tyler-robinson[.]xyz

Analysis of tyler-robinson.xyz indicates that the domain was used to deliver a generic phishing page, as evidenced by the page title "$TYLER" returned during the scan. The domain is registered through OwnRegistrar, Inc. and was created on September 12, 2025. Infrastructure inspection shows the domain resolves to IP address 104.21.87.90, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. No TLS certificate was presented, meaning the site operated without HTTPS protection.

The authoritative nameservers listed are georgia.ns.cloudflare.com and ignacio.ns.cloudflare.com, confirming Cloudflare’s DNS service was employed. Threat intelligence feeds have listed the domain on two independent blocklists, and it is actively blocked by PhishDestroy and ScamSniffer. VirusTotal analysis recorded three detections out of ninety‑five scanning engines, reinforcing the malicious classification. Additionally, Gridinsoft assigned a trust score of zero out of one hundred, indicating a high likelihood of malicious intent.

The current status is offline, suggesting the site has been taken down, but the historical evidence remains relevant for detection rules. Defenders should update URL filtering and domain reputation lists to include tyler-robinson.xyz, enforce blocking of connections to its IP address, and monitor for any re‑registration attempts. Given the lack of SSL and the presence of a simple page title, automated content inspection is unlikely to yield additional indicators, so reliance on the documented infrastructure and blocklist data is recommended for ongoing protection.