puffer-fi[.]coinverified[.]com

The domain puffer-fi.coinverified.com was registered on 2026-02-21 through TurnCommerce, Inc. operating under the NameBright.com registrar. It resolves to the IP address 216.150.16.1, which belongs to Amazon.com, Inc. (ASN 14618) and is geolocated in the United States. The domain uses the namebrightdns.com nameservers (ns1.namebrightdns.com, ns2.namebrightdns.com) and does not present an SSL certificate, indicating that any web service would be delivered over an unencrypted channel. The site is currently taken offline, so no live HTTP response can be observed.

Metadata from security scans shows a Gridinsoft trust score of 0 out of 100, and the page title returned from the cached snapshot reads "VentureOS — The Operating System for URLs | AI Agent Orchestration Platform," which bears no obvious relationship to the alleged victim brand. The domain is classified as a brand‑impersonation scam, with the specific brand listed as "across" in the provided intelligence. It appears on two independent blocklists, PhishDestroy and ScamSniffer, and VirusTotal reports that 9 of 93 scanned security vendors flagged the domain as malicious. No SSL/TLS certificate, low trust score, and blocklist presence collectively suggest a high likelihood of malicious intent.

However, because the site is offline, the exact payload, credential‑harvesting mechanism, or malicious redirects cannot be confirmed at this time. Defenders should add puffer-fi.coinverified.com to URL filtering and firewall deny lists, monitor the associated IP address for any future activity, and watch for newly registered domains that reuse the same registrar or nameserver configuration. Continuous re‑scanning of the domain is advised in case the site becomes active again, and any traffic observed from the IP should be treated as suspicious until further analysis is performed.