earneliii-bsudai[.]xyz

The domain earneliii-bsudai.xyz was registered on 21 February 2026 through Spaceship, Inc. and is served from the Cloudflare network (AS13335) at IP address 104.21.71.200, located in the United States. The authoritative nameservers aragorn.ns.cloudflare.com and barbara.ns.cloudflare.com resolve the domain to the same Cloudflare edge, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 designation, confirming HTTPS availability. An HTTP request returns status code 200 and the page title reported by crawlers is “EarnElite”, matching the limited intelligence that the site is being used for a generic phishing campaign. Automated analysis shows the presence of YouTube embeds, Cloudflare services, and HTTP/3 support, indicating a modern delivery stack.

Reputation services provide mixed signals: Gridinsoft assigns a trust score of 0 / 100, and VirusTotal records three positive detections out of ninety‑three scanners, suggesting that at least a subset of security products have identified malicious behavior. The domain appears on one external blocklist and has been actively blocked by the PhishDestroy filtering service, reinforcing the conclusion that it is being used for malicious phishing activity. No additional public threat‑intel sources such as OTX or Safe Browsing entries were observed in the supplied data.

Uncertainty remains regarding the exact payload or credential‑harvesting mechanisms because the page content has not been disclosed beyond the title. Defenders should therefore treat the domain as hostile: block DNS resolution, enforce URL filtering, and monitor outbound connections to the associated Cloudflare IP. Continuous re‑scanning with multiple AV engines is advised to capture any evolving indicators, and any internal logs that reference earneliii-bsudai.xyz should be investigated for potential compromise.