verdict

450 ms

Eight questions about the site, each with how sure the answer is.

  • Likely used for phishing or a scam?

    yes94% sure

    • yes94%
    • no6%
  • How dangerous for an ordinary visitor?

    Probably malicious54% sure

    • Probably malicious54%
    • Clearly malicious40%
    • Unclear4%
  • What is it most likely for?

    credential phishing63% sure

    • credential phishing63%
    • payment fraud10%
    • legitimate9%
  • Which brand does it pretend to be?

    Amazon80% sure

    • amazon80%
    • none20%
  • Who is it aimed at?

    employees38% sure

    • employees38%
    • general public20%
    • bank customers15%
  • Would it ask visitors to sign in?

    yes86% sure

    • yes86%
    • no14%
  • Would it ask visitors to pay?

    yes57% sure

    • yes57%
    • no43%
  • Plausible innocent explanation?

    no96% sure

    • yes4%
    • no96%