# eko24.cc — SUSPICIOUS

> Check eko24.cc domain safety. Active phishing site with low risk flagged. Learn why eko24.cc is suspicious and how to stay protected.

## Summary
PhishDestroy identifies eko24.cc as a low-risk generic phishing domain. While the risk level is classified as low, the domain is still active and poses a potential threat to users who encounter it. This classification suggests limited current impact but warrants caution due to its phishing nature.

Supporting evidence includes the domain's recent creation date of March 11, 2026, indicating it is relatively new and possibly set up for malicious intent. It resolves to IP address 188.114.96.3 and appears on one security blocklist, which strengthens concerns about its legitimacy. VirusTotal analysis shows only 1 out of 95 vendors flagged the domain, reflecting minimal but notable suspicion. The domain is registered through NiceNIC International Group Co., Limited, a registrar sometimes used by malicious actors due to its less stringent oversight.

Mitigation advice includes avoiding any interaction with eko24.cc or links originating from it. Users should ensure their security software is up to date and be cautious of unsolicited communications referencing this domain. Despite the low risk rating, the domain remains active, so continuous monitoring is recommended to detect any escalation in malicious activity or changes in threat posture.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: eko24.cc | 522: Connection timed out

## Domain Intelligence
- Registered: 2026-03-11 19:07:01
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dane.ns.cloudflare.com", "paige.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Forcepoint ThreatSeeker"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce201-8881-720b-809a-00c7d1222d98.png
- PhishDestroy: https://phishdestroy.io/domain/eko24.cc/
- LLM endpoint: https://phishdestroy.io/domain/eko24.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/eko24.cc/
Last updated: 2026-03-19