omakale[.]me

Analysis of omakale.me shows a newly registered domain that is actively used for phishing. The domain was created on October 11, 2025 and is registered through Namecheap Inc. DNS resolution points to the IP address 188.114.97.3, which is hosted behind Cloudflare infrastructure; the authoritative nameservers are evan.ns.cloudflare.com and zoe.ns.cloudflare.com. Network fingerprinting reveals that the site serves content over HTTPS with HTTP Strict Transport Security (HSTS) enabled, utilizes Cloudflare Browser Insights, and supports HTTP/3, indicating a modern web stack but also providing the attacker with the anonymity and performance benefits of Cloudflare's edge network.

The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming its malicious intent. VirusTotal has processed the domain with 91 antivirus engines, reporting no detections; this absence of alerts does not constitute a safety assurance and is consistent with many low‑profile phishing sites that evade signature‑based detection. No public Safe Browsing verdict, Open Threat Exchange (OTX) indicator, or page title information is available at this time, leaving the exact content of the landing page unverified.

Given the confirmed blocklist entry, the Cloudflare‑based hosting, and the recent creation date, defenders should treat omakale.me as a high‑confidence phishing indicator. Recommended actions include adding the domain to internal block and sinkhole lists, monitoring DNS queries for the associated IP address, and observing any future resolution changes that could signal infrastructure migration. Continuous re‑scanning with dynamic analysis tools is advised to capture the payload or credential‑harvesting mechanisms should the site become more active.