Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://www.amazon-clone-azure-pi.vercel.app/
Detected Brand
Amazon
Country
USA
Confianza
100%
HTTP Status
200
Report ID
b01e4dc2-5ba…
Analyzed
2026-03-02 14:42
Final URL (after redirects)
https://amazon-clone-azure-pi.vercel.app/
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EC91EEB090927A3B01D383D2EF79AB9AB3D442D0FA47570502F4D3498AC9F1EED61C60 |
|
CONTENT
ssdeep
|
96:T6NOzBJoFDOG2jV/3C5QdeQiD/jmdRqUS/JdhLLPLk+:WYBJoDGghD/JdhLjw+ |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8e19394edcd14e4e |
|
VISUAL
aHash
|
000b01ffb430ffff |
|
VISUAL
dHash
|
72dbddbc65656515 |
|
VISUAL
wHash
|
000b01ff3030ffff |
|
VISUAL
colorHash
|
07207000000 |
|
VISUAL
cropResistant
|
828262eaeae28282,dbdf99a465656555,62db1adbdbef9dde,d9e6766663697926,4c9736666d595932,6c5e5e5e7e7c7c78,7d6b5fe7e74f4dcc,3b0d040404149594,b3e7676e6e7e3e2d |
Análisis de Código
Risk Score
65/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Amenaza: Phishing
• Objetivo: Usuarios de Amazon
• Método: Suplantación de identidad a través de un sitio web similar
• Exfil: No especificado, probablemente credenciales o datos de pago si el sitio estuviera más desarrollado.
• Indicadores: Alojamiento en Vercel, logo de Amazon.
• Riesgo: Alto
📊 Desglose de Puntuación de Riesgo
Total Risk Score
95/100
Contributing Factors
Free Hosting with Brand Logo
The use of free hosting combined with the Amazon logo is a strong indicator of a phishing attempt.
Domain Impersonation
The domain name closely resembles the real Amazon but is a clear imposter.
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Banking Credential Harvester
Objetivo
Amazon users (USA)
Método de Ataque
Brand impersonation
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Banking, Personal Info
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Amazon
Official Website
https://www.amazon.com
Fake Service
Amazon's retail platform.
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The attacker likely intends to trick users into entering their Amazon login credentials on a fake login page that mimics the real Amazon site. This allows the attacker to steal the victim's account.
Secondary Method: Malicious Redirect
The site could redirect to a more sophisticated phishing page that also requests additional personal or financial information.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
www.amazon-clone-azure-pi.vercel.app
Registered
Unknown
Registrar
Unknown
Estado
Active
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for www.amazon-clone-azure-pi.vercel.app
Found 1 other scan for this domain
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.