rogherut.com
“FIAR - International Insurance-Reinsurance Forum”
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 3 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
rogherut.com — पहुंच योग्य · पहुंच प्रतिबंधित (HTTP 403). ब्रांड प्रतिरूपण: Unknown; घोटाले का प्रकार: Impersonation. साक्ष्य सारांश: VirusTotal 16/89 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET); URLQuery 5 alerts; CF Radar malicious; PhishDestroy score 95/100. रजिस्ट्रार: NameCheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
साक्ष्य सारांश
PhishDestroy first observed rogherut.com on Sep 16, 2026. Stored content metadata identifies Unknown as the apparent target. The captured page title is “FIAR - International Insurance-Reinsurance Forum”. Stored page analysis classifies the content as impersonation. Current evidence score: 95/100 (critical).
Positive findings are stored from 3 sources: VirusTotal, Cloudflare Radar, and URLQuery. VirusTotal recorded 16 detections among 89 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, VIPRE, Webroot, desenmascara.me on Sep 19, 2026 at 06:33 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. URLQuery recorded 5 threat-system alerts on Sep 16, 2026 at 19:29 UTC. Non-positive and contextual checks: AlienVault OTX listed 5 community pulse references (not vendor detections) on Sep 19, 2026 at 06:34 UTC. The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 18:20 UTC. Google Safe Browsing returned no flag on Sep 19, 2026 at 06:33 UTC. URLScan completed without a malicious verdict (score 0) on Sep 17, 2026 at 03:30 UTC.
An access-restricted HTTP 403 response was recorded on Sep 19, 2026 at 01:29 UTC. Registration records for the domain list NameCheap, Inc. as the registrar and May 16, 2026 as the creation date. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 16, 2026 at 22:20 UTC returned 66/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Dec 10, 2026; checked Sep 16, 2026 at 22:02 UTC.
The content indicators and 3 positive source findings support the current Unknown-themed impersonation classification.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | rogherut.com |
malicious | Sinkholed |
| DigiCert UltraDNS | rogherut.com |
malicious | Sinkholed |
| OpenDNS | rogherut.com |
phishing | Phishing Block |
| DNS4EU | rogherut.com |
malicious | Sinkholed |
| Cloudflare DNS | rogherut.com |
malicious | Sinkholed |
Forensic History & Detection Timeline
-
VirusTotal Detections Update Sep 18, 2026 · 14:14 UTCVirusTotal scanner detections updated from 2 to 16. Added scanner alerts: BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Sophos, VIPRE, Webroot, alphaMountain.ai.
-
Domain Status Transition Sep 17, 2026 · 12:00 UTCDomain state transitioned from alive to dead.
-
VirusTotal Detections Update Sep 16, 2026 · 23:54 UTCVirusTotal scanner detections updated from 1 to 2. Added scanner alerts: desenmascara.me.
-
Threat First Observed Sep 16, 2026 · 21:18 UTCDomain ingestion complete. Initial state is marked as alive pointing to IP
188.114.96.3.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
Evasion analysis
Cloaking suspected: scanner and victim titles differ
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
Provider response during scan: cloudflare_phishing_interstitial
तकनीकें · 10 identified
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of rogherut.com · checked Sep 16, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260916-9E28C3 Recipient: abuse@namecheap.com Abuse notice text as sent to the provider
Registrar: Namecheap Inc (United States) Policy Violations: Domain Registration Agreement prohibits hacking, misuse of domain to conduct attacks, scam and fraudulent activities; AUP allows immediate suspension Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।