2fsxxw73[.]r[.]us-east-1[.]awstrack[.]me

The domain 2fsxxw73.r.us-east-1.awstrack.me is a generic phishing site designed to deceive users into disclosing sensitive information. No specific brand or crypto drainer kit was identified in this campaign. As of the latest verification, the site has been taken offline, though it previously operated as a phishing page targeting victims through unsolicited links or messages.

Technical analysis of 2fsxxw73.r.us-east-1.awstrack.me reveals minimal detection at the time of assessment, with 0 of 95 VirusTotal vendors flagging it as malicious. The domain was registered through Nom-iq Ltd. dba COM LAUDE on February 21, 2026, and resolves to the IP address 18.164.96.35, hosted on Amazon Web Services within the US (AS16509). It appears on a single security blocklist (PhishDestroy) and uses an SSL certificate issued by Amazon RSA 2048 M01. The observed page title, 'chocolatedippedpbicecreambars.png (1545×2000)', suggests an attempt to disguise malicious activity as an innocuous image file. The site returned an HTTP 400 status code before being taken offline.

Users who encountered 2fsxxw73.r.us-east-1.awstrack.me should assume their credentials or personal data may have been compromised. Immediate steps include changing passwords for any accounts accessed after visiting the site, enabling two-factor authentication (2FA) where available, and monitoring financial or account activity for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts. If the site was accessed via email or messaging apps, mark the message as phishing to help prevent further distribution.