ger-panel[.]info

ger-panel.info is currently hosting a live HTTP service that returns HTTP 200 and presents the page title “Will it hit the corner?”. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and uses the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. DNS resolution points to the IPv4 address 185.81.115.67, which is allocated to AS59711 HZ Hosting Ltd in the Netherlands. The TLS certificate presented is issued to “FASTPANEL / parking”, indicating a default hosting‑panel certificate rather than a brand‑specific one. Analysis from VirusTotal shows that 2 out of 95 scanning engines have flagged the domain, and it is listed on a single public blocklist where it is identified by PhishDestroy. The threat classification is generic_phishing with a high risk rating, and the infrastructure remains active as of the report date. While the page content has not been publicly disclosed, the combination of a recently created domain, generic hosting certificate, and detection by multiple security vendors suggests a deliberate phishing campaign. Defenders should block the domain at perimeter firewalls, add it to DNS sinkhole lists, and monitor for any credential‑stealing activity targeting users who may be lured by the ambiguous page title. Continued observation is recommended to capture any payload changes or additional infrastructure deployment.