echo-api-ui[.]cmatcer[.]top

The domain echo-api-ui.cmatcer.top was registered on 17 July 2024 through Gname.com Pte. Ltd. It resolves to the IPv4 address 182.16.53.60, which is advertised as belonging to Netsec Limited in Hong Kong (AS45753). The authoritative name servers are a4.share-dns.com and b4.share-dns.net. TLS is provided by a Let’s Encrypt certificate (YR2). An HTTP GET returns status 200 and the page title is reported as "DEV_TITLE". VirusTotal scans have flagged the domain on three of ninety-one engines, and Gridinsoft assigns a trust score of zero out of one hundred. The site is currently listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. The risk rating is high and the operational status is active. Analysis indicates that the infrastructure aligns with a typical generic phishing campaign, but the specific payload or target brand has not been disclosed. The low trust score and multiple detections suggest malicious intent, yet the absence of detailed content analysis limits attribution of the exact phishing vector. Defenders should add the domain and its IP address to deny-list rules, enforce DNS sinkholing where possible, and monitor outbound connections to the 182.16.53.60 host. Continuous re-scanning with updated threat intel feeds is recommended to capture any changes in detection status or content.