platinumlist[.]live

The domain platinumlist.live was registered through NameCheap, Inc. on March 26 2025. DNS resolution points to the Cloudflare address 104.21.80.1, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The authoritative name servers are colette.ns.cloudflare.com and peter.ns.cloudflare.com, indicating the use of Cloudflare’s CDN and DNS services. No TLS certificate was observed; the site served HTTP only and returned a 200 OK status when queried, with the page title reported as “Events in Dubai”.

The site has been taken offline, and monitoring services such as PhishDestroy have listed it as blocked. Reputation checks show the domain appears on a single security blocklist and received flags from two of ninety‑five VirusTotal scanners. Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. The limited detection footprint suggests the site was either short‑lived or targeted a narrow audience before being shuttered.

Evidence confirms a generic phishing intent, although the exact phishing kit or credential‑stealing mechanism has not been disclosed. Analysts should continue to monitor the associated IP address for any resurgence of malicious activity, especially given its Cloudflare hosting which can be repurposed for future campaigns. Defensive actions include adding the domain and its IP to blocklists, enforcing DNS‑based filtering, and ensuring that any outbound traffic to the Cloudflare edge nodes is inspected for anomalous payloads. Organizations that have previously received phishing emails referencing “Events in Dubai” should treat any related communications as fraudulent and advise users to refrain from clicking links or providing credentials.