@rccess - watch the sip traffic with ngrep and see where the register request is sent:
``` ngrep -d any -qt -W byline "sip" port 5060 ```
Are you using event_route[tm:local-request]? It seems that a log message is printed from there, if yes, be sure you don't modify the address of the destination to some invalid target.