ladot[.]lacity-gour[.]cc

The domain ladot.lacity-gour.cc has been identified as a generic phishing site. It does not appear to be targeting a specific brand or using a particular drainer kit. However, the domain's presence on security blocklists and the elevated risk level warrant further investigation.

Analysis indicates that ladot.lacity-gour.cc has a VirusTotal score of 6/95, suggesting that it has been flagged by 6 out of 95 security vendors as potentially malicious. The domain is registered through Gname.com Pte. Ltd. and resolves to the IP address 172.67.169.39. The domain was created on June 12, 2026, and is currently listed on one security blocklist. The SSL certificate is issued by Google Trust Services, which may indicate an attempt to appear legitimate. The site employs Cloudflare for DNS and HTTP/3 for web communication.

The domain is currently offline, and it has been taken down as part of the response actions. Despite this, the risk remains elevated due to the potential for reactivation or related malicious activities. Organizations are advised to monitor for any signs of the domain reappearing and to ensure that network defenses are updated to block any future connections to this IP or related domains.