elite-crown[.]com

Analysis of elite-crown.com, created on May 27 2025 and hosted behind Cloudflare (AS13335, United States), shows a high‑risk brand‑impersonation campaign targeting the financial‑services brand celer. The site resolves to IP 104.21.80.1 and serves HTTP 200 responses with a valid SSL certificate issued by Google Trust Services (WE1), indicating normal TLS negotiation. The page title "elite-crown.com | Comprehensive financial advice and investment services that are tailored to meet your individual needs" suggests a fraudulent financial‑advice façade. Detected technologies include YouTube embeds, Bootstrap, Smartsupp live‑chat, OWL Carousel, jQuery, Cloudflare Browser Insights, Cloudflare CDN, and Popper, all common in low‑cost phishing kits.

Reputation services rate the domain extremely poorly: Gridinsoft assigns a 0 / 100 trust score, and Scamadviser reports 1 / 100. VirusTotal analysis flags the domain with one positive detection out of ninety‑five scanners, confirming at least one security vendor has identified malicious behavior. The domain is listed on a single security blocklist and is actively blocked by PhishDestroy. Registration was performed through Hosting Concepts B.V. d/b/a Registrar.eu, a known registrar for abusive infrastructure.

While the visible content has not been manually inspected, the combination of a brand‑specific target (celer), the deceptive financial‑service title, low trust scores, a positive VirusTotal flag, and active blocklist inclusion provides strong evidence that elite-crown.com is being used for brand‑impersonation fraud. Defenders should add the domain to deny‑list rules, monitor DNS queries for the associated IP, and enforce web‑filter blocks. Organizations using the celer brand should alert employees about potential fraudulent communications referencing elite-crown.com and consider extended threat‑intel sharing with upstream providers to improve detection latency.