On July 28, 2026, an investigation was initiated regarding the domain promo-premium.pro, which is currently flagged as a generic phishing domain. The domain was registered on July 24, 2026, and is still active. It is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 172.67.221.84.
The nameservers used are nucum.ns.cloudflare.com and olof.ns.cloudflare.com, both provided by Cloudflare. While the domain has been scanned by 91 vendors on VirusTotal, none of these vendors currently flag it as malicious; however, the absence of detections does not guarantee the domain's safety. Promo-premium.pro is listed on one security blocklist, PhishDestroy, indicating potential risk.
The exact content and purpose of the website have not yet been fully analyzed, and defenders should exercise caution and monitor for any signs of phishing activity. Given the domain's recent creation and active status, it is advisable for security teams to conduct further analysis and consider implementing additional monitoring and blocking measures to prevent potential attacks. The current status of the domain as under investigation underscores the need for vigilance and proactive security measures.