register-usdai[.]com

Analysis as of July 25, 2026 indicates that the domain register-usdai.com was registered on March 11 2026 through Hello Internet Corp and is hosted on Cloudflare's network (AS13335) with the address 104.21.64.217 located in the United States. The domain resolves to that IP and is served without an SSL certificate, exposing any traffic to clear-text interception. The site’s only visible attribute is the page title "USD AI". No additional page content has been captured because the service is currently taken offline.

Two of ninety-four VirusTotal scanners flagged the domain, and four independent blocklists (PhishDestroy, MetaMask, ScamSniffer, SEAL) have listed it as malicious. The domain also appears on four other security blocklists, confirming a consensus among threat-intel feeds that the site is being used for phishing. Cloudflare-specific technologies observed include Cloudflare Browser Insights and HTTP/3, consistent with the hosting provider's default configuration. The evidence confirms that register-usdai.com is part of a generic phishing infrastructure targeting users who may be searching for "USD AI" services.

However, the exact payload, credential-capture mechanism, and targeted brand or financial product remain unknown because no page capture or sandbox analysis is available. Defenders should block the domain at the network perimeter, add the associated IP address 104.21.64.217 to deny lists, and monitor for any future re-registration or similar sub-domains using the same registrar or Cloudflare nameservers. Continuous re-scanning with VirusTotal and checking for re-appearance on blocklists is recommended to maintain situational awareness.