# di-elen.com — SUSPICIOUS

> di-elen.com is hosting a low-risk phishing campaign. Learn how this domain operates and why you should avoid it today.

## Summary
PhishDestroy identifies di-elen.com as an active phishing domain with a low risk level. The threat primarily involves generic phishing attempts targeting unsuspecting users.

The domain was created recently on October 07, 2025, and is registered through Ultahost, Inc. It resolves to IP 159.100.6.5. VirusTotal flags only 1 out of 95 security vendors, but the low PageSpeed score of 36/100 indicates a hastily deployed phishing setup, consistent with typical scam infrastructure.

Users should exercise caution and avoid interacting with di-elen.com. The domain remains active and under monitoring. Employing standard phishing defenses and blocking this domain is recommended to mitigate potential risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: DI Elen

## Domain Intelligence
- Registered: 2025-10-07 12:15:15
- Registrar: Ultahost, Inc.
- IP: 159.100.6.5
- Nameservers: ns1.ultahost.com ns2.ultahost.com ns3.ultahost.com ns4.ultahost.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d01da-4e06-723a-b7e9-df871cfad18f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4c8377eb-883f-41a6-be98-516d7ea10581
- PhishDestroy: https://phishdestroy.io/domain/di-elen.com/
- LLM endpoint: https://phishdestroy.io/domain/di-elen.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/di-elen.com/
Last updated: 2026-03-19