whitehousecoin[.]lat

whitehousecoin.lat is flagged as a high‑risk generic phishing site. The domain was registered on 7 March 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 104.21.31.229, which belongs to AS13335 Cloudflare, Inc. in the United States. The hosting environment is protected by Cloudflare services, as indicated by the presence of Cloudflare Browser Insights, Cloudflare, and HTTP/3 support. The site presents a “Just a moment…” page and returns an HTTP 403 status code, while its TLS certificate is issued by Let’s Encrypt under the E7 profile.

Infrastructure analysis shows the domain is served by the authoritative nameservers amos.ns.cloudflare.com and maya.ns.cloudflare.com. The use of Cloudflare’s edge network masks the origin server, limiting direct attribution of the backend infrastructure. The SSL certificate is valid and provided by a widely trusted authority, which may lend an appearance of legitimacy to unsuspecting users.

Threat intelligence reports indicate that the site has been blocked by multiple blocklists, including PhishDestroy, MetaMask, and SEAL, and it appears on three public security blocklists. VirusTotal analysis recorded a single positive detection out of ninety‑five security vendors, confirming that at least one scanner identified malicious behavior. The domain’s risk level is classified as high and its status remains active as of the report date.

Defenders should continue to monitor the domain and enforce network‑level blocking based on the observed IP 104.21.31.229 and the associated Cloudflare nameservers. Email filtering solutions should be updated to flag any communications that reference “whitehousecoin.lat” or related brand impersonation. Incident response teams are advised to treat any user reports of credential requests linked to this domain as malicious and to isolate affected accounts promptly.