vertexdigital[.]cyou

This domain, vertexdigital.cyou, is identified as a phishing infrastructure specifically designed to mimic Cloudflare support interfaces, likely targeting users seeking technical assistance or account verification. The site employs social engineering tactics to harvest login credentials, session tokens, or other sensitive authentication details under the guise of legitimate Cloudflare services. Analysis of the domain's behavior indicates it was engineered to exploit trust in Cloudflare's brand, potentially redirecting victims to fraudulent login portals or fake troubleshooting pages. Infrastructure analysis reveals concrete indicators of malicious activity. The domain was registered on April 24, 2026, through FewMoreTaps OÜ, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.7.30 and is currently flagged by 4 out of 95 security vendors on VirusTotal, including detection as a generic phishing threat. Additionally, the domain appears on one security blocklist and has a Gridinsoft trust score of 0/100, further confirming its malicious classification. The use of Cloudflare's own infrastructure, including Cloudflare Browser Insights and HTTP/3, suggests an attempt to blend in with legitimate traffic and evade detection. Users who visited vertexdigital.cyou or interacted with its content should take immediate action to mitigate potential risks. First, revoke any credentials or session tokens that may have been entered on the site, particularly those associated with Cloudflare accounts or other linked services. Monitor all accounts for unauthorized activity, including unusual login attempts or configuration changes. If financial or personally identifiable information was submitted, consider placing fraud alerts with relevant institutions. Finally, ensure endpoint security tools are updated to detect and block known indicators associated with this domain, including the IP address 104.21.7.30 and any derived threat signatures.