premiumcoinvest[.]com

The domain premiumcoinvest.com is actively serving as a generic phishing conduit. It resolves to the IP address 104.21.41.171, which belongs to the Cloudflare network and is reachable through the authoritative nameservers dante.ns.cloudflare.com and maeve.ns.cloudflare.com. Registration data shows the domain was created on March 28, 2026 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu.

A VirusTotal scan reports that 2 of 91 security vendors have flagged the domain, indicating early detection by a subset of scanners. The domain appears on one external security blocklist and is currently listed as blocked by PhishDestroy, reinforcing its malicious classification. No additional reputation signals such as Safe Browsing status, OTX entries, SSL/TLS certificate details, HTTP response codes, page title, or content snapshots have been published, so the surface‑level analysis is limited to infrastructure and vendor detection data.

The use of Cloudflare’s edge infrastructure suggests an intent to hide origin servers and mitigate takedown attempts. Given the confirmed phishing designation, the high risk rating, and the active status, defenders should immediately block premiumcoinvest.com at DNS, proxy, and endpoint filtering layers, and monitor outbound traffic to 104.21.41.171 for anomalous connections. Continuous re‑evaluation is advised to capture any new vendor detections, blocklist listings, or content changes that could increase the threat’s impact.