eu-127[.]top

Analysis of the domain eu-127.top indicates that it was registered on February 21, 2026 through Gname.com Pte. Ltd. The authoritative name servers a12.share-dns.com. and b12.share-dns.net. resolve the name to the IP address 182.16.8.234, which belongs to AS45753 Netsec Limited and is geolocated in Hong Kong. No TLS certificate is present, meaning all HTTP traffic would be unencrypted. The page title returned by the server is the literal string “eu-127.top”.

The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of confidence. VirusTotal has processed the host and eight of ninety‑three scanning engines returned a malicious verdict, confirming the presence of malicious activity. The domain is currently reported as taken offline.

Although the specific phishing payload or target brand has not been disclosed, the combination of low trust score, blocklist presence, multiple vendor detections, and lack of SSL suggests a high likelihood of credential‑harvesting or other fraudulent behavior. Defenders should continue to block the domain at network perimeter devices, update DNS sinkhole lists, and monitor for any residual connections to the associated IP. Incident response teams should also consider querying threat‑intel feeds for any emerging indicators related to AS45753 or Netsec Limited infrastructure, and verify that internal endpoints have not established recent outbound connections to 182.16.8.234. Because the site is offline, ongoing monitoring for re‑activation is advised.