register-ore[.]info

register-ore.info is currently active and has been observed in multiple security feeds. The domain was registered on 15 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is hosted on Cloudflare infrastructure, using the nameservers adam.ns.cloudflare.com and danica.ns.cloudflare.com. DNS resolution points to the IP address 188.114.97.3, which is part of Cloudflare's global edge network. VirusTotal has recorded four positive detections out of ninety‑one scanned vendors, indicating that at least a subset of security products recognize the domain as malicious. The same domain appears on three independent blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it is being used for phishing‑related activity. The threat type has been classified as generic phishing, and the risk level is marked high. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any associated malware kits, so those aspects remain unverified. Similarly, the absence of OTX references or Safe Browsing alerts in the supplied intelligence means that additional correlation is pending. Defenders should continue to enforce blocklist rules that include this domain, monitor DNS queries for resolutions to 188.114.97.3, and consider adding the domain to internal deny lists. Endpoint protection solutions that reference VirusTotal should treat the four vendor detections as a signal to quarantine or alert on any attempted connections. Ongoing traffic analysis is recommended to detect any anomalous communication patterns that may indicate exploitation.