referral-link-oi91ids1link23[.]org

This domain is flagged as a generic phishing threat and remains under active investigation as of July 20, 2026. The domain referral-link-oi91ids1link23.org was created on February 22, 2026, and is registered through Tucows Domains Inc. Its nameservers are hosted by Njalla, a privacy-oriented provider often observed in malicious infrastructure. The domain resolves to IP address 62.60.226.89, which is currently active. One security blocklist, PhishDestroy, has already blocked the domain, indicating a confirmed link to phishing operations. VirusTotal data shows that 95 vendors have scanned the domain, and zero currently flag it as malicious; however, the absence of detections is not proof of safety and may reflect a recent appearance or incomplete vendor coverage. No other intelligence sources—such as Google Safe Browsing, AlienVault OTX, SSL certificate details, HTTP status codes, trust scores, or page title information—are available in the current record. Defenders should treat the domain as suspicious due to its registration with a privacy registrar, use of Njalla nameservers, and existing blocklist entry. Recommended actions include monitoring for changes in resolution or content, adding the domain to internal blocklists, and reviewing any email or network logs for connections to this domain. The exact hosted content has not yet been analyzed, so the specific brand or scam type, if any, remains unknown. No further conclusions can be drawn from the available data without additional investigation.