authycord[.]com

The domain authycord.com is currently active and was registered on July 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Its authoritative DNS is served by Cloudflare, as indicated by the nameservers heather.ns.cloudflare.com and ricardo.ns.cloudflare.com, which place the domain within Cloudflare’s global edge network. DNS resolution points to the IP address 172.67.153.19, an address belonging to Cloudflare’s CDN infrastructure, suggesting the malicious site is leveraging Cloudflare’s services to obscure its true hosting location and to benefit from the provider’s performance and security features.

The domain appears on one public security blocklist and has been explicitly listed by PhishDestroy, confirming that at least one specialized anti‑phishing service has identified it as a malicious resource. VirusTotal analysis shows that 1 out of 91 scanned security vendors flagged the domain, providing a single independent detection that corroborates the blocklist evidence. No additional public intelligence such as page title, brand targeting, or specific malware kit was disclosed, leaving the exact content of the site unverified in open‑source sources.

Defenders should treat authycord.com as a high‑risk phishing indicator: ingest the domain into network and endpoint blocklists, enforce DNS sinkholing for the associated IP, and monitor Cloudflare‑associated traffic for anomalous patterns. Continuous re‑scanning with multi‑vendor engines is recommended to capture any future detection changes, and any emails or URLs referencing authycord.com should be quarantined pending further investigation.