centralpremiumnu[.]fun

PhishDestroy first observed centralpremiumnu.fun on Jul 15, 2026. The captured page title is “Not Acceptable!”. Current evidence score: 95/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Cloudflare Radar. VirusTotal recorded 19 detections among 91 engines: Criminal IP, alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Jul 25, 2026 at 02:03 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection on Jul 15, 2026 at 00:29 UTC. Google Safe Browsing returned no flag on Jul 15, 2026 at 00:30 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 02:28 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:30 UTC; content was unavailable. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Jul 9, 2026 as the creation date. Registration preceded first observation by 5 days. At collection time, the hostname resolved to 69.49.241.129 on AS31898 (Oracle Corporation). The recorded endpoint location is Vinhedo, BR. The stored server header is Apache. DOM analysis on Jul 15, 2026 at 02:20 UTC returned 93/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / YR1 as the certificate issuer with validity through Oct 7, 2026; checked Jul 15, 2026 at 01:00 UTC.

The content indicators and 2 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.