uat[.]evergreenfin[.]ltd

The domain uat.evergreenfin.ltd is currently classified as an active generic phishing infrastructure with an elevated risk rating. External intelligence shows that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one anti‑phishing solution has identified malicious activity associated with it. VirusTotal analysis reports that 12 of 91 scanned security vendors have flagged the domain, which reinforces the suspicion of malicious intent despite the majority of scanners remaining neutral.

No additional public data such as registrar information, hosting IP address, ASN, SSL certificate details, HTTP response codes, Safe Browsing verdicts, or page title have been disclosed, leaving the underlying hosting infrastructure and the exact phishing payload unidentified. Consequently, the precise lure, targeted brand, or credential‑harvesting technique cannot be confirmed at this stage.

Defenders should treat the domain as hostile, enforce network‑level blocks, add it to URL filtering lists, and monitor DNS query logs for any resolution attempts. Continuous re‑evaluation is advised, as further scans may reveal additional vendor detections or expanded blocklist coverage that could refine the threat profile.