eliteuae[.]top

eliteuae.top was registered on 23 March 2026 through the registrar 耐思尼克国际集团有限公司. The domain resolves to the Cloudflare‑owned address 188.114.97.3, indicating that the attacker is using Cloudflare’s CDN and DDoS‑mitigation services to hide the true origin of the infrastructure. The TLS certificate is a Let’s Encrypt E8 certificate, which is typical for short‑lived malicious sites because it can be obtained automatically and renewed at no cost. Gridinsoft assigns a trust score of 0 / 100, reflecting a very low reputation. The domain appears on three public security blocklists and is explicitly listed by PhishDestroy, MetaMask, and SEAL, confirming that multiple anti‑phishing feeds have observed malicious activity linked to the name.

VirusTotal reports that four of ninety‑four scanning engines have flagged the domain, providing additional vendor corroboration. The site is currently taken offline, so no live HTTP response or page title is available for analysis, and no Safe Browsing or OTX entries were observed in the supplied intelligence. Consequently, the exact phishing content, targeted brand, or lure technique remains unknown. Nevertheless, the combination of a recent registration date, low trust score, use of a free SSL certificate, Cloudflare front‑end, and multiple blocklist listings constitutes a strong indicator of a phishing operation. Defenders should treat eliteuae.top as malicious.

Recommended actions include adding the domain to network and web‑filter block lists, monitoring DNS queries for future resolution changes, and reviewing any historical logs for connections to the IP 188.114.97.3. Because the domain uses Cloudflare, threat‑intel feeds should be consulted for any related subdomains that may appear under the same IP or ASN. Continuous re‑scanning with sandbox and URL‑analysis services is advised in case the site is re‑hosted. Until further evidence emerges, the prudent stance is to maintain the domain in a blocked or quarantine state.