elauctioneers[.]com

Analysis of elauctioneers.com confirms its classification as an active phishing domain targeting users through an auction-themed scam. The domain, registered via GoDaddy.com, LLC, resolves to IP address 41.196.200.193, hosted by Link Egypt (Link.NET) in Egypt. Infrastructure review reveals an MX record pointing to mx2.bmail.linkdatacenter.net, suggesting email capabilities that may be leveraged for credential harvesting or follow-up phishing attempts. The site's page title, 'Upcoming Auctions - ELAUCTIONEERE - Berlin,' indicates an attempt to impersonate a legitimate auction platform, though the exact brand being mimicked remains unconfirmed as no specific trademark appears in the available data. As of July 19, 2026, the domain remains operational, returning an HTTP 200 status code. Detection systems have flagged the domain on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Two of 91 security vendors on VirusTotal have identified the domain as malicious, though the low detection count does not preclude its threat status. The SSL certificate, issued by Let's Encrypt (YR2), provides basic encryption but does not validate the site's legitimacy. Defenders should treat this domain as high-risk and prioritize blocking both the domain and its resolving IP (41.196.200.193) at the network level. Email filtering rules should account for the associated MX record to mitigate potential phishing campaigns originating from this infrastructure. Further investigation into the site's content and backend is recommended to determine the full scope of its fraudulent operations.