elubit[.]com

Analysis of elubit.com indicates a high-risk phishing domain active as of July 24, 2026. The domain was registered on February 25, 2025, through Hello Internet Corp and currently resolves to IP address 172.67.181.249, hosted on Cloudflare's network (AS13335). No SSL certificate is present, increasing the likelihood of interception or impersonation attempts. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by 6 of 91 security vendors in VirusTotal scans, suggesting detection by multiple threat intelligence sources. Infrastructure review reveals a single nameserver configuration, which may simplify domain management but also reduces redundancy, a common trait in disposable phishing infrastructure.

The HTTP response returns a 302 redirect status, often used to obscure final landing pages or funnel victims to malicious endpoints. The page title 'Just a moment...' aligns with Cloudflare's default interstitial page, indicating the domain may be leveraging Cloudflare's proxy services to mask its true hosting origin or evade detection. Gridinsoft assigns a trust score of 1 out of 100, reflecting minimal confidence in the domain's legitimacy. AlienVault OTX includes elubit.com in one threat intelligence pulse, further corroborating its association with malicious activity.

While the exact phishing target or scam type remains unconfirmed due to limited page content analysis, the combination of technical indicators—absence of SSL, Cloudflare hosting, low trust scores, and blocklist presence—strongly suggests ongoing phishing operations. Defenders should treat this domain as hostile and implement blocking at the DNS or network level. Monitoring for related domains registered through Hello Internet Corp or resolving to Cloudflare IPs may help identify additional threats. Given the domain's persistence since early 2025, organizations should prioritize retrospective log reviews for any interactions with elubit.