userverificationscenters[.]com

The domain userverificationscenters.com was registered on 10 October 2025 through Tucows Domains Inc. It resolves to the Cloudflare‑owned address 104.21.91.67, which is associated with ASN 13335 in the United States. The site presented the page title “TikTok Verification support,” indicating a targeted impersonation of the TikTok brand. VirusTotal has recorded 12 of 93 security‑vendor detections for this host, confirming that a subset of scanners classify it as malicious. The SSL certificate presented for the host is identified as “WE1,” and the Gridinsoft trust score is 0 out of 100, reflecting a complete lack of trust. AlienVault OTX lists the domain in a single threat‑intel pulse, and PhishDestroy has added it to its blocklist.

In addition, the domain appears on one public security blocklist, reinforcing its reputation as a phishing vector. The activity is currently offline, suggesting the hosting was taken down after detection. The combination of brand‑specific page title, low trust score, multiple vendor detections, and inclusion on blocklists indicates a social‑media phishing campaign designed to harvest TikTok user credentials. Because the domain is hosted behind Cloudflare, attribution of the underlying operator is obscured, but the infrastructure footprint is limited to a single IP address.

Defenders should immediately block the domain at the DNS and proxy layers, update web‑filtering rules to include the observed IP and ASN, and monitor for any related traffic to Cloudflare edge nodes. Incident response teams should also query internal logs for attempts to contact the domain or resolve the IP, and consider adding the domain to threat‑intel feeds used by SIEM platforms. Continuous re‑scanning is advised in case the site is re‑hosted on a different IP. The evidence presented—registration date, SSL details, vendor detections, blocklist listings, and the TikTok‑related page title—provides a concrete basis for mitigation.