oo8159[.]cc

Analysis of the domain oo8159.cc indicates active phishing infrastructure as of July 27, 2026. The domain was registered on June 11, 2018, through Name.com, Inc., and remains operational despite being flagged by at least one security blocklist (PhishDestroy). Infrastructure review shows Cloudflare nameservers (sergi.ns.cloudflare.com and tessa.ns.cloudflare.com) and resolution to the IP address 202.95.11.100.

VirusTotal reports that 5 out of 91 security vendors classify this domain as malicious, though the specific nature of the threat—such as the targeted brand or scam type—has not been confirmed through available metadata. No page title, brand impersonation, or phishing kit details were provided in the intelligence, limiting further classification of the site's exact content or tactics. Defenders should treat this domain as high-risk due to its persistence, blocklist presence, and partial vendor detections.

Network-level blocking of 202.95.11.100 and monitoring for connections to oo8159.cc are recommended. Additional investigation into the domain's hosting patterns and potential associations with other malicious infrastructure may provide further context, though current evidence does not establish a broader campaign link.