ooioirehkfd[.]sbs

Analysis of the domain ooioirehkfd.sbs indicates it was a confirmed generic phishing site, now offline as of July 24, 2026. The domain was registered on December 9, 2025, through Global Domain Group LLC and utilized nameservers ns1.globaldomaingroup.com and ns2.globaldomaingroup.com. It resolved to the IP address 137.220.152.151, hosted on AS4907 (BGPNET PTE. LTD.) in Hong Kong.

No SSL certificate was present, and the domain returned an HTTP page title of '没有找到站点' (translation: 'Site not found'), suggesting either a placeholder or a takedown state. Detection data from July 2026 shows 16 of 93 security vendors on VirusTotal flagged the domain as malicious, while it appeared on one security blocklist. The domain was blocked by PhishDestroy and assigned a Gridinsoft trust score of 0/100, reinforcing its classification as high-risk. No specific brand impersonation or phishing kit was identified in the available data, and the exact content or target of the phishing attempt remains unconfirmed.

Defenders should treat this domain as compromised infrastructure. The absence of an SSL certificate, combined with its short lifespan and hosting on a bulletproof ASN, aligns with patterns observed in phishing campaigns. Network blocks should remain in place, and any prior DNS resolutions should be reviewed for potential exposure. Given its current offline status, no active threat is present, but historical logs should be checked for connections to this domain.