# amazonwebservices.security-unauthorised-request.com — MALICIOUS

> PhishDestroy identifies a fake AWS phishing domain (amazonwebservices.security-unauthorised-request.com) mimicking Amazon Web Services.

## Summary
PhishDestroy identifies an active, elevated-risk phishing domain designed to impersonate Amazon Web Services. The site amazonwebservices.security-unauthorised-request.com mimics legitimate AWS infrastructure, tricking users into entering credentials or downloading malware under the guise of an ‘unauthorised request’ notice. Visitors risk account takeover, data theft, or financial loss if they interact with the page, as it leverages AWS branding to appear authentic.  

This domain was flagged by 19 out of 95 security vendors on VirusTotal and has been blocked by multiple threat intelligence sources including PhishingArmy and PhishingDB. It was registered through GoDaddy.com, LLC on September 20, 2024, and resolves to IP address 3.174.46.92. The site even holds an SSL certificate purporting to be from Amazon, further enhancing its deceptive appearance. Its recent creation and high detection rate indicate an emerging but highly targeted threat.  

If you visited amazonwebservices.security-unauthorised-request.com, do not enter any credentials or download files. Disconnect from the internet if possible and run a full antivirus scan. Clear your browser cache and change passwords for sensitive accounts, especially AWS or Amazon-related logins. Report the domain to your IT team or security provider immediately. Stay alert for follow-up phishing attempts using this seed: b1c7ec.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2024-09-20 06:41:08
- Registrar: GoDaddy.com, LLC
- IP: 3.174.46.92

## Detection Status
- VirusTotal: 19 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishingArmy", "PhishingDB"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0302a3c3-0a40-4ea0-a7c3-1bde38ca7555
- PhishDestroy: https://phishdestroy.io/domain/amazonwebservices.security-unauthorised-request.com/
- LLM endpoint: https://phishdestroy.io/domain/amazonwebservices.security-unauthorised-request.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/amazonwebservices.security-unauthorised-request.com/
Last updated: 2026-03-24