epostcaribbean[.]com

Analysis as of July 24, 2026 indicates that the domain epostcaribbean.com is actively used in a phishing campaign. The domain resolves to the IPv4 address 162.214.190.13, which is assigned to the Unified Layer network (AS46606) located in the United States. Registration data shows the domain was created on June 22, 2016 and is registered through GoDaddy.com, LLC. The authoritative name servers are ns1.bluehost.com, ns2.bluehost.com and two additional entries referencing cwy.teq.mybluehost.me, suggesting the hosting environment is provided by Bluehost. An MX record points to epostcaribbean-com.mail.protection.outlook.com, indicating use of Microsoft Office 365 email services for outbound mail. The web server identifies as Apache HTTP Server and presents an SSL certificate issued by Let’s Encrypt (R13) covering the host name.

Despite the certificate, an HTTP request returns a status code of 200 while the page title reports “403 Forbidden”, implying that the site may be intentionally returning a forbidden response to hide malicious content. Reputation services flag the domain heavily. Scamadviser assigns a trust score of 11 out of 100, and Gridinsoft rates it 0 out of 100. VirusTotal records nine detections out of ninety‑five scanned security vendors, confirming that multiple AV engines consider the domain malicious. The domain appears on a single public blocklist and has been listed by PhishDestroy as a blocked entity.

AlienVault OTX references the domain in seventeen threat‑intelligence pulses, reinforcing its association with known phishing activity. Given the convergence of low trust scores, multiple vendor detections, active blocklisting, and infrastructure characteristics typical of phishing operations, defenders should treat epostcaribbean.com as high‑risk.