ugor[.]lat
“Even geduld...”
ugor.lat — Encubierto · accesible. Tipo de estafa: Generic Phishing. Resumen de las pruebas: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao); 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 89/100. Registrador: PDR.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis indicates that ugor.lat was registered on March 16 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 188.114.97.3 located in the United States under AS13335. The domain uses nameservers june.ns.cloudflare.com and nikon.ns.cloudflare.com along with Cloudflare, Cloudflare Browser Insights and HTTP/3. HTTP requests return status code 403 while the observed page title remains Even geduld.... The domain appears on exactly three security blocklists and carries a Gridinsoft trust score of 0/100. VirusTotal detection stands at 2/95 vendors. The SSL certificate is issued by Let's Encrypt and the infrastructure remains active as of July 12 2026.
Infrastructure analysis reveals consistent use of Cloudflare edge services that obscure origin servers. The 403 response prevents direct content inspection yet the combination of recent registration, blocklist presence and explicit listings by PhishDestroy, MetaMask and SEAL aligns with the assigned generic_phishing classification. No additional brand impersonation or kit signatures are recorded in the available data. The exact payload delivery mechanism therefore stays undetermined from passive indicators alone.
Defenders should add the domain ugor.lat and IP 188.114.97.3 to internal block lists and monitor for DNS queries against the listed Cloudflare nameservers. Continued observation of HTTP status changes or certificate renewals can provide early signals of infrastructure migration. Correlation of new resolutions or WHOIS updates with the March 16 2026 creation date supports prioritization of this asset in high-risk feeds. Regular rechecking of the three known blocklist entries helps confirm persistence or takedown status.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of ugor.lat · checked Mar 17, 2026
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.