registercard[.]biz

Analysis of registercard.biz shows a newly created domain that fits the profile of a malicious phishing infrastructure. The domain was registered on August 03, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IP address 172.67.187.231, which is hosted on Cloudflare’s network as indicated by the authoritative nameservers charles.ns.cloudflare.com and gloria.ns.cloudflare.com. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service, confirming that at least one defensive platform has identified it as abusive.

VirusTotal records indicate that the domain was scanned by 91 independent vendors, none of which raised a detection at the time of analysis; however, the absence of detections does not constitute a safety guarantee. No public evidence such as page titles, brand references, or content snapshots has been disclosed, leaving the exact phishing lure unverified. The short lifespan of the domain, combined with its rapid appearance on a blocklist, suggests a deliberate, short‑term campaign aimed at evading reputation filters.

Defenders should treat registercard.biz as hostile and block any outbound or inbound traffic to the domain and its resolved IP. Network sensors should flag DNS queries for the domain, and email gateways should enforce URL filtering against it. Continuous monitoring of the IP address and associated Cloudflare nameservers is advised, as the infrastructure may be reused for additional malicious domains.