stock-earning[.]org

Analysis of stock-earning.org indicates that the domain is actively being used for malicious phishing operations. The domain was registered through Dynadot Inc on October 18, 2025 and is currently resolved to the IPv4 address 66.85.46.67. DNS resolution is served by the authoritative name servers ns1.spantrix.com and ns2.spantrix.com. Threat intelligence feeds show that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming its malicious intent.

VirusTotal scans have recorded 15 detections out of 91 security vendors, reinforcing the high‑risk assessment. The site’s status is listed as active, and no evidence of mitigation or takedown has been observed. At present, no public page title, SSL certificate details, or HTTP response codes have been disclosed, leaving the exact content of the landing page unverified.

However, the convergence of registrar data, IP address association, name‑server configuration, blocklist inclusion, and multi‑vendor detections provides sufficient evidence for security teams to treat the domain as a confirmed phishing source. Defenders should immediately block traffic to stock-earning.org and the associated IP address 66.85.46.67 at network perimeters, update intrusion‑prevention signatures, and monitor for related command‑and‑control activity. Continuous re‑scanning of the domain through multi‑vendor services is recommended to capture any evolution in payload or hosting infrastructure.