percent[.]org

Analysis of percent.org shows a newly registered domain (created 28 April 2026) that resolves to the AWS EC2 address 52.20.84.62 in the us-east-1 region. The domain is registered through Dynadot Inc and uses the atom.com name servers (ns1.atom.com, ns2.atom.com). An HTTP request returns a 302 redirect and the only visible page title is "Percent.org — Premium Domain For Sale | Atom," indicating the site is being marketed rather than hosting typical content. The SSL certificate is issued by Let’s Encrypt (R13). Infrastructure scoring systems rate the domain poorly, with a Gridinsoft trust score of 0/100 and a single entry on a security blocklist. The domain is currently listed as blocked by PhishDestroy and appears in one AlienVault OTX pulse, suggesting that threat‑intel communities have flagged it as malicious. No detections are reported by VirusTotal, but the absence of a detection does not confirm safety. The domain remains active and is marked under investigation. Defenders should treat percent.org as a high‑confidence phishing indicator, add it to block lists, monitor DNS queries for the IP address 52.20.84.62, and enforce email and web filtering rules to prevent user exposure. Further investigation of the landing page content is recommended to confirm the phishing payload, but the existing infrastructure evidence already warrants precautionary controls.