enthusiasmquasar[.]shop

Analysis of enthusiasmquasar.shop indicates a high-risk phishing domain registered on June 12, 2026, through Namecheap, Inc. and currently active as of July 12, 2026. The domain resolves to IP address 188.114.97.3, associated with Cloudflare, Inc. in Canada, and employs Cloudflare nameservers (irma.ns.cloudflare.com, kaiser.ns.cloudflare.com). A 301 HTTP status redirect is observed, though the origin server appears unreachable, as reflected in the page title 'enthusiasmquasar.shop | 523: Origin is unreachable.' This behavior is consistent with phishing infrastructure leveraging Cloudflare’s proxy services to obscure backend hosting. Security vendors have flagged the domain, with 8 of 91 engines on VirusTotal detecting malicious activity. The domain is also listed in four AlienVault OTX threat intelligence pulses and appears on at least one security blocklist. Gridinsoft assigns a trust score of 0/100, further supporting its classification as malicious. The SSL certificate is issued by Google Trust Services (WE1), a common practice among threat actors to lend superficial legitimacy. While the domain’s exact phishing target remains unconfirmed due to the unreachable origin, its infrastructure aligns with known phishing patterns. Defenders should treat this domain as active phishing infrastructure, block resolution at the network level, and monitor for related indicators of compromise. No brand impersonation or specific scam type is identified in the available data.