epicheck[.]top

PhishDestroy identifies epicheck.top as an active credential harvesting domain designed to trick users into submitting sensitive login credentials under false pretenses. This domain mimics legitimate login portals—likely targeting banking, email, or e-commerce platforms—to steal usernames, passwords, or financial details. The site operates with a Let's Encrypt SSL certificate, which may lend an air of legitimacy to unsuspecting visitors, but this does not guarantee safety. This domain was flagged by PhishDestroy’s automated pipeline after VirusTotal returned 1/95 detections on March 12, 2026, despite its active status. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP address 188.114.96.3. Notably, its recent creation date and lack of detection on VirusTotal indicate this is a newly deployed threat likely still propagating through spam campaigns or social engineering lures. Users are advised to treat any interaction with epicheck.top as high-risk pending further investigation. If you visited epicheck.top and entered any credentials or personal information, immediately change passwords for affected accounts and enable two-factor authentication where possible. Scan your device for malware using trusted antivirus tools, monitor financial accounts for unusual activity, and report the domain to your IT security team or through PhishDestroy’s submission portal. Avoid revisiting the site and delete any saved bookmarks or cached data related to this domain. When in doubt, access services directly via verified URLs or official mobile apps.