earneyyte-bdkibi[.]xyz

This domain, earneyyte-bdkibi.xyz, is flagged as a generic phishing infrastructure targeting users of a rewards or loyalty program branded as EarnElite. Analysis indicates the site likely functioned as a credential harvester or fake rewards portal, though no specific drainer kit signatures were identified in the available telemetry. The page title 'EarnElite' suggests an attempt to mimic legitimate incentive programs, potentially tricking users into submitting login credentials or personal data under false pretenses. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Spaceship, Inc., and resolves to the IP address 188.114.97.3. Detection metrics show a VirusTotal score of 1/95 security vendors, indicating low initial visibility but confirmed malicious classification. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100. Technologies detected include YouTube embeds, Cloudflare hosting, and HTTP/3 protocol support, with an SSL certificate issued by Google Trust Services. No association with Google Safe Browsing was recorded at the time of analysis. The domain is currently offline, having been taken down following detection by PhishDestroy. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the site prior to takedown. Organizations are advised to monitor for credential reuse attempts and review logs for connections to 188.114.97.3 or requests to earneyyte-bdkibi.xyz. Proactive blocking of the domain and IP at network perimeter controls is recommended to prevent potential re-emergence or lateral movement from compromised credentials.