en-ekubo[.]org

The domain en-ekubo.org is identified as a brand impersonation threat targeting StarkNet. No drainer kit has been detected, but the domain poses a significant risk due to its impersonation tactics and suspicious infrastructure.

Analysis of the domain reveals that it is flagged by 11 out of 95 security vendors on VirusTotal. The domain is registered through Tucows Domains Inc. and resolves to the IP address 147.182.179.210. It was created on October 24, 2024, and currently appears on 1 security blocklist. Notably, the domain lacks an SSL certificate, which is often a red flag for malicious sites.

The domain is currently taken offline, reducing immediate risk. However, stakeholders should monitor its status for any reactivation. Security teams should investigate the IP address 147.182.179.210 for signs of other malicious activity and consider adding the domain to internal blocklists to prevent accidental access. The domain's presence on blocklists and its VirusTotal score indicate a potential ongoing threat, and users should be cautious of any related domains or IP addresses.