opuleviaglobal[.]com

The domain opuleviaglobal.com was registered on August 17, 2025 through Dynadot LLC. It resolves to the IPv4 address 198.12.80.250, which belongs to AS36352 operated by HostPapa in the United States. The authoritative name servers are dns1.safedatahost.cloud and dns2.safedatahost.cloud. No TLS certificate is presented, indicating the site is served over plain HTTP. The site is currently taken offline, and the HTTP status is not reachable. A page title was captured when the domain was active: “Opulevia Global – Dedicated to innovating, simplifying, and humanizing digital banking.” The title suggests an attempt to impersonate a financial institution, but the exact content of the landing page has not been publicly disclosed.

Infrastructure reputation is extremely low. Gridinsoft assigns a trust score of 0 out of 100. The domain appears on one security blocklist and has been blocked by PhishDestroy. VirusTotal reports that 7 of 95 scanned security vendors flagged the domain, confirming malicious classification. The overall risk level is elevated.

Because the domain is offline, real‑time observation of phishing payloads is not possible, and the specific credentials or data collection mechanisms remain unknown. Defenders should continue to block the IP 198.12.80.250 and the associated name servers at the network perimeter. Adding opuleviaglobal.com to local and cloud‑based phishing blocklists will prevent future resolution attempts. Continuous monitoring of the hosting provider HostPapa for new domains created under the same ASN is recommended, as threat actors often reuse infrastructure. If the domain reappears, a full content capture and analysis of HTTP responses, form fields, and redirects should be performed to determine the exact phishing vector.