epdq[.]co[.]com

Analysis of epdq.co.com shows it is currently offline but was previously resolved to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain’s authoritative name servers are ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com. Registration records indicate the domain was created on August 16, 1997 and is registered through Moniker Online Services LLC. Reputation services assign low confidence scores: Scamadviser rates the site 35 out of 100 and Gridinsoft 39 out of 100, suggesting a high likelihood of malicious intent.

The domain appears on four independent blocklists—PhishDestroy, Polkadot, Enkrypt, and Codeesura—demonstrating that multiple security feeds have flagged it for phishing‑related activity. VirusTotal scanning reports a single positive detection out of 95 security vendors, confirming at least one vendor’s identification of malicious behavior. No SSL/TLS certificate is present, meaning any attempted HTTPS connections would fail or be forced to HTTP, a pattern often observed in phishing infrastructure.

While the domain’s current offline state limits immediate threat surface, the combination of low trust scores, blocklist presence, a positive VirusTotal flag, and Cloudflare hosting strongly indicates it was used as part of a phishing campaign. Defenders should add epdq.co.com to deny‑list rules at DNS and proxy layers, monitor for any resurrection of the domain, and ensure that any residual traffic is logged and inspected. Continuous verification of blocklist updates and periodic re‑scanning of the domain are recommended to capture any changes in its operational status.