e-scurltcb[.]info

The domain e-scurltcb.info is currently offline but was previously identified as a Facebook brand impersonation site. Infrastructure analysis shows the domain was registered through MIT and resolves to the IP address 163.61.188.89, which belongs to AS153568 (NEW DHAKA HARDWARE) and is geolocated in the United States. The domain uses the authoritative nameservers ns1.capricloud.com and ns2.capricloud.com, and no SSL certificate was observed, indicating that the site operated without HTTPS protection. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious intent.

VirusTotal scans reported that five of ninety‑five security vendors flagged the domain, reinforcing the suspicion of abuse. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. The page title returned by the HTTP response was "Esecure Bank," which does not align with the declared Facebook impersonation target, suggesting possible reuse of page content or a multi‑brand lure.

Defenders should add the domain and its associated IP address to network‑level blocklists, ensure DNS filtering solutions reference the observed nameservers, and monitor for any re‑registration attempts. Given the lack of SSL and the offline status, any future activation would likely repeat the same infrastructure patterns, so continuous observation of AS153568 activity is advised. Organizations should also update endpoint protection signatures to include the five vendors that reported detections, and consider sharing this indicator set with threat‑intelligence communities to broaden coverage.