fixright[.]peradesktops[.]com

Analysis indicates that fixright.peradesktops.com is associated with a confirmed phishing operation. The domain was registered on October 09, 2025 through Dominet (HK) Limited and resolves to the IP address 192.3.190.187, which belongs to AS36352 HostPapa and is geolocated in the United States. No TLS certificate was observed, leaving the site unencrypted and susceptible to interception. An HTTP request returns a 404 Not Found page title, suggesting that the malicious landing page may have been removed or is otherwise inaccessible at the time of analysis.

VirusTotal records show that one out of ninety‑five scanned security vendors flagged the domain, and the site is listed on a single external blocklist, confirming its malicious reputation. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low confidence in the domain’s legitimacy. The domain’s authoritative name servers are ns1.1reg.buzz, ns2.1reg.buzz, ns1.kanohost.com, and ns2.kanohost.com, which are typical of disposable or low‑cost hosting services.

The site has been taken offline and is currently blocked by the PhishDestroy platform, indicating active mitigation by at least one anti‑phishing service. defenders should continue to deny any network traffic to 192.3.190.187, add fixright.peradesktops.com to local and perimeter blocklists, and monitor for any re‑registration attempts or similar domains using the same registrar or name‑server pattern. Ongoing vigilance is advised because the offline status may be temporary, and the underlying infrastructure could be repurposed for future campaigns.