earneliii-bsudbi[.]xyz

This domain, earneliii-bsudbi.xyz, is actively flagged as a high-risk phishing site targeting users under the guise of an 'EarnElite' program, as indicated by its page title. Registered on February 21, 2026, through a registrar service, the domain remains operational despite being blocked by multiple security engines, including PhishDestroy and BLP-Malware, and appearing in 23 threat intelligence pulses on a public threat exchange platform. Infrastructure analysis reveals the domain resolves to IP address 172.67.162.219, which is associated with a content delivery network known for masking origin servers. The site employs Cloudflare services, including Browser Insights and HTTP/3, alongside an SSL certificate issued by a major provider, which may complicate detection efforts. While 15 of 95 security vendors have flagged the domain, the exact nature of the phishing content—such as the targeted brand or specific social engineering tactics—has not been fully analyzed. Defenders should prioritize blocking this domain at the network level, particularly given its presence on two security blocklists and its persistent active status. Additional monitoring of related infrastructure, including the resolving IP and associated domains, is recommended to identify potential lateral movement or secondary campaigns. The domain's low trust score and consistent detection across multiple sources underscore the need for immediate containment.