eshtrakati[.]com

The domain eshtrakati.com has been catalogued as a generic phishing site. It was registered on April 24 2026 through GoDaddy.com, LLC and is currently hosted on a Hostinger data center in Germany, resolving to IP 92.113.23.129. The site presents a valid HTTPS service using a Let’s Encrypt R12 certificate, and the web server returns HTTP 200 for the landing page whose title is “اشتراكات رقمية لأهم البرامج بأسعار منافسة | متجر اشتراكاتي”. Nameserver records point to artemis.dns‑parking.com and hermes.dns‑parking.com, typical of domains parked on GoDaddy’s default parking service.

Threat intelligence feeds have flagged the domain. PhishDestroy has added it to its blocklist, and it appears on a single external security blocklist. AlienVault OTX references the domain in one pulse, indicating that at least one community source has observed malicious activity linked to it. No detections have been reported on VirusTotal (0/95 scanners), but the absence of signatures does not imply benign intent, especially given the active phishing classification.

Current analysis is limited to the infrastructure and metadata; the actual page content has not been examined, so the specific tactics, credential‑harvesting forms, or payloads remain unknown. Defenders should treat eshtrakati.com as a high‑confidence phishing indicator. Network security devices should block outbound connections to the IP address 92.113.23.129 and DNS queries for the domain. Email security gateways should add the domain to blocklists and enforce URL filtering. Continuous monitoring of associated indicators, such as future VirusTotal scans or additional blocklist listings, is advised to capture any evolution of the threat.