login[.]app360[.]sbs

Analysis of login.app360.sbs confirms its classification as an e-commerce scam impersonating Amazon, based on observable infrastructure and detection data. The domain was registered on March 11, 2026, through NameCheap, Inc., and resolves to IP address 178.128.177.148, hosted on AS14061 (DigitalOcean, LLC) in the United States. Nameservers are set to dns1.registrar-servers.com and dns2.registrar-servers.com, consistent with registrar-default configurations. The SSL certificate is issued by Let's Encrypt (R12), providing HTTPS encryption but offering no inherent trust validation for the site's legitimacy.

As of July 24, 2026, the domain is offline, though prior activity is evidenced by its page title, 'Rick Astley - Never Gonna Give You Up (Official Video) (4K Remaster) - YouTube,' which does not align with Amazon's branding or typical phishing page content. This discrepancy suggests either misconfiguration, cloaking, or an attempt to evade detection by serving benign content to automated scanners. The domain is flagged by 15 of 94 security vendors on VirusTotal and appears on at least one security blocklist, including PhishDestroy. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification.

No evidence of a phishing kit or specific lure type (e.g., login portal, fake order confirmation) is present in the available data, though the 'Brand target' field explicitly identifies Amazon as the impersonated entity. Defenders should treat this domain as confirmed malicious infrastructure and prioritize blocking or monitoring for re-emergence. The hosting provider (DigitalOcean) and registrar (NameCheap) should be notified for potential takedown or suspension under their abuse policies. Given the domain's current offline status, further analysis of its operational phase is not possible, but historical detection data supports its role in e-commerce fraud.