nootropicsiq[.]com

Analysis shows that nootropicsiq.com was registered on April 28, 2026 through Fewmoretaps OU d/b/a Trustname.com and is currently hosting a page titled “Rushfinil | Order Modafinil & Nootropics Online.” The site returns HTTP 200, presents a valid Let's Encrypt R13 certificate, and resolves to IP 192.138.189.249, which is geolocated to the United States and associated with VeeroTech Systems LLC. The domain is resolvable via the authoritative nameservers ns1.veerotech.net and ns2.veerotech.net, both of which have been observed in prior malicious infrastructure.

The domain appears on a single security blocklist and has been flagged by PhishDestroy. Additionally, eight independent AlienVault OTX pulses reference the same indicator, suggesting that threat actors have employed this domain in recent campaigns. The Gridinsoft trust score of 0 out of 100 further reinforces a low reputation, while VirusTotal currently reports 0 detections out of 95 engines, indicating that the payload or content has not yet been captured by scanning services.

Uncertainty remains regarding the exact malicious payload or credential harvesting mechanism employed on the site. No static malware detections have been recorded, and the site’s content beyond the page title has not been publicly disclosed in the available intelligence. Consequently, the full scope of the phishing operation—such as targeted brands, credential forms, or secondary C2 infrastructure—cannot be definitively determined at this stage.

Defenders should treat nootropicsiq.com as a high‑priority indicator. Immediate actions include blocking network connections to the domain and its resolved IP address, adding the domain to web filtering and email gateway deny lists, and monitoring DNS queries for the associated nameservers. Continuous re‑scanning of the URL and periodic review of threat‑intel feeds for new pulses or detections are recommended to capture any evolving malicious content that may appear as the campaign progresses.