uzgovcyber[.]tilda[.]ws

This domain, uzgovcyber.tilda.ws, is currently under investigation for brand impersonation targeting Amazon. Registered on May 20, 2026, through GoDaddy.com, the domain resolves to 194.48.203.16, hosted in Ireland under Tilda Publishing Ltd. Infrastructure analysis reveals the use of Tilda website builder technology, with nameservers distributed across AWS (ns-118.awsdns-14.com, ns-1258.awsdns-29.org, ns-1912.awsdns-47.co.uk, ns-985.awsdns). The page title, written in Russian, translates to 'Register your complaint on the official site. Receive a reward for helping in the capture,' suggesting a fraudulent scheme designed to deceive users into engaging under false pretenses of compensation or official Amazon processes. The domain remains active as of July 12, 2026, returning an HTTP 200 status. SSL certification is provided by GlobeSSL DV CA via CentralNic Luxembourg Sàrl. While the domain appears on one security blocklist (PhishDestroy) and holds a Gridinsoft trust score of 0/100, no detections were reported by the 91 vendors that scanned it on VirusTotal. The absence of detections does not confirm legitimacy, particularly given the domain's association with known phishing infrastructure patterns. Defenders are advised to monitor this domain closely, particularly in regions where Russian-language users may be targeted. Further analysis of the site's content and backend infrastructure is recommended to confirm the full scope of the threat and potential payload delivery mechanisms.