epicurcork[.]pt

epicurcork.pt is currently flagged as a high‑risk generic phishing infrastructure. The domain resolves to IP 94.46.183.75, which is allocated to PT (AS24768) and listed under ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA. HTTP responses return a 301 redirect and the sole visible page title is “404 Not Found”. DNS configuration uses four authoritative name servers (nsp1‑nsp4.mydnspt.net) and MX records point to mx1.cleanmx.pt (priority 10) and mx2.cleanmx.pt (priority 20). The site presents a Let’s Encrypt R12 certificate and runs on Nginx with Bootstrap and jQuery components. Reputation services assign a trust score of 1/100 (Gridinsoft, Scamadviser). VirusTotal reports 14 of 95 vendors flagging the domain, and it appears in 17 AlienVault OTX pulses. Two phishing blocklists (PhishDestroy, PhishingDB) already list the domain, and it is present on two additional security blocklists. The domain was created on 24 Oct 2013 and remains active as of the latest check (12 Jul 2026). Evidence confirms malicious intent, but the specific payload or credential‑harvesting pages have not been observed. Defenders should add epicurcork.pt to outbound and inbound filtering rules, monitor DNS queries for the associated name servers, and consider sink‑holing the IP address pending further investigation. Continuous re‑scanning is advised to capture any changes in vendor detections or hosting infrastructure.