# ouyicn.club — SUSPICIOUS

> PhishDestroy identifies ouyicn.club as a credential-harvesting phishing domain. VirusTotal confirms only 1 of 95 vendors flagged it. Check the full report.

## Summary
PhishDestroy has identified ouyicn.club as an active credential-harvesting phishing domain designed to trick users into surrendering login details or sensitive personal information. The site mimics legitimate login portals or service providers, often through deceptive emails or fake advertisements, to harvest credentials for later exploitation in account takeovers or financial fraud. Users who enter their credentials on this domain risk immediate compromise of their accounts, which could lead to unauthorized access, data theft, or further propagation of the attack.  This domain was flagged by PhishDestroy after security analysis revealed multiple red flags. VirusTotal reports that only 1 out of 95 security vendors currently detect this domain as malicious, highlighting its stealthy nature. Investigations show the domain was registered on July 13, 2025, through Spaceship, Inc., and resolves to IP address 188.114.96.3. The use of a Google Trust Services SSL certificate adds a false sense of legitimacy, making it harder for users to spot the deception.  If you visited ouyicn.club or entered any information, act immediately to secure your accounts. Change passwords for any credentials you may have used on this site and enable multi-factor authentication where available. Run a full antivirus scan on your device to check for any malware that may have been installed. Report the incident to your IT security team or platform provider if the domain impersonated a service you use. Stay vigilant—always verify URLs and avoid entering sensitive information on unfamiliar sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-07-13 02:47:28
- Registrar: Spaceship, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/67a49e02-c72b-4614-9138-c1439ef6a164
- PhishDestroy: https://phishdestroy.io/domain/ouyicn.club/
- LLM endpoint: https://phishdestroy.io/domain/ouyicn.club/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ouyicn.club/
Last updated: 2026-03-28