en-easeus[.]com

The domain en-easeus.com was observed delivering a generic phishing payload and is presently marked offline as of the report date, July 25, 2026. VirusTotal records indicate that four of ninety-three security vendors flagged the domain, demonstrating a modest but notable detection rate. The HTTP response returned a status code of 200, confirming that the web server was reachable and served content. The site resolved to the IPv4 address 15.235.54.156, which is hosted in Canada under ASN 16276 belonging to OVH SAS.

Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the malicious classification. Registration details show the domain was created on February 21, 2026 through the registrar Gname.com Pte. Ltd., and the authoritative nameservers are a.myfixdns.com, b.myfixdns.com, c.myfixdns.com, and d.myfixdns.com. The SSL certificate presented for the host is issued to hypersoftware.in, a mismatch that further suggests an attempt to obscure the true service identity. The page title retrieved from the root path is "Index of /", offering no additional context about the phishing content.

AlienVault OTX lists the domain in a single threat intelligence pulse, and the domain appears on three external blocklists. Defensive products PhishDestroy, MetaMask, and SEAL have already blocked the domain, indicating that multiple security layers have recognized the threat. While the limited visible content prevents a deeper functional analysis of the phishing lure, the combination of vendor detections, low trust score, mismatched certificate, and blocklist presence provides sufficient evidence for classification as a confirmed phishing site. Security operators should continue to deny resolution of en-easeus.com and its associated IP address, propagate the indicator to internal blocklists, and monitor for any re‑registration attempts or related infrastructure that may emerge from the same hosting provider or registrar.