elopub[.]com

Analysis of the domain elopub.com confirms its classification as an active brand-impersonation phishing site targeting Apple users. Registered on July 26, 2024, through Beget LLC, the domain currently resolves to the IP address 87.236.22.245 and is hosted on infrastructure utilizing Ubuntu, Nginx, and Cloudflare. The page title, 'elopub.com | CS2 и квесты,' does not explicitly reference Apple, though the domain is explicitly linked to Apple brand impersonation in threat intelligence sources. Detection data indicates limited but notable coverage: the domain appears on one security blocklist and is flagged by 2 of 95 security vendors in a recent scan. AlienVault OTX records the domain in 23 threat intelligence pulses, suggesting recurring inclusion in malicious campaigns. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification. Defenders should treat this domain as confirmed malicious infrastructure. Recommended actions include blocking the domain and IP at perimeter controls, monitoring for internal connections to 87.236.22.245, and reviewing logs for user interactions with elopub.com. While the exact phishing kit or payload remains unanalyzed, the combination of brand targeting, detection counts, and threat intelligence pulses justifies immediate containment measures.