eurobit-international[.]com

The domain eurobit-international.com was registered on March 22, 2026 through Ultahost, Inc. It resolves to the IPv4 address 38.97.40.99, which is hosted by Cogent Communications in the United States. The authoritative name servers are ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com. The site presents a page titled “EUROBIT – Blockchain Intelligence Digital Payments”, suggesting an attempt to masquerade as a legitimate blockchain‑related service. Network observations show the web server is powered by Nginx with the OpenResty module, and the site serves over HTTPS using a Let's Encrypt R13 certificate. An HTTP request returns a 302 redirect, a pattern frequently used to forward victims to malicious payloads after initial page load. The domain appears on a single security blocklist and is currently flagged by PhishDestroy as active. Reputation services assign the domain a Scamadviser trust score of 1/100 and a Gridinsoft score of 0/100, indicating extreme untrustworthiness. VirusTotal scans report that 7 of 95 security vendors flag the domain as malicious, reinforcing the high‑risk classification. The combination of low trust scores, active blocklist status, and the cryptocurrency‑focused branding aligns with a generic phishing campaign targeting users interested in digital payments. Defenders should add eurobit-international.com to inbound and outbound filtering rules, and consider DNS sinkholing to prevent resolution. Continuous monitoring of the associated IP address and name servers is advised, as the infrastructure could be reused for additional phishing sites. Incident response teams should treat any credential or payment information submitted to this domain as compromised, and users should be warned to avoid the site.