escortsunitha[.]com

This domain, escortsunitha.com, is flagged for brand_impersonation phishing targeting generic brand assets under the guise of escort services. Analysis indicates the site impersonates the brand 'across' through deceptive content, including a page title advertising 'Hyderabad Escorts - Best Call Girls Service | Rs 2500.' No specific drainer kit signatures were identified in initial scans, though the domain exhibits characteristics consistent with fraudulent advertising and potential credential harvesting infrastructure.

Technical indicators confirm elevated risk levels. The domain resolves to IP address 145.79.211.164, hosted on AS47583 (Hostinger International Limited) in India. It was registered through Hosting Concepts B.V. d/b/a Registrar.eu on February 21, 2026, an anomalous creation date suggesting potential domain spoofing or preemptive registration for malicious use. VirusTotal detection metrics report 11 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is blocked by at least one threat intelligence feed. SSL certification is provided by Let's Encrypt (R13), a common practice among phishing operators to lend superficial legitimacy to fraudulent sites.

Current status indicates the domain has been taken offline, likely in response to detection and reporting. However, residual risk persists due to the domain's registration remaining active, infrastructure reuse potential, and the possibility of migration to alternative hosting. Organizations and users are advised to monitor for reemergence under similar naming conventions, implement DNS-level blocking for the identified IP range, and verify the legitimacy of any domains mimicking generic brand terms. Proactive threat hunting should include retrospective analysis of network logs for connections to 145.79.211.164 and associated domains registered through the same registrar.