ugor[.]lat
“Even geduld...”
Détection enregistrée
Alerte de dissimulation
- Type de dissimulation
status_split- Score de dissimulation
- 4/6
Résumé des preuves
Analysis indicates that ugor.lat was registered on March 16 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 188.114.97.3 located in the United States under AS13335. The domain uses nameservers june.ns.cloudflare.com and nikon.ns.cloudflare.com along with Cloudflare, Cloudflare Browser Insights and HTTP/3. HTTP requests return status code 403 while the observed page title remains Even geduld.... The domain appears on exactly three security blocklists and carries a Gridinsoft trust score of 0/100. VirusTotal detection stands at 2/95 vendors. The SSL certificate is issued by Let's Encrypt and the infrastructure remains active as of July 12 2026.
Infrastructure analysis reveals consistent use of Cloudflare edge services that obscure origin servers. The 403 response prevents direct content inspection yet the combination of recent registration, blocklist presence and explicit listings by PhishDestroy, MetaMask and SEAL aligns with the assigned generic_phishing classification. No additional brand impersonation or kit signatures are recorded in the available data. The exact payload delivery mechanism therefore stays undetermined from passive indicators alone.
Defenders should add the domain ugor.lat and IP 188.114.97.3 to internal block lists and monitor for DNS queries against the listed Cloudflare nameservers. Continued observation of HTTP status changes or certificate renewals can provide early signals of infrastructure migration. Correlation of new resolutions or WHOIS updates with the March 16 2026 creation date supports prioritization of this asset in high-risk feeds. Regular rechecking of the three known blocklist entries helps confirm persistence or takedown status.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 13/08/2026
8 sources externes surveillées Aucune correspondance
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of ugor.lat · checked Mar 17, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif