users-verasity[.]com

Analysis of users-verasity.com indicates that the domain was registered on February 23, 2026 through Dynadop LLC and is presently taken offline. The site resolves to IP address 104.21.88.111, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is handled by eleanor.ns.cloudflare.com and jakub.ns.cloudflare.com, confirming the use of Cloudflare’s infrastructure and HTTP/3 support. The TLS certificate presented is issued by Let’s Encrypt (E7), consistent with a typical low‑cost or automated deployment.

When accessed, the HTTP response returned a 404 status code and the page title displayed "users-verasity.com | 504: Gateway time-out," suggesting the server is currently unreachable or misconfigured. The domain appears on four independent security blocklists, specifically PhishDestroy, MetaMask, ScamSniffer, and SEAL, indicating that multiple threat‑intel feeds have flagged it as malicious. VirusTotal records show that the domain was scanned by 93 antivirus and URL‑reputation vendors, none of which reported a detection at the time of analysis; this absence of detections does not imply the domain is safe, merely that existing signatures have not yet identified it as malicious. The combination of recent registration, Cloudflare‑based hosting, a generic page title, and inclusion on multiple phishing‑related blocklists aligns with typical infrastructure used for generic phishing campaigns.

Uncertainties remain regarding the exact content or payload that may have been delivered before the site went offline, as no page content has been captured. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP and nameservers, and consider adding the domain to internal blocklists. Ongoing observation of the IP address and any future re‑activation of the domain is recommended, as threat actors may redeploy the same infrastructure for new campaigns.