perchhomesupd[.]com

Analysis of perchhomesupd.com indicates a confirmed phishing domain targeting banking credentials, currently offline as of July 23, 2026. The domain was registered on November 5, 2025, through Dominet (HK) Limited and is hosted behind Cloudflare’s infrastructure, resolving to IPv6 address 2606:4700:3032::ac43:b195 within AS13335. Nameservers aaron.ns.cloudflare.com and priscilla.ns.cloudflare.com further confirm Cloudflare’s role in the hosting chain. No SSL certificate is present, increasing the risk of plaintext credential interception.

The page title 'AD not found (captcha2)' suggests an attempt to mimic a bank’s authentication or error page, though the exact brand impersonated remains unconfirmed. The domain is classified as a banking phishing site in available threat intelligence, with 16 of 95 security vendors on VirusTotal flagging it as malicious. It appears on one security blocklist and has been included in 16 AlienVault OTX threat pulses, indicating active tracking by the security community. Gridinsoft assigns a trust score of 0/100, reinforcing its high-risk classification.

Defenders should treat this domain as compromised and block all resolutions at the DNS level. Given its current offline status, monitoring for reactivation is recommended, particularly if the registrar or hosting provider does not enforce a takedown. No evidence links this domain to a known phishing kit, and further forensic analysis would require access to the original page content or server logs. The absence of an SSL certificate and the use of Cloudflare nameservers are consistent with low-effort phishing campaigns, though this does not reduce the threat to end users.