mongolporn[.]com

This domain, mongolporn.com, was registered on April 28, 2026, and remains active as of July 12, 2026. Analysis indicates it is currently serving a 403 HTTP status, suggesting access restrictions or backend protections, though the domain continues to resolve to 188.114.97.3, a Cloudflare-hosted IP located in Canada. The infrastructure is supported by Cloudflare nameservers (hunts.ns.cloudflare.com and maria.ns.cloudflare.com) and secured with a Google Trust Services SSL certificate, which may obscure direct observation of malicious activity. The domain appears on one security blocklist and is flagged by a single vendor in VirusTotal, alongside a single threat intelligence pulse in AlienVault OTX. While these indicators suggest potential malicious intent, the limited detection volume does not provide conclusive evidence of widespread abuse. The registration was processed through Fewmoretaps OU, operating under Trustname.com, a provider often associated with domains exhibiting suspicious behavior. The Gridinsoft trust score of 0/100 further reinforces the domain's high-risk classification. Defenders should treat mongolporn.com as a potential credential-theft or phishing endpoint, particularly given its thematic naming and association with Cloudflare's infrastructure, which is frequently leveraged to mask attacker-controlled servers. Network-level blocking is recommended for organizations, with monitoring for any shifts in HTTP status or SSL certificate changes that may signal renewed malicious activity. Additional scrutiny of related domains registered through the same provider or resolving to the same IP range may uncover broader campaign infrastructure.