# relay-compute-relay.com — MALICIOUS

> relay-compute-relay.com is a high-risk phishing site currently offline. Avoid interacting and ensure your credentials stay protected from such threats.

## Summary
PhishDestroy identifies relay-compute-relay.com as a high-risk generic phishing domain. Despite lacking explicit brand impersonation, the domain poses significant danger by attempting to deceive users through server downtime messages and potential credential harvesting.

This domain was registered recently on February 21, 2026, through NiceNIC International Group Co., Limited and resolves to IP 104.21.24.199. VirusTotal flagged it by 11 out of 95 security vendors, and it appears on two security blocklists, indicating a recognized threat presence. The page title "relay-compute-relay.com | 521: Web server is down" suggests an attempt to lure users into a false sense of urgency or technical issue, a common phishing tactic.

Currently, relay-compute-relay.com has been taken offline, mitigating immediate risks. Users are advised to remain vigilant, avoid entering sensitive information on suspicious sites, and maintain updated security solutions. Organizations should continue to monitor for similar domains and educate users on identifying phishing attempts, especially those exploiting downtime or error messages.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: relay-compute-relay.com | 521: Web server is down

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NiceNIC International Group Co., Limited
- Country: HK
- IP: 104.21.24.199
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["quincy.ns.cloudflare.com", "zainab.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 11 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "ScamSniffer"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019946c7-6891-720c-a510-467d287a6fee.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/29a9603a-6f19-4392-8f64-bd78e5673872
- PhishDestroy: https://phishdestroy.io/domain/relay-compute-relay.com/
- LLM endpoint: https://phishdestroy.io/domain/relay-compute-relay.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/relay-compute-relay.com/
Last updated: 2026-03-19