osejp[.]co

Analysis of the domain osejp.co indicates it is an active phishing site registered on July 20, 2026, through Gname.com Pte. Ltd. The domain currently resolves to the IP address 172.67.181.14, which is associated with Cloudflare infrastructure, as further evidenced by its nameservers amy.ns.cloudflare.com and cleo.ns.cloudflare.com. This configuration is commonly observed in phishing campaigns to obscure the true hosting origin and leverage Cloudflare’s content delivery and security features to evade detection. As of July 23, 2026, the domain appears on one security blocklist and is flagged by one of ninety-one security vendors on VirusTotal, specifically identified as malicious by PhishDestroy. The low detection count does not necessarily indicate low risk; rather, it may reflect the domain’s recent registration and limited exposure to security scanning systems.

The domain’s creation date, just three days prior to this report, aligns with typical phishing campaign timelines, where domains are rapidly deployed and discarded. No specific brand impersonation or phishing kit has been confirmed in the available data, and the exact content of the site remains unanalyzed. However, the classification as a generic phishing domain suggests it is likely designed to harvest credentials or other sensitive information. Infrastructure analysis reveals the use of Cloudflare, which may complicate takedown efforts and prolong the domain’s operational lifespan.

Defenders should treat osejp.co as high-risk and prioritize blocking access to it within corporate and consumer environments. Network security teams are advised to monitor for connections to the IP 172.67.181.14 and review logs for any interactions with the domain. Given the domain’s recent registration and active status, further monitoring of the registrar Gname.com Pte. Ltd. for additional malicious domains may be warranted.