Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is complaint@gname.com.
The latest stored availability evidence still shows the domain reachable; 23 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
sougouun[.]com
“搜狗输入法下载官网|Windows/Mac/安卓/iOS 安装包与使用教程”
The domain sougouun.com was registered through Gname.com Pte. Ltd. on September 01, 2025 and remains active as of the report date, July 22, 2026. DNS resolution points to the single IPv4 address 188.114.96.3, hosted on Cloudflare infrastructure indicated by the authoritative name servers elliott.ns.cloudflare.com and sierra.ns.cloudflare.com. The domain appears on one public security blocklist and is explicitly listed as blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has observed malicious use.
VirusTotal analysis shows that one out of ninety‑five scanned scanners flagged the domain, providing independent confirmation of suspicious behavior. No additional public intelligence such as Safe Browsing alerts, Open Threat Exchange entries, SSL certificate details, HTTP response codes, or page‑title metadata is currently available for this host. Given the limited but consistent indicators—recent registration, Cloudflare hosting, blocklist presence, and a positive detection on VirusTotal—the domain should be treated as a high‑risk phishing vector.
Defenders are advised to add sougouun.com to domain‑based deny lists, quarantine any traffic to the associated IP address 188.114.96.3, and monitor for future detections across additional scanning services. Continuous re‑evaluation is recommended, as further analysis of the web content or associated campaigns may reveal the specific phishing payloads or target brands. Until such detailed evidence is obtained, the precautionary isolation of the domain and its hosting IP remains the most effective mitigation.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | sougouun.com |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 4 identified
Google Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100% confidenceCloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% confidenceCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of sougouun.com · checked Jul 22, 2026
Evidence & External Reports
PD-20260722-9274FB Recipient: complaint@gname.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive