registration-stable[.]net

The domain registration-stable.net was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is presently taken offline. DNS resolution points to Cloudflare name servers dorthy.ns.cloudflare.com and noel.ns.cloudflare.com, indicating the use of Cloudflare’s edge network and HTTP/3 support. A single security blocklist, PhishDestroy, has listed the domain, and VirusTotal reports that one of ninety‑three scanning engines flagged the domain as malicious, reinforcing the suspicion of abuse.

The only visible HTTP response is a 522 timeout page title reading “registration-stable.net | 522: Connection timed out,” which confirms that the origin server is not responding while the Cloudflare edge remains reachable. No additional intelligence such as SSL certificates, IP address attribution, or content analysis is available, leaving the exact malicious payload or phishing kit unidentified. The elevated risk rating derives from the recent creation date, the presence on a phishing‑focused blocklist, and the solitary vendor detection, all of which are typical of short‑lived phishing infrastructure.

Defenders should continue to block the domain at perimeter controls, monitor for any re‑appearance of the domain or its name‑server configuration, and consider adding the domain to internal deny lists. Ongoing observation of the associated Cloudflare name servers may reveal future reuse, as threat actors often recycle the same edge infrastructure for new campaigns.