onlstmt[.]com

onlstmt.com is currently listed as an active malicious domain under investigation for generic phishing. The domain was registered on March 19 2026 through the HOSTINGER operations, UAB registrar and is served by the parking name servers ns1.dns-parking.com and ns2.dns-parking.com. DNS resolution points to the IPv4 address 84.32.84.166, which is the sole hosting endpoint observed for this indicator. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence source has identified it as malicious.

VirusTotal reports that the domain was scanned by 95 AV engines without any detections; however, the absence of signatures does not constitute evidence of benign behavior and should not be interpreted as a clearance. No public SSL certificate information, HTTP response codes, or page‑title metadata have been published, leaving the content of the site unverified. Consequently, the exact phishing lure, targeted brand, or credential‑capture mechanism remains unknown.

Analysts should treat the domain as a potential credential‑harvesting site and incorporate it into URL filtering, DNS sinkholing, and endpoint protection policies. Continuous monitoring of the IP address 84.32.84.166 for additional malicious activity is advised, as well as periodic re‑scans with updated malware engines. Organizations that employ outbound traffic controls should consider blocking traffic to the domain and its associated name servers until a definitive remediation decision can be made.