gogorent[.]fun

gogorent.fun entered the PhishDestroy evidence set on Jun 24, 2026. The stored content classification is generic phishing. The assembled evidence scores 78/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 1 detections among 91 engines: Gridinsoft on Jun 25, 2026 at 02:01 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection on Jun 24, 2026 at 11:52 UTC. Google Safe Browsing returned no flag on Jun 24, 2026 at 12:00 UTC. URLScan completed without a malicious verdict (score 0) on Jun 25, 2026 at 08:15 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:16 UTC; content was unavailable. Registration records for the domain list PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar and Apr 4, 2026 as the creation date. At collection time, the hostname resolved to 172.67.141.36 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. DOM analysis completed on Jun 24, 2026 at 14:20 UTC; stored DOM score 78/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Jul 29, 2026 at 02:51 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / YE2 as the certificate issuer with validity through Aug 31, 2026; checked Jun 24, 2026 at 13:00 UTC.

No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.