site-el[.]com

Analysis indicates that the domain site-el.com was registered through Tucows Domains Inc. on 20 November 2025. The authoritative name servers are brodie.ns.cloudflare.com and haley.ns.cloudflare.com, pointing to Cloudflare’s network (AS13335). DNS resolution returns the IP address 172.67.189.243, which is geolocated to the United States and belongs to Cloudflare, Inc. The site currently returns an offline status and has been taken down, but it was previously listed on one security blocklist and is actively blocked by the PhishDestroy feed. The page title observed during the brief crawl was "Elysian Capital – Elysian Capital," suggesting an attempt to impersonate a financial entity, although no SSL certificate was presented and the site operated over plain HTTP.

Gridinsoft assigned a trust score of 0 out of 100, indicating a high confidence of malicious intent. VirusTotal analysis shows that 8 of 95 scanning engines flagged the domain, reinforcing the suspicion of abuse. The combination of a recent registration, lack of TLS, low trust rating, and multiple vendor detections aligns with a generic phishing campaign targeting users of the named brand.

However, the limited number of blocklist entries and the absence of additional public indicators leave the full scope of the operation unclear. Defenders should block the domain at network perimeter, update intrusion-prevention signatures with the observed IP and name-server pair, and monitor for any future re-registration attempts. Continuous observation of the associated IP and related Cloudflare assets is recommended, as attackers may shift hosting while retaining the same infrastructure.