elitepremium-ltd[.]com

Analysis of elitepremium-ltd.com shows a newly registered domain created on January 24, 2026 and operated through the registrar TuringSign Inc. d/b/a Cosmotown. The domain is served by Cloudflare infrastructure, as evidenced by the authoritative nameservers dolly.ns.cloudflare.com and walt.ns.cloudflare.com and by its resolution to the IP address 172.67.196.37, which belongs to Cloudflare’s network. The site has been actively blocked by the PhishDestroy sinkhole and appears on one external security blocklist, indicating that at least one independent threat‑intelligence feed has flagged it as malicious.

VirusTotal scans report that 15 of 91 security vendors flag the domain, reinforcing the perception of malicious intent. The current operational status is listed as active, meaning the domain continues to resolve and host content. No additional data such as SSL certificate details, HTTP response codes, page titles, or brand‑targeting information is available in the supplied intelligence, leaving the exact content and lure technique unverified.

Defenders should treat elitepremium-ltd.com as a high‑risk phishing infrastructure and proactively block the domain at network perimeters, DNS filtering services, and endpoint security solutions. Continuous monitoring of the associated IP address and Cloudflare‑hosted sub‑domains is recommended, as the attacker may rotate hosts behind the same CDN. Organizations should also consider sharing any observed traffic or payloads with threat‑intel communities to enrich collective detection capabilities.