opvesta-ventures[.]com

Analysis of opvesta-ventures.com shows a newly registered domain created on June 26, 2026 that is currently active and associated with a generic phishing campaign. The domain resolves to the IP address 5.196.175.67, and its authoritative nameservers are ns3.ddoscure.com and ns4.ddoscure.com, indicating that the hosting infrastructure is managed through the ddoscure.com DNS service. Registration was performed through Sav.com, LLC, a registrar that has been used for other malicious registrations.

The domain has been cited in two AlienVault OTX threat‑intelligence pulses, providing external corroboration of its malicious intent. VirusTotal scanning recorded a single positive detection out of 91 security vendors, confirming that at least one vendor identified the domain as suspicious. Defensive feeds have already listed the domain on one security blocklist, and the commercial anti‑phishing service PhishDestroy has taken it down in its own filters.

No public SSL certificate details, HTTP response codes, or page‑title information are presently available, leaving the exact content of the landing page unverified. Given the confirmed infrastructure indicators, the domain should be added to network‑level blocklists, monitored for any changes in hosting or certificate deployment, and flagged in endpoint protection rules. Defenders are advised to treat any communications originating from or referencing opvesta-ventures.com as malicious and to educate users about potential phishing attempts that may leverage this domain.