one[.]link

The domain one.link has been flagged as a phishing site impersonating legitimate services. With a VirusTotal score of 15/95, it raises significant red flags regarding its safety. The page title suggests that it is being marketed as a 'for sale' domain, which is often a tactic used by malicious actors to lure in potential victims. Additionally, external detections from URLQuery indicate two instances of phishing-related activity.

Registered through DYNADOT LLC in the US, one.link is only three days old and has already garnered two blocklist entries, indicating a suspicious reputation. The IP address associated with this domain is 54.215.31.113, which is noted for shared hosting, a common characteristic among phishing domains that often seek to evade detection. Given its short lifespan and immediate red flags, this domain could be part of an active campaign to deceive users.

Although one.link is currently marked as alive, PhishDestroy has taken steps to monitor its activity closely. The domain has been reported for phishing attempts, contributing to its ongoing analysis and potential future takedown to protect users from being exploited.