registerperle[.]xyz

The domain registerperle.xyz was registered on March 25 2026 through Cloudflare, Inc. and is currently hosted on Cloudflare’s network (IP 104.21.77.81, located in CA). The authoritative name servers are ryan.ns.cloudflare.com and ligia.ns.cloudflare.com. TLS is provided by Google Trust Services under the WE1 certificate, and HTTP requests return a 200 status code.

Threat intelligence sources classify the site as a generic phishing infrastructure. AlienVault OTX references it in a single pulse, and VirusTotal reports that 7 of 95 scanned security vendors have flagged the domain. The domain appears on four public blocklists and has a Gridinsoft trust score of 0 out of 100, indicating a high confidence of malicious intent. It is also listed as blocked by PhishDestroy, MetaMask, ScamSniffer, and SEAL.

While the available data confirms the domain’s active status and its association with phishing, the specific payloads, targeted brands, or victim demographics remain unverified because no page content or lure details have been disclosed. The lack of additional detection counts beyond the single OTX pulse and the modest number of VT flags suggests limited exposure, but the presence on multiple blocklists and a zero trust score imply a deliberate malicious operation.

Defenders should immediately block or sinkhole registerperle.xyz at the DNS level and enforce outbound filtering for connections to its resolved IP address. Network monitoring should alert on TLS handshakes using the Google Trust Services / WE1 certificate to this host. Given the active status, incident response teams should assume that any credential capture attempts originating from this domain are ongoing and treat related logs as potentially compromised.