promotionsemirate[.]com

This domain, promotionsemirate.com, was registered on July 23, 2026 through Fewmoretaps OU d/b/a Trustname.com and is hosted on Cloudflare infrastructure using the authoritative name servers cody.ns.cloudflare.com and surina.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is currently listed on a single security blocklist. The domain has been flagged by the PhishDestroy blocklist and remains active as of the report date, July 28, 2026. A VirusTotal scan submitted the domain to 91 antivirus and URL‑reputation engines; none of the engines reported a detection at the time of scanning.

The absence of a detection does not constitute evidence of benign intent, nor does it confirm malicious behavior. No public information on SSL certificate details, HTTP response codes, page title, or associated brand targets has been disclosed, leaving the payload and victim‑facing content unverified. Analysts can therefore confirm the registration, hosting, and blocklist status, but the precise phishing campaign tactics, lure content, and victim impact remain unknown.

Defensive recommendations include adding promotionsemirate.com to inbound and outbound filtering rules, monitoring DNS queries for the associated IP address, and reviewing any traffic that attempts to resolve the domain. Organizations should also consider sharing any observed indicators of compromise with threat‑sharing communities to improve detection coverage. Continuous re‑evaluation is advised, as the infrastructure may evolve or additional detections could emerge.