oa2[.]lol
“oAuth2 Service”
oa2.lol — असत्यापित. साक्ष्य सारांश: VirusTotal 4/91 (alphaMountain.ai, Bfore.Ai PreCrime, CRDF, Gridinsoft); PhishDestroy score 76/100. रजिस्ट्रार: NameCheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain oa2.lol was a generic phishing site posing as an 'oAuth2 Service' to harvest user credentials or session tokens. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, oa2.lol has been taken offline, but its prior activity classified it as an elevated-risk phishing threat.
Technical indicators confirm oa2.lol was flagged by 2 of 95 VirusTotal security vendors, including Bfore.Ai PreCrime and Seclookup. The domain was registered through NameCheap, Inc. on October 9, 2023, and resolved to the IP address 104.21.56.214, hosted on Cloudflare's network (AS13335). It appeared on 1 security blocklist (PhishDestroy) and was referenced in 2 AlienVault OTX threat intelligence pulses. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'oAuth2 Service'. Gridinsoft assigned it a trust score of 0/100, and technologies detected included React, WebAssembly, and Google Cloud services.
Users who interacted with oa2.lol should immediately change passwords for any accounts accessed through the site, enable two-factor authentication, and monitor accounts for unauthorized activity. Revoking active session tokens or OAuth permissions linked to the domain is also recommended. Report the phishing attempt to platforms like Google Safe Browsing, the Anti-Phishing Working Group (APWG), or local cybersecurity authorities to aid in tracking and mitigation.
नेटवर्क सुरक्षा इंटेलिजेंस
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 15 identified
Algolia offers a hosted web search product delivering real-time results.
www.algolia.com 100% विश्वासWebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.
webassembly.org 100% विश्वासReact is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 100% विश्वासPayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.
paypal.com 100% विश्वासZendesk is a cloud-based help desk management solution offering customizable tools to build customer service portal, knowledge base and online communities.
zendesk.com 100% विश्वासSendGrid is a cloud-based email delivery platform for transactional and marketing emails.
sendgrid.com 100% विश्वासhCaptcha is an anti-bot solution that protects user privacy and rewards websites.
www.hcaptcha.com 100% विश्वासHubSpot is a marketing and sales software that helps companies attract visitors, convert leads, and close customers.
www.hubspot.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासCloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of oa2.lol · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।