osogransd[.]online
“Verificación”
This domain is flagged as a high-risk credential harvesting phishing site targeting users through fraudulent verification pages. Analysis indicates the domain is designed to mimic legitimate authentication portals, likely to capture login credentials, payment details, or personal information under the guise of a required verification process. The page title 'Verificación' suggests a focus on Spanish-speaking users or services, increasing the likelihood of targeted social engineering attacks. Infrastructure analysis reveals the domain osogransd.online was registered on June 16, 2026, through HOSTINGER operations, UAB. It currently resolves to the IP address 216.250.112.100 and presents an SSL certificate issued for 'localhost,' a non-standard and suspicious configuration indicative of malicious infrastructure. VirusTotal detection shows 2 out of 95 security vendors have flagged this domain as malicious, a low but notable detection rate that may reflect early-stage or evasive phishing campaigns. No blocklist entries or trust scores from additional threat intelligence platforms were identified at the time of analysis. Mitigation steps for this threat include immediate blocking of the domain and its resolving IP (216.250.112.100) at the network perimeter. Security teams should deploy indicators of compromise (IOCs) across endpoint detection and response (EDR) systems, web proxies, and email security gateways to prevent user access. Given the domain's association with credential harvesting, organizations should monitor for unusual authentication attempts, particularly those originating from internal networks or VPNs. Users who may have interacted with the domain should be required to reset credentials via a trusted channel, and multi-factor authentication (MFA) should be enforced to mitigate account takeover risks. Additionally, security awareness training should emphasize the risks of verification-themed phishing pages, especially those using non-standard SSL certificates or recently registered domains.
Network Security Intelligence
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive