registers-theindex[.]finance

Analysis of registers-theindex.finance shows a newly registered domain created on July 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 188.114.96.3 and is served by Cloudflare name servers kip.ns.cloudflare.com and meera.ns.cloudflare.com. The infrastructure has already been identified by the PhishDestroy blocklist and appears on one additional security blocklist, indicating that threat‑intel feeds consider the domain malicious.

A VirusTotal scan involving 91 antivirus and URL‑reputation engines returned no detections at the time of scanning, but the absence of flags does not constitute a safety assurance. No public SSL certificate details, HTTP response codes, page titles, or content snapshots are available in the current intelligence set, leaving the exact phishing payload and targeted brand unconfirmed. The domain remains active, and its IP address is not presently linked to any known benign services.

Defenders should treat registers-theindex.finance as a high‑confidence phishing indicator and add the domain and its hosting IP to deny‑lists, firewall rules, and DNS filtering policies. Continuous monitoring of the IP and any future reputation updates is advised, as the lack of content analysis leaves the specific lure and victim profile unknown.