eciipses[.]xyz

Analysis of eciipses.xyz shows it was created on 03 July 2025 and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to IP address 142.250.185.100, which belongs to Autonomous System AS15169 owned by Google LLC and is geolocated in the United States. No TLS certificate is presented, indicating the site served only over HTTP. The page title returned by the server is “Google”, matching the declared brand target of Google and the listed scam type of Brand Impersonation.

VirusTotal records indicate that three out of ninety‑five scanning engines flagged the domain as malicious, and the domain is listed on a public blocklist and has been actively blocked by the PhishDestroy mitigation service. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious classification. The domain is currently taken offline, but the underlying IP is part of legitimate Google infrastructure, which could allow rapid resurrection of the site or use of the same host for other malicious domains.

Defenders should add eciipses.xyz to DNS‑based blocklists, monitor outbound traffic for connections to 142.250.185.100, and watch for any future DNS changes that might point the domain to a different host. Because the site currently lacks a TLS certificate and only a generic page title is available, deeper content analysis is not possible, but the alignment of registration data, brand‑targeted title, low trust score, and multiple vendor detections provides sufficient evidence to treat the domain as a confirmed Google brand impersonation threat. Continued surveillance of the registrar and associated IP range is recommended to detect re‑use of this infrastructure.