auth[.]perfectonchain[.]live

This domain is flagged as a high-risk phishing threat and remains active as of July 12, 2026. Infrastructure analysis reveals the domain resolves to IP address 107.172.61.186, hosted in the United States on AS36352 (HostPapa). The domain is registered through CC-107-172-61-184-30. VirusTotal data shows 9 out of 95 security vendors flag this domain, indicating broad detection across the security community. The SSL certificate is issued by Let's Encrypt with identifier YE1, which is commonly used for rapid domain provisioning and may indicate minimal validation. The page title is 'Perfectonchain | Welcome to Perfectonchain', suggesting the site presents itself as a welcome or landing page for a service called Perfectonchain. The exact nature of the phishing operation—whether credential harvesting, cryptocurrency theft, or other fraud—has not been confirmed through direct content analysis. No brand target or scam kit details are available in the intelligence. The domain appears on one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score is 0 out of 100, reinforcing the assessment of high risk. Defenders should block this domain at the network and email gateway levels, monitor for related subdomains or IPs under the same ASN, and investigate any user interactions with the domain for potential compromise. Given the broad vendor flagging and active status, immediate containment is recommended.