register-bankr[.]xyz

The domain register-bankr.xyz was registered through Dynadot LLC on February 27, 2026 and is presently taken offline, returning an HTTP 404 status. DNS resolution points to the Cloudflare‑managed address 172.67.183.124, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are sima.ns.cloudflare.com and tate.ns.cloudflare.com, confirming the use of Cloudflare’s DNS and edge services. TLS is provided by Google Trust Services under the WE1 certificate, indicating a valid, publicly trusted certificate chain.

Detected web technologies include Cloudflare’s edge platform and HTTP/3 support, consistent with the observed IP hosting. The page title returned by the server is "Bankr," matching the reported scam type of banking phishing. The domain is listed on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reflecting its classification as a malicious phishing site.

VirusTotal analysis shows that two of ninety‑three security vendors have flagged the domain, providing additional corroboration of its malicious nature. While the offline status limits current interaction, defenders should continue to monitor for any re‑activation, enforce blocklist rules, and ensure that any inbound traffic to the resolved IP is denied at perimeter devices. Organizations should also update web filtering and email security policies to include register-bankr.xyz in their deny lists, and consider threat‑intel sharing with partners to prevent credential harvesting attempts targeting banking customers.