biao[.]lat

This domain is flagged as a high‑risk generic phishing site. The authoritative name servers amos.ns.cloudflare.com and maya.ns.cloudflare.com resolve biao.lat to 172.67.215.177, an address owned by AS13335 Cloudflare, Inc. in the United States. Registration occurred on 11 Mar 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. The site returns HTTP 403 and presents the page title “Even geduld...”, while its TLS certificate is issued by Let’s Encrypt (E7). Infrastructure analysis shows Cloudflare Browser Insights and HTTP/3 support, indicating the use of Cloudflare’s edge services. The domain appears on three public blocklists and is listed as blocked by PhishDestroy, MetaMask, and SEAL. AlienVault OTX includes it in one pulse, and VirusTotal records a single vendor detection out of 94 scans. Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Evidence confirms the domain’s active phishing status, but the specific payload or credential‑stealing page content has not been publicly documented. Defenders should immediately block both the domain and its resolved IP address at network perimeters, add the domain to DNS sinkhole lists, and monitor for any related sub‑domains or additional Cloudflare‑hosted IPs that resolve to the same ASN. Continuous re‑scanning with multi‑engine services is advised to capture any future changes in the site’s behavior.