oberon-sys[.]com

The domain oberon-sys.com was registered on 2026-03-06 through Namecheap Inc. and is currently taken offline. DNS resolution points to the IPv4 address 193.200.17.197, which resolves to a hosting location in Poland (BV Na38). The authoritative nameservers are dns1.registrar-servers.com and dns2.registrar-servers.com. No TLS certificate is presented; the site serves HTTP only and advertises the HTTP Strict Transport Security header, indicating the use of Nginx as the web server.

Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single public blocklist, where it is listed by PhishDestroy. VirusTotal analysis shows that two of ninety‑four scanners flagged the host, suggesting some detection of malicious behavior, although the majority of engines did not raise an alert. The page title returned by the HTTP response is "Oberon Investments Group," aligning with the classified scam type of an investment fraud. No additional indicators such as malicious payload hashes, command‑and‑control endpoints, or phishing kit signatures have been disclosed.

Consequently, the precise mechanics of the fraud—whether it collects credentials, solicits payments, or redirects victims—remain unknown. Defenders should add oberon-sys.com to inbound and outbound filtering rules, enforce DNS sink‑holing for the associated IP address, and monitor the registrar’s name server records for any re‑activation. Continuous re‑scanning with multi‑engine services is advised to capture evolving detection signatures, and any future appearance of the domain on additional blocklists should be treated as a confirmation of ongoing malicious intent.