referral-link-owi3kd4link30[.]org

This domain, referral-link-owi3kd4link30.org, was registered on May 12, 2026 through Fewmoretaps OU d/b/a Trustname.com. The authoritative name servers are ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, indicating use of the Trustname.com DNS infrastructure. DNS resolution points to the single IPv4 address 62.60.226.89. The host is currently listed on one public security blocklist and has been added to the PhishDestroy blocklist, confirming that at least one mitigation service has taken action against it.

VirusTotal reports that the domain has been examined by 91 scanning engines, none of which returned a positive detection at the time of analysis; this absence of detections does not imply benign intent, but reflects the limited visibility of automated signatures for emerging phishing infrastructure. The domain’s operational status is marked as active, and there are no publicly available indications of SSL certificate details, HTTP response codes, or page title content. Consequently, the surface of the web payload remains uncharacterized.

Defensive posture should therefore include DNS‑level blocking of the domain and its resolved IP, inclusion of the host in internal URL filtering rules, and continued monitoring of threat‑intel feeds for any subsequent detection or attribution updates. Analysts should also verify the presence of the domain in additional blocklists and consider sink‑hole or sandbox analysis should the site become reachable in a controlled environment. The limited intelligence presently available underscores the need for proactive containment while additional forensic data is gathered.