com-en-us[.]li

Analysis of the domain com-en-us.li indicates it was registered on February 21, 2026, through the registrar Switch.ch, a provider based in Switzerland. The domain resolved to the IP address 188.114.97.3, which is part of AS13335 operated by Cloudflare, Inc. in the United States. No SSL certificate was present at the time of assessment, increasing the risk of unencrypted data transmission. The domain's nameservers include both Cloudflare (rosa.ns.cloudflare.com and tom.ns.cloudflare.com) and the .li TLD's infrastructure (a.nic.li, b.nic.li, d.nic.li, e.nic.li, f.nic.li). The page title, 'Unplug | Digital Detox Retreats | 2026,' suggests an attempt to impersonate a wellness or retreat-themed service, though the exact nature of the phishing content remains unconfirmed as the site is offline.

Detection data from security vendors is limited; two of ninety-three vendors on VirusTotal flagged the domain as malicious. The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a phishing threat. Gridinsoft assigned a trust score of 0 out of 100, further indicating high risk. Infrastructure analysis reveals the use of Cloudflare's network, a common tactic among threat actors to obfuscate hosting origins and evade takedowns.

The domain's creation date and rapid inclusion on blocklists suggest it was operational for a short period before being disabled. Defenders should treat this domain as part of a broader phishing campaign targeting users through fraudulent wellness or retreat-themed lures. Network-level blocking of the IP 188.114.97.3 and monitoring for related domains registered through Switch.ch are recommended mitigations. No evidence links this domain to a specific phishing kit or brand beyond the page title provided.