com-en-us[.]org

Analysis of com-en-us.org shows a high‑risk credential phishing infrastructure. The domain was registered on 2026-02-21 through Dynadot LLC and is hosted behind Cloudflare (AS13335), resolving to IP 104.21.51.16 located in the United States. DNS is served by garret.ns.cloudflare.com and kara.ns.cloudflare.com. An HTTPS service is active with a Google Trust Services certificate and the site returns HTTP 200 responses, indicating a fully functional web server. The page title observed is "HoloVerse | Photorealistic Holographic Entertainment," but no further content analysis is available. Threat intelligence flags the domain as a credential phishing site; three of ninety‑three VirusTotal scanners have marked it as malicious, and it appears on three external blocklists, including PhishDestroy and SEAL. Cloudflare Browser Insights and HTTP/3 are detected, suggesting modern delivery techniques. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. While the exact phishing lure (e.g., login portal) has not been captured, the combination of recent registration, active SSL, Cloudflare hosting, and multiple blocklist listings indicates a deliberate phishing campaign. Defenders should block DNS resolution for com-en-us.org, add the domain to URL filtering and email security policies, and monitor for any credential submission attempts linked to the site. Continued observation of the domain’s content and any associated payloads is advised to refine detection rules.