medusabahis979[.]com

The domain medusabahis979.com was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. No TLS certificate is presented, indicating that the site does not provide encrypted communications. The authoritative nameservers are ignacio.ns.cloudflare.com and serena.ns.cloudflare.com, and DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The page title returned by the host is "Un instant…", a generic phrase that offers no insight into the intended victim interaction.

Threat intelligence shows the domain is listed on a single security blocklist, PhishDestroy, and has been flagged by five of ninety‑three VirusTotal scanners, suggesting a modest detection consensus among antivirus engines. Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the perception of malicious intent. The combination of a recent registration date, absence of SSL, low trust rating, and presence on a phishing‑focused blocklist aligns with typical characteristics of a phishing‑type infrastructure.

However, the limited number of detections and the single blocklist entry leave uncertainty regarding the scale of any active campaign, especially since the site is offline and no content analysis is available beyond the title. Defenders should continue to block the domain at network perimeter devices, update DNS filtering rules to include the IP address 188.114.97.3, and monitor for any reappearance of the domain or related subdomains. Security teams are advised to treat any email or web traffic referencing medusabahis979.com as potentially malicious and to educate users to avoid clicking links that resolve to this host.