esavisos[.]com

Analysis of esavisos.com indicates it is an active brand impersonation domain targeting Apple users with a tech support scam. The domain was registered on February 21, 2014, and currently resolves to 192.169.177.137, hosted on AS26496 (GoDaddy.com, LLC) in the US. Despite its long registration history, the site is flagged by Google Safe Browsing for social engineering and appears on at least one security blocklist. Seventeen security vendors on VirusTotal detect the domain as malicious, while the Gridinsoft trust score is 0/100, reinforcing its high-risk classification. The page title, 'El siglo | minianuncios,' does not directly reference Apple, but known intelligence confirms the site impersonates Apple as part of a tech support scam scheme. Infrastructure analysis reveals the domain uses Let's Encrypt SSL (R13) and is served via Nginx, with front-end technologies including Bootstrap, jQuery, and FancyBox—common in both legitimate and malicious sites. Nameservers are ns23.domaincontrol.com and ns24.domaincontrol.com, consistent with GoDaddy-managed domains. The domain has been included in two AlienVault OTX threat intelligence pulses, suggesting prior detection in other campaigns. Defenders should treat this domain as confirmed malicious. Block access at the network level, monitor for connections to 192.169.177.137, and alert users about tech support scams impersonating Apple. The exact content and redirection chains remain unanalyzed, but the combination of brand impersonation, social engineering flags, and vendor detections justifies immediate containment. No evidence suggests this is a false positive, and the site remains active as of July 12, 2026.