naturiumrt[.]shop

This domain, naturiumrt.shop, is currently active and has been classified as a generic phishing infrastructure with a high risk rating. DNS resolution points to the IPv4 address 23.227.38.65, and the authoritative name servers are carter.ns.cloudflare.com and kristin.ns.cloudflare.com, indicating use of Cloudflare's DNS service. VirusTotal analysis shows that 2 of 91 scanned security engines have flagged the domain, which suggests at least limited detection by some products, though the majority of scanners did not raise an alert. The limited detection history combined with the active status and the presence of Cloudflare‑provided name servers is consistent with a typical phishing hosting pattern, but no additional payload, page content, or victim‑target information has been publicly disclosed. Consequently, the full scope of the campaign—such as targeted brands, credential‑stealing pages, or command‑and‑control endpoints—remains unknown. Defenders should treat any traffic to or from naturiumrt.shop as suspicious. Block the domain at network perimeters, include it in URL filtering and email gateway rules, and monitor for connections to the resolved IP address 23.227.38.65. Continuous re‑evaluation is advised, as further analysis or additional detections may emerge.