acb[.]nezertechy[.]com

This domain acb.nezertechy.com was registered on May 10, 2025 through the Atak Domain registrar and uses the eclorion.group name servers ns1.eclorion.group and ns2.eclorion.group. The authoritative IP address resolves to 198.23.193.170, which belongs to the HostPapa hosting provider (ASN 36352) and is geolocated in the United States. No TLS certificate is presented, indicating that the site is served only over HTTP. The page title returned by the web server is “Welcome to All Celebrities Bookings”, suggesting the site is attempting to pose as a celebrity‑booking service, although no further branding details are available.

Gridinsoft assigns a trust score of 0 out of 100, and the domain is listed on a single security blocklist. PhishDestroy has actively blocked the domain, and VirusTotal reports that 4 of 95 scanned vendors flagged the host as malicious. The domain is currently offline, which may be a temporary takedown by defenders or the operator. Evidence indicates a classic phishing infrastructure: recent registration, low‑reputation name servers, a bare‑bones hosting environment, and multiple detections.

What remains uncertain is the exact phishing kit or payload used, the presence of credential‑stealing forms, and any victim interaction logs. Defensive teams should continue to block the domain at network perimeter, add the IP 198.23.193.170 to deny‑list rules, and monitor for any future resolution to new addresses. Threat‑intel feeds should be updated to reflect the domain’s inclusion in blocklists, and any related indicators should be shared with upstream filtering services. Ongoing observation is advised in case the operator re‑hosts the phishing page on alternative infrastructure.