palatarieltorov[.]uz

Analysis of palatarieltorov.uz shows a domain created on 26 March 2026 and registered through ООО «PS Cloud Services». The site resolves to IP 91.134.135.47, which is allocated to OVH SAS in France (AS16276). An SSL certificate issued by Let’s Encrypt (E8) is present, and the HTTP response returns status code 200. The page title observed is "Палата риелторов Узбекистана | официальный сайт", indicating a claim of official status for a realtors’ chamber in Uzbekistan.

Detected technologies include YouTube embeds, HTTP Strict Transport Security (HSTS), and support for HTTP/3. The domain’s MX record points to mail.palatarieltorov.uz with priority 10. VirusTotal has scanned the domain with 91 antivirus and URL‑reputation engines, but no vendor flagged the payload; this absence should not be interpreted as a safety guarantee. The domain appears on one public security blocklist and is listed as blocked by PhishDestroy, confirming that at least one protective service has taken mitigation action.

Although the site’s content has not been manually verified, the combination of a recently created domain, a public‑facing SSL certificate, a legitimate‑sounding title, and inclusion on a phishing blocklist aligns with typical phishing infrastructure patterns. Uncertainties remain regarding the exact malicious payload, the credential‑harvesting mechanism, and any downstream command‑and‑control infrastructure. Defenders should continue to monitor DNS resolutions for 91.134.135.47, enforce blocklist rules that include palatarieltorov.uz, and consider network‑level filtering of HTTP/3 traffic to this host. Organizations should also verify any communications purportedly originating from the realtors’ chamber against official channels and educate users about unsolicited requests referencing Uzbek real estate entities.