stirka-premium[.]tilda[.]ws

This domain, stirka-premium.tilda.ws, is flagged for brand impersonation targeting Amazon, a major e-commerce platform. Analysis indicates the infrastructure is designed to mimic legitimate Amazon services, likely to harvest credentials or payment details from unsuspecting users. No specific drainer kit signatures have been identified at this stage, though the domain's structure and hosting pattern align with known phishing campaigns. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 194.48.203.17 and uses an SSL certificate issued by CentralNic Luxembourg Sàrl. It was registered on February 15, 2014, through GoDaddy.com. Despite its age, the domain currently shows 0 detections out of 95 engines on VirusTotal, indicating it has not yet been widely flagged. Google Safe Browsing (GSB) status remains unconfirmed, and no blocklist entries have been recorded as of this report. The domain remains active and continues to resolve, posing an ongoing risk to users. Response actions should include monitoring for changes in detection status, particularly on threat intelligence platforms, and potential takedown requests to the hosting provider. The absence of detections does not eliminate risk; users and organizations are advised to block access to this domain and implement additional verification steps for any communications purporting to originate from Amazon. Continuous scrutiny of related infrastructure is recommended to identify emerging threats.