oyuce[.]net

PhishDestroy identifies oyuce.net as an active generic phishing domain under investigation, specifically impersonating invoice delivery systems to harvest credentials and payment data.

This domain exhibits multiple red flags including a recent registration date of October 12, 2025, hosting on IP 54.215.31.113 via Amazon AWS, and utilizing a Let's Encrypt SSL certificate. The domain was registered through Dynadot Inc with no current presence on any major blocklists, showing 3 out of 95 detections on VirusTotal at time of analysis. Its generic nature and lack of historical reputation data make it particularly dangerous for unsuspecting users.

The phishing threat from oyuce.net is classified as high-priority due to its active status and lack of detection. Users should avoid clicking any links or downloading attachments from this domain, as it likely delivers malicious payloads disguised as invoice documents. Verify any unexpected invoices through official channels using known-good contact information. Organizations should implement DNS filtering to block this domain and monitor network traffic for connections to the associated IP address. Immediate report submission to cybersecurity teams and domain takedown requests are recommended given the active threat status.