ino[.]xyz

Analysis of the domain ino.xyz indicates active phishing infrastructure with a high-risk classification. Registered on April 24, 2026, through Sav.com, LLC, the domain currently resolves to IP address 76.223.54.146, hosted on AWS Global Accelerator infrastructure in the United States. The domain is flagged by one security blocklist and appears in two AlienVault OTX threat intelligence pulses, suggesting ongoing malicious use. VirusTotal reports detection by 5 of 94 security vendors, though the specific nature of the phishing content remains unconfirmed due to limited public analysis. Infrastructure details reveal nameservers ns1.afternic.com and ns2.afternic.com, and an SSL certificate issued by GoDaddy.com, Inc. The HTTP status returns 200, confirming the site is accessible. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. Defenders should treat this domain as active phishing infrastructure, block resolution at DNS and network levels, and monitor for credential harvesting or malware distribution. Further investigation is required to determine the exact phishing kit or targeted brand, as no specific victim organization or scam type is currently identified in available intelligence.