oeilresearch[.]com

The domain oeilresearch.com was registered on March 11, 2026 through GoDaddy.com, LLC. It is delegated to the GoDaddy nameservers ns39.domaincontrol.com and ns40.domaincontrol.com and resolves to the IPv4 address 192.142.18.145, which belongs to AS214036 (Ultahost, Inc.) located in the Netherlands. The registration is recent, and the hosting infrastructure is typical for fast‑deployment abuse campaigns. Network‑level inspection shows the site is served over HTTPS using a Let’s Encrypt R12 certificate, indicating automated certificate issuance. Web‑application fingerprints reveal a WordPress stack running on Nginx with PHP and MySQL back‑ends, and Statcounter analytics are present. An HTTP request returns a 403 status code, and the page title displayed is “Oeil Research Journal – ISSN:0029-862X(Scopus Active Indexed And Permanent DOI”. The Gridinsoft trust score is 0 out of 100, and VirusTotal reports a single positive detection out of 95 scanners. These indicators align with the classification of a generic phishing site. The title mimics a legitimate academic journal, suggesting an attempt to lure researchers or scholars into submitting credentials. The near‑zero trust score, the presence on a security blocklist, and the block by PhishDestroy reinforce the malicious intent. However, the 403 response limits direct observation of the payload, leaving the exact credential‑harvesting page and any redirects uncertain. Defenders should add oeilresearch.com to DNS and URL filtering policies, and consider sinkholing the associated IP address 192.142.18.145. Continuous monitoring of the domain’s DNS records and TLS certificate changes is advised, as the infrastructure can be repointed quickly. Network traffic to the identified IP should be logged and inspected for suspicious POST requests that may indicate credential collection.