institutoamazonico[.]edu[.]pe

The domain institutoamazonico.edu.pe is currently active and returns HTTP 200 responses over a valid Let's Encrypt (R13) certificate. DNS resolution points to 170.249.206.98, an address located in the United States and announced by AS63410 PrivateSystems Networks. The web server is Nginx hosting a site built with Bootstrap and accelerated by Google PageSpeed, and the page title is “Amazonico”. Intelligence flags the site as a brand‑impersonation campaign targeting the Amazon brand and classifies the operation as an e‑commerce scam. Registration was performed through NIC.PE, and the domain appears on the PhishDestroy and PhishingDB blocklists, as well as two additional security blocklists. Reputation data show a Gridinsoft trust score of 0 / 100 and 9 of 95 VirusTotal scanners have reported malicious activity. AlienVault OTX contains the domain in 50 threat‑intel pulses. Nameservers ns3.institutoamazonico.edu.pe and ns4.institutoamazonico.edu.pe resolve to the same IP. Defenders should block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP, and include the domain in threat‑intel feeds. Ongoing observation is advised to detect any evolution of the phishing infrastructure, as the content of the site beyond the page title has not been publicly analysed.