This URL is dangerous — do not proceed
Credential Phishing
Scanned URL
https://l.gourl.es/l/ef7795c476361b59c3836776784014d990cac7c2?notrack=1&u=14533316
l.gourl.es
No screenshot taken
Threat Analysis
This page matches the structure of a previously confirmed phishing kit and appears to be a newly deployed instance of the same attack infrastructure. Avoid entering any personal information on this page.
Domain Intelligence
Domainoat.lumexora.xyz
TLDxyz
Domain age
19 days
RegistrarSpaceship, Inc.
CreatedAug 19, 2026
TLS
DV Only
TLS issuercountryName=US, organizationName=Google Trust Services, commonName=WE1
TLS subjectcommonName=lumexora.xyz
TLS expiresNov 17, 2026
Name servers
carla.ns.cloudflare.comderek.ns.cloudflare.com
Reputation
WHOIS
RegistrarSpaceship, Inc.
Created2026-08-19T20:42:12+00:00
Expires2027-08-19T23:59:59+00:00
StatusserverTransferProhibited https://icann.org/epp#serverTransferProhibited
Name serverscarla.ns.cloudflare.com, derek.ns.cloudflare.com
Content Indicators
5SIGNALS
5 signals found
33 indicators checked · 28 cleared
Critical
1Exfiltration Endpoints (3)
CRITICALhttps://api.telegram.org/bot8330489200:AAG0_xEGNtbQs90UvcMkPYwvQLVt44v5u3A/sendMessagehttps://api.telegram.org/bothttps://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`
Infrastructure
Obfuscated redirectCLEAR
Unicode look-alike charactersCLEAR
Suspicious TLDCLEAR
Punycode domainCLEAR
Excessive subdomainsCLEAR
Behavioral
Structural
2CAPTCHA gate
Orphan page (no internal navigation)
Content
2Email field
Phone number field detected
Financial
Fetch Details
100Word count
16Paragraphs
0%Link density
Page language:EN
JS renderingAuto-escalated(Low text-to-HTML ratio: 1613936 bytes HTML, only 0 chars visible text)
Redirect chain (1)
https://l.gourl.es/l/ef7795c476361b59c3836776784014d990cac7c2?notrack=…
https://oat.lumexora.xyz/?p=ztadxy2p35
Confirm you're not a robot I'm not a robot PDF Viewer 💻 Windows Computer Required This content is designed for Windows desktop computers only . Please visit this page using a Windows desktop/laptop computer to continue. Mobile devices, macOS, and other operating systems are not supported. 1 2 3 / 3 100% These secured PDF files were created using the latest version of Adobe. Please update or download Adobe PDF Reader to view them. Download Adobe Acrobat Reader Google Chrome Web Browser Download Microsoft Edge Download Firefox Browser New Tab New tab New Tab New Tab https://www.google.com/chrome/?brand=FHFK&ds_kid=10478623183&gclsrc=aw.ds&gad_source=1 https://www.microsoft.com/en-us/edge/download?form=MA13FJ https://www.firefox.com/en-US/browsers/desktop/windows/ https://get.adobe.com/reader/download?os=Windows+10&name=Reader+2025.001.20630+English+for+Windows&lang=en&nativeOs=Windows+10&accepted=&declined=&preInstalled=&site=enterprise
Submitted message
Scanned inSep 8, 2026, 08:55 AM
Completed in7.0s
Domain Intelligence
Domainoat.lumexora.xyz
TLDxyz
Domain age
19 days
RegistrarSpaceship, Inc.
CreatedAug 19, 2026
TLS
DV Only
TLS issuercountryName=US, organizationName=Google Trust Services, commonName=WE1
TLS subjectcommonName=lumexora.xyz
TLS expiresNov 17, 2026
Name servers
carla.ns.cloudflare.comderek.ns.cloudflare.com
Content Indicators
5SIGNALS
5 signals found
33 indicators checked · 28 cleared
Critical
1Exfiltration Endpoints (3)
CRITICALhttps://api.telegram.org/bot8330489200:AAG0_xEGNtbQs90UvcMkPYwvQLVt44v5u3A/sendMessagehttps://api.telegram.org/bothttps://api.telegram.org/bot${TELEGRAM_BOT_TOKEN}/sendMessage`
Infrastructure
Obfuscated redirectCLEAR
Unicode look-alike charactersCLEAR
Suspicious TLDCLEAR
Punycode domainCLEAR
Excessive subdomainsCLEAR
Behavioral
Structural
2CAPTCHA gate
Orphan page (no internal navigation)
Content
2Email field
Phone number field detected
Financial
Reputation
WHOIS
RegistrarSpaceship, Inc.
Created2026-08-19T20:42:12+00:00
Expires2027-08-19T23:59:59+00:00
StatusserverTransferProhibited https://icann.org/epp#serverTransferProhibited
Name serverscarla.ns.cloudflare.com, derek.ns.cloudflare.com
Fetch Details
100Word count
16Paragraphs
0%Link density
Page language:EN
JS renderingAuto-escalated(Low text-to-HTML ratio: 1613936 bytes HTML, only 0 chars visible text)
Redirect chain (1)
https://l.gourl.es/l/ef7795c476361b59c3836776784014d990cac7c2?notrack=…
https://oat.lumexora.xyz/?p=ztadxy2p35
Confirm you're not a robot I'm not a robot PDF Viewer 💻 Windows Computer Required This content is designed for Windows desktop computers only . Please visit this page using a Windows desktop/laptop computer to continue. Mobile devices, macOS, and other operating systems are not supported. 1 2 3 / 3 100% These secured PDF files were created using the latest version of Adobe. Please update or download Adobe PDF Reader to view them. Download Adobe Acrobat Reader Google Chrome Web Browser Download Microsoft Edge Download Firefox Browser New Tab New tab New Tab New Tab https://www.google.com/chrome/?brand=FHFK&ds_kid=10478623183&gclsrc=aw.ds&gad_source=1 https://www.microsoft.com/en-us/edge/download?form=MA13FJ https://www.firefox.com/en-US/browsers/desktop/windows/ https://get.adobe.com/reader/download?os=Windows+10&name=Reader+2025.001.20630+English+for+Windows&lang=en&nativeOs=Windows+10&accepted=&declined=&preInstalled=&site=enterprise
Submitted message
Scanned inSep 8, 2026, 08:55 AM
Completed in7.0s