oauth-x[.]info

The domain oauth-x.info was registered on February 23, 2026 through Unstoppable Domains Inc. Its authoritative name servers are ns-cloud-b1.googledomains.com, ns-cloud-b2.googledomains.com, and ns-cloud-b3.googledomains.com, indicating reliance on Google Cloud DNS. DNS resolution points to the single IPv4 address 34.42.100.71, which is announced by AS396982 belonging to Google LLC and geolocated to the United States. An HTTPS endpoint is presented with a Let’s Encrypt certificate (R13), and the web server reports a 302 redirect response. The page title returned from the redirected URL is "unstoppabledomains.com" and the front‑end stack includes Varnish caching.

Reputation data shows a Gridinsoft trust score of 0 out of 100, reflecting a severely low confidence rating. VirusTotal scans have flagged the domain by three out of ninety‑three vendor engines, and the domain appears on three public security blocklists. Additionally, it is explicitly blocked by the PhishDestroy, MetaMask, and SEAL blocklist providers, reinforcing the view that it is being used for malicious purposes. The available evidence suggests that the domain is currently active and being leveraged for a generic phishing campaign, although the specific phishing lure or target page content has not been disclosed.

Uncertainty remains regarding the exact payload delivered after the redirect and whether the site hosts credential‑stealing forms or other malicious scripts. Defenders should block network traffic to 34.42.100.71, add oauth-x.info to URL filtering and domain reputation lists, and monitor for any outbound connections that reference the page title "unstoppabledomains.com". Continuous re‑evaluation of threat‑intel feeds is advised to capture any emerging indicators tied to this infrastructure.