palsf[.]site

Analysis indicates that palsf.site was registered on April 17 2026 through Dynadot Inc. The domain is served by Cloudflare nameservers and resolves to the IP address 188.114.96.3. It has been added to a single security blocklist and is currently listed as blocked by PhishDestroy. VirusTotal records show that 91 scanning engines have examined the domain, none have returned a positive detection at the time of the latest scan. The absence of a detection does not constitute confirmation of safety, and the domain remains classified as a generic phishing site under investigation.

No public SSL certificate details, HTTP response codes, or page‑title information are available in the current intelligence set, limiting the ability to assess the surface‑level behavior of the site. The limited visibility into the hosting environment—aside from the Cloudflare‑managed nameservers and the single IP address—suggests a low‑profile deployment that can be rapidly re‑hosted or moved behind the CDN. Defenders should continue to block the domain at perimeter firewalls and DNS filtering solutions, add it to internal blocklists, and monitor outbound connections to 188.114.96.3 for suspicious activity.

Given the recent creation date, the domain may be part of a short‑lived phishing campaign; therefore, regular re‑evaluation of the blocklist status and periodic rescans with malware analysis services are advised. Organizations that rely on email filtering should ensure that any messages containing links to palsf.site are quarantined or rejected. Threat‑intel teams should track any future sightings of the IP address or associated Cloudflare nameservers for potential reuse in other malicious campaigns.