equinix-earner[.]ltd

Analysis of the domain equinix-earner.ltd shows a recent brand‑impersonation campaign targeting a broad set of financial‑related brands, as indicated by the page title "Equinix-Earner - The Smart Money Manager | Save. Invest. Retire." The domain was registered on May 26 2025 through Atak Domain Bilgi Teknolojileri A.Ş. and is hosted on a single IPv4 address (192.3.141.252) belonging to AS36352 (HostPapa) in the United States. No SSL certificate is present, meaning the site operates only over HTTP, which reduces transport‑layer trust and facilitates content manipulation.

Infrastructure details reveal only one nameserver configured for the zone, suggesting a minimal setup. Reputation scoring is extremely low, with Scamadviser assigning a trust score of 1 / 100 and Gridinsoft rating the site at 0 / 100. The domain is currently offline, and the threat‑intel community has taken it down; it is listed on one security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal scans report that three of ninety‑five antivirus engines flagged the domain, providing modest but corroborating evidence of malicious intent.

The scam type is classified as brand impersonation, and the "Brand target" field lists "across," implying that the site may be used to lure victims across multiple brand contexts rather than a single named entity. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑hosting attempts on the same IP range or ASN, and consider adding the host provider (HostPapa) to watchlists for similar future activity. Because the site lacks HTTPS, any captured traffic is unencrypted, but the absence of a certificate also indicates that the operators did not invest in securing the channel, which can be leveraged as an indicator of low‑sophistication campaigns.