o-connect-v4[.]app

This domain, o-connect-v4.app, is flagged as an active phishing portal and remains operational as of July 12, 2026. Analysis indicates the domain was registered on February 21, 2026, through Web Commerce Communications Limited and is currently resolving to a Cloudflare IP (172.67.211.229, AS13335) in the United States. The domain uses Cloudflare nameservers (brett.ns.cloudflare.com, ivy.ns.cloudflare.com) and is served over HTTP/3, with Hostinger detected as the underlying hosting provider. The SSL certificate is issued by Google Trust Services (WE1), a common configuration for both legitimate and malicious domains leveraging Cloudflare's infrastructure. The domain returns an HTTP 403 Forbidden status, suggesting either a misconfigured phishing page, an access-restricted portal, or a placeholder awaiting activation. No specific brand or scam type is identified in the available data, and the exact content of the phishing page remains unanalyzed. Two of 93 security vendors on VirusTotal have flagged the domain, though this does not confirm the absence of malicious intent. The domain appears on at least one security blocklist, and it has been preemptively blocked by at least one threat intelligence feed. Defenders should treat this domain as high-risk due to its recent registration, Cloudflare-hosted infrastructure, and confirmed phishing classification. Network-level blocking is recommended, along with monitoring for any shifts in HTTP status or page content that may indicate an active campaign. Further analysis of associated URLs or subdomains may reveal additional indicators of compromise.