perrisonu[.]xyz

The domain perrisonu.xyz has been identified as a credential theft site. It is currently under investigation for its involvement in phishing attacks, where the primary objective is to steal user credentials. The domain does not appear to be associated with any specific brand impersonation or crypto drainer kit, but it exhibits characteristics typical of phishing infrastructure.

Infrastructure analysis reveals that perrisonu.xyz has a VirusTotal score of 0/95, indicating that it has not yet been flagged by security engines. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 23.254.134.207. It was created on June 26, 2026. The site is not listed in Google Safe Browsing and has not been reported in any known blocklists. These technical indicators suggest that the domain is relatively new and has not yet attracted widespread attention from security researchers.

The domain perrisonu.xyz is currently active and operational. Given its lack of detections and the recent creation date, it poses a significant risk as it may be in the early stages of a phishing campaign. Immediate response actions include monitoring the domain for further activity, reporting it to relevant authorities, and educating users about the risks of credential theft. Despite the current under-investigation status, the site should be treated with caution, and users should avoid interacting with it until its threat level is fully assessed.