egetqoitoitriop[.]xyz

Analysis of the domain egetqoitoitriop.xyz, registered on 21 February 2026, shows that it is currently offline but was previously identified as a generic phishing infrastructure. The domain lacks an SSL certificate, indicating that any data transmitted would have been unencrypted. DNS resolution points to the IPv4 address 91.92.242.155, which is announced by AS202412 belonging to Omegatech LTD and geolocated to the Netherlands. The hosting IP appears on a single security blocklist and has been flagged by the PhishDestroy sinkhole, confirming its use in malicious campaigns.

VirusTotal records indicate that nine out of ninety‑three scanning engines flagged the domain as malicious, providing additional corroboration of its threat nature. No public page title or brand attribution has been observed, and the content of the site has not been captured, leaving the exact impersonation target unspecified. Defenders should immediately add egetqoitoitriop.xyz to blocklists at the DNS and proxy layers, enforce TLS inspection rules to detect any future attempts to serve content from this host, and monitor traffic to 91.92.242.155 for anomalous patterns.

Continuous re‑evaluation of the IP reputation is advised, as the address may be reused for other campaigns. Organizations that rely on threat‑intel feeds should correlate this indicator with internal logs to identify any prior exposure. The current offline status does not guarantee that the infrastructure will not be reactivated; thus, ongoing vigilance is recommended.