olxcompraoficial[.]digital

Analysis as of July 25 2026 indicates that the domain olxcompraoficial.digital resolves to the IPv4 address 178.16.55.220 and remains reachable. The domain was registered on August 12 2025 through Sav.com, LLC and is using Cloudflare nameservers (priscilla.ns.cloudflare.com, skip.ns.cloudflare.com). No evidence of SSL certificate details, HTTP response codes, or page title has been published, so the content of the site cannot be confirmed at this time. The domain appears on a single external security blocklist and has been added to the PhishDestroy blocklist, confirming that at least one security vendor has classified it as malicious.

VirusTotal has recorded 91 independent scans; none of the scanners raised a detection, but the absence of detections does not constitute a safety assurance. The limited visibility into the hosting environment (only the IP address) prevents attribution of the underlying infrastructure to a specific autonomous system or geographic region. Consequently, the confidence in the threat’s operational status is moderate: the domain is active, is being targeted by blocklists, and matches the pattern of generic phishing campaigns, yet the lack of public payload samples or page analysis leaves the exact phishing vector unidentified. Defenders should add olxcompraoficial.digital to their deny lists, monitor DNS queries for the domain, and enforce outbound filtering of traffic to the resolved IP.

Network sensors should be configured to alert on any authentication attempts or credential submissions directed at this host. Because the domain uses Cloudflare’s DNS, it may benefit from rapid DNS changes; continuous re‑verification of its status is recommended. Organizations that employ threat intelligence feeds should ensure the domain is ingested from blocklist sources such as PhishDestroy and correlated with any future detections from endpoint or proxy logs.