register[.]panen138edge[.]com

The domain register.panen138edge.com was created on March 26, 2026 and is registered through Dynadot Inc. It resolves to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. in Canada. The authoritative nameservers are aaron.ns.cloudflare.com and zelda.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. An HTTPS connection presents a certificate issued by Google Trust Services under the WE1 umbrella, confirming a valid TLS handshake. When accessed, the server returns HTTP 403 and the page title is "Just a moment...", a pattern commonly associated with automated challenge pages that hide underlying malicious content. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Independent analysis on VirusTotal shows that 14 of 94 security vendors flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The threat classification is listed as generic_phishing with a high risk rating and the scam type is identified as brand impersonation, though the specific brand being spoofed is not disclosed in the available data. The infrastructure is recent, leverages reputable hosting and CDN services, and exhibits typical indicators of a phishing staging site. Defenders should add the domain to network and endpoint blocklists, monitor DNS queries for the associated IP and nameservers, and enforce TLS inspection to capture any redirected payloads. Continuous re‑evaluation is advised, as the site remains active and may evolve its payload or target vector.