com-en-us[.]eu

The domain com-en-us.eu was registered on February 21, 2026 through Dynadot, LLC and is currently resolved to the Cloudflare‑owned address 172.67.154.16 (AS13335, United States). The site presents a valid SSL certificate issued by Google Trust Services / WE1 and returns HTTP status 200 over HTTP/3, employing Cloudflare Browser Insights and standard Cloudflare services. The page title returned by the server is "QuantumGate | Instant Transportation Network," which does not directly reference any legitimate brand but may be used to entice victims. Infrastructure analysis shows the domain is listed on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Independent scanning on VirusTotal recorded three positive detections out of ninety‑three vendors, and a Gridinsoft trust score of 0 / 100 further confirms its malicious nature. The threat is classified as credential phishing, indicating an intent to harvest user credentials. No additional content has been observed, so the exact phishing vector, landing page structure, or credential‑capture mechanisms remain uncertain. Defenders should immediately block the domain and its associated IP address at network perimeters, update URL filtering rules to include the identified blocklists, and consider sinkholing the domain to disrupt further activity. Continuous monitoring of DNS queries for the nameservers kara.ns.cloudflare.com and garret.ns.cloudflare.com is advised, as any changes could signal a shift in the campaign’s infrastructure.