liarasconth.com — O‘ZBEKGIDROENERGO Investigation

This domain liarasconth.com was registered on May 09 2026 through Tucows Domains Inc. It resolves to IP 188.114.97.3 located in CA under CloudFlare, Inc. and uses the nameservers ajay.ns.cloudflare.com together with piper.ns.cloudflare.com. The SSL certificate originates from Let's Encrypt under the E8 profile. HTTP requests return status 200 and the page title matches O‘ZBEKGIDROENERGO exactly. Infrastructure analysis reveals Cloudflare proxying in front of the origin. The domain remains active according to current observations. Analysis indicates appearance on one security blocklist and presence in a single AlienVault OTX threat intelligence pulse. VirusTotal records flags from 1 of 95 vendors. The Gridinsoft trust score is recorded at 0 out of 100. The risk level is classified high and the threat type is generic phishing. No additional ASN or kit details appear in the available data. Registration age of roughly two months is consistent with many short-lived domains observed in similar cases. What remains uncertain is the precise content served beyond the recorded title and whether the domain continues to host active credential-harvesting forms or redirect chains. The single blocklist hit and low vendor detection count leave the full scope of distribution unclear. No historical snapshots or WHOIS contact data were supplied to confirm prior use. Defenders should block the domain and its current IP at network boundaries while monitoring the listed nameservers for new resolutions. Certificate transparency logs should be watched for additional Let's Encrypt issuances under the same name. Organizations referenced by the page title O‘ZBEKGIDROENERGO can add the domain to internal watchlists and request takedown through the registrar Tucows Domains Inc. Continued verification of HTTP responses will confirm whether the infrastructure is still operational.