Skip to content
Live
Medium riskfirst seen 1 h ago

webmail.amazoncatch.com

64of 100

Credential phishing, aimed at shoppers. 98% likely a scam.

Copies AmazonHosted in United StatesNew domain

Why it was flagged

How the score works
  • Name and certificate
  • Registration and DNS
  • VAKYN verdict
  1. registered 1 min ago+32
  2. "amazoncatch" contains brand keyword "amazon", lure "webmail" (common-word brand)+23
  3. certificate issued 0 min after registration+5
  4. lure words: webmail (in subdomain)+3
  5. .com abuse prior−2
  6. registered for the minimum one year+2
  7. certificate covers only this name+1

Evidence

Registration

Age
1 h old
Registrar
Tucows Domains Inc.
Status
clientTransferProhibited, clientUpdateProhibited

Hosting

Country
United States
Network
FLY
IP
213.188.208.209

DNS

A
213.188.208.209
NS
elle.ns.cloudflare.com, norm.ns.cloudflare.com
MX
mail-5.blazingaio.com

Certificate

Issuer
Let's Encrypt
Names
1
Seen
30 Oct 2026 08:55 UTC

VAKYN verdict

412 ms

Eight questions about the site, each with how sure the answer is.

  • Likely used for phishing or a scam?

    yes98% sure

    • yes98%
    • no2%
  • How dangerous for an ordinary visitor?

    Clearly malicious60% sure

    • Clearly malicious60%
    • Probably malicious38%
    • Unclear1%
  • What is it most likely for?

    credential phishing62% sure

    • credential phishing62%
    • payment fraud15%
    • legitimate5%
  • Which brand does it pretend to be?

    Amazon78% sure

    • amazon78%
    • none22%
  • Who is it aimed at?

    shoppers38% sure

    • shoppers38%
    • general public35%
    • bank customers16%
  • Would it ask visitors to sign in?

    yes86% sure

    • yes86%
    • no14%
  • Would it ask visitors to pay?

    yes72% sure

    • yes72%
    • no28%
  • Plausible innocent explanation?

    no98% sure

    • yes2%
    • no98%