earnwalking[.]com

Analysis indicates that earnwalking.com was registered on May 12 2026 through Global Domain Group LLC. The domain resolves to IP address 91.218.49.176 with an IP location listed as UA under Virtual Systems LLC. Current status remains active and the HTTP response returns status code 200. Infrastructure analysis reveals the nameservers jill.theonionhost.com and ray.theonionhost.com along with an SSL certificate from Let's Encrypt R12. The observed page title matches Earn Walking — Walk, map, earn.

This domain appears on exactly one security blocklist where it is blocked by PhishDestroy. Gridinsoft reports a trust score of 24 out of 100. VirusTotal shows detections from two out of 95 security vendors while AlienVault OTX lists the domain in one threat intelligence pulse. These indicators align with the recorded threat type of generic phishing and high risk classification.

Uncertainties remain around the exact duration of active operation since registration and any potential future changes to the hosting provider or nameserver configuration. No additional ASN details or brand impersonation targets are recorded in the available data.

Defenders should implement network blocks for the resolved IP address and associated nameservers to limit exposure. Continuous monitoring of traffic to 91.218.49.176 is advised along with review of any inbound links referencing the domain title. Existing blocklist entries provide a baseline for immediate containment actions while further correlation with internal logs can confirm involvement in phishing campaigns.