register-usro[.]app

This site, register-usro.app, presents itself with the page title "Just a moment...", a common placeholder often used by malicious domains to evade automated analysis. The domain name suggests an impersonation of a legitimate US registration service, likely targeting users seeking official document or business registration processes. The primary threat is phishing or credential harvesting, where visitors may be tricked into entering sensitive personal or financial information under the guise of a registration portal.

Technical analysis reveals the domain was created on 2026-02-21, indicating a very recent registration. It is hosted on IP 188.114.97.3 in the United States, assigned to AS13335 Cloudflare, Inc. The registrar is NiceNIC International Group Co., Limited, a known provider of privacy-focused domain registrations. VirusTotal reports 6 out of 95 security vendors flagged this domain as malicious, including alphaMountain.ai, CyRadar, Fortinet, Gridinsoft, and Seclookup. Additionally, it appears on 3 separate blocklists. The SSL certificate is issued by Google Trust Services / WE1, and the nameservers are javier.ns.cloudflare.com and sara.ns.cloudflare.com.

Currently, the site is DOWN/OFFLINE, suggesting it may have been taken down or is temporarily inactive. Given the low creation date, high vendor detections, and blocklist presence, the risk level is assessed as high. Users should avoid any interaction with this domain, as its recent registration and malicious flags indicate a high probability of fraudulent activity.