in[.]econcell[.]pro

Analysis as of July 27, 2026 indicates that the sub‑domain in.econcell.pro remains active and is associated with a generic phishing campaign. The domain resolves to the IPv4 address 92.113.23.66; no authoritative name‑server records were returned during DNS queries, which suggests either a misconfiguration or deliberate hiding of the hosting infrastructure. The domain appears on a single public security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed has identified it as malicious.

VirusTotal has recorded detections from 2 of 91 scanned security vendors, providing additional independent confirmation of malicious intent. No further contextual data such as page title, SSL certificate details, or HTTP response codes have been published, leaving the exact content of the site unknown. The limited visibility into the hosting environment prevents attribution of the underlying autonomous system or geographic location, and the absence of name‑server information hampers attempts to trace upstream providers.

Defenders should immediately add in.econcell.pro to network‑level deny lists, enforce DNS‑based filtering, and consider sinkholing or black‑holing the resolved IP address 92.113.23.66 to disrupt traffic. Continuous monitoring of passive DNS feeds and periodic re‑scans on VirusTotal are advised to capture any changes in detection counts or additional indicator updates. Organizations that rely on email or web gateway protections should ensure that their phishing‑prevention modules are updated to include this indicator, and incident response teams should treat any inbound communications referencing the domain as potentially malicious.