ScanMalware.com

Security Scan Report: atoz.amazon.work

Redirected to: https://atoz-login.amazon.work/?source=ac

Site favicon
Submitted: Nov 6, 2025, 2:06:23 AMCompleted: Nov 6, 2025, 2:08:11 AMpubliccompleted
Loading additional data...

Summary

This website contacted 59 IPs in 2 countries across 9 domains to perform 36 HTTP transactions. The main domain is atoz-login.amazon.work.

Submitted URL: https://atoz.amazon.work/

Effective URL: https://atoz-login.amazon.work/?source=acRedirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Phishing site impersonating Amazon A to Z login; do not enter any credentials.

Risk Factors
Brand impersonation/typosquatting on a non‑official Amazon subdomain
Unranked domain with no established reputation
Newly registered or unknown‑age domain
Login form collecting user credentials
Domain age information unavailable

Details

Page Title

Amazon A to Z Login

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

other

(70%)

Domain Information

The domain name 'atoz.amazon.work' uses the .work top-level domain, featuring subdomain 'atoz'. The core label 'amazon' covers 6 characters with 3 vowels and 3 consonants. Breaking it apart gives one word: amazon. Median word length is six characters. 'amazon' most often appears in English. You will also see it in Indonesian and Malay contexts.

Screenshot

Security scan screenshot of https://atoz.amazon.work/

Page Load Overview

70.58s
Total Load Time
36
HTTP Requests
9
Domains
222 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:9,048 chars
Detector Agreement:67%

Website Classification

Primary Category

other70% confidence
Type: static
Method: ml+structural

All Detected Categories

other
70%
e-commerce
54%
suspicious phishing
40%
malicious
38%
legitimate website
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3652.222.214.37United States
AS16509AMAZON-02
052.222.214.80United States
AS16509AMAZON-02
0142.250.181.234United States
AS15169GOOGLE
0142.250.186.131United States
AS15169GOOGLE
044.215.139.172Ashburn, Virginia, United States
AS14618AMAZON-AES
018.172.113.147United States
AS16509AMAZON-02
018.66.102.48United States
AS16509AMAZON-02
018.245.46.18United States
AS16509AMAZON-02
018.66.102.88United States
AS16509AMAZON-02
052.222.214.36United States
AS16509AMAZON-02
3659--

Detected Technologies3

Amazon Web Services
50%
HSTS
40%
Amazon CloudFront
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BAA2B7A55148263362538FDC70747F5A72B3E24EDF4AD8315AB982C81BF3F686A03097

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:MJ4RxMvHkYrdfugP8756gzdj1gp6ggL58gsFFE+JgcvzaYKDNKoGLLhnavuPJPz7:MGRxMvHkYrN/P87ggzdj1gprgLig+m+9

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:22753:RJEYAfSwmUYCNBXBLd4NCLMmEbSZHRUyRgROgSRRIQtZjhLFIIEksB1JBCARFNEIRQGGkQkCWAAgdwioITEJFCgqkli8ExBG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffc3c3ffcfffff
Perceptual Hash:b064ce9b6565319e
Difference Hash:042016961016140c
Wavelet Hash:c399c3c3c3c3c3c3
Color Hash:#931f6d

Other Hashes

Crop Resistant:042016961016140c,0008301010080000

Scan History

Scan history not available

Unable to load historical scan data