ouyiu[.]com

The domain ouyiu.com is currently active and returns an HTTP 200 response, indicating that a web service is reachable. DNS resolution is delegated to the authoritative nameservers a6.share-dns.com and b6.share-dns.net, both of which are typical of shared DNS providers. Registration data shows the domain was created through Gname.com Pte. Ltd., a registrar that is frequently observed in malicious infrastructure. VirusTotal analysis reveals that 16 out of 91 security vendors have flagged the domain, suggesting a non‑trivial level of detection across the security ecosystem.

The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing platform considers it malicious. No public information is available regarding the hosting IP address, ASN, geographic location, SSL certificate details, or the page title presented by the site, leaving those aspects uncertain. Likewise, the specific content or branding displayed on the site has not been disclosed, limiting the ability to attribute a targeted brand or campaign. For defenders, the evidence warrants immediate inclusion of ouyiu.com in URL filtering rules and endpoint allow‑list exclusions.

Continuous monitoring of DNS queries for the associated nameservers is advised, as any change may indicate a shift in hosting or an expansion of the campaign. Organizations should also consider sharing the domain indicator with internal threat‑intel feeds and external blocklist operators to broaden coverage. Given the active status, HTTP 200 response, and multi‑vendor detection, the domain should be treated as high‑risk and blocked at perimeter defenses until further analysis can confirm any remediation or takedown actions.