eapp-academy[.]tilda[.]ws

This domain is under investigation for brand impersonation targeting Amazon. Analysis indicates the site presents itself as an official Amazon platform, potentially deceiving users into disclosing credentials or sensitive information under false pretenses. The specific threat type—brand impersonation—leverages trusted corporate identity to bypass user skepticism, increasing the likelihood of successful compromise. Infrastructure analysis reveals the following technical indicators: VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged. The domain is registered through GoDaddy.com and resolves to the IP address 194.48.203.16. The SSL certificate is issued by CentralNic Luxembourg Sàrl, a common provider for legitimate and malicious domains alike. The domain was created on February 15, 2014, which may be leveraged to lend an appearance of legitimacy. No blocklist entries or trust score downgrades were identified at the time of assessment, though the page title 'ЕAPP' (non-Latin characters noted) aligns with tactics used in phishing campaigns to evade detection. Mitigation steps specific to brand impersonation threats include immediate verification of the domain against official Amazon communication channels. Network-level blocking of the IP address 194.48.203.16 and domain eapp-academy.tilda.ws is recommended for organizations to prevent user access. End-users should be trained to inspect domain names for subtle misspellings, non-standard characters, or mismatched branding elements. Security teams are advised to monitor for credential submissions or data exfiltration attempts originating from this domain, particularly if it has been accessed by internal users. Proactive hunting for related infrastructure, such as subdomains or associated IPs, may uncover broader campaign activity.