osmosiss[.]zone

The domain osmosiss.zone was observed on July 12, 2026 and is classified as a generic_phishing threat with a high risk rating. The site returns an HTTP 200 response and presents a page title identical to the domain name. VirusTotal analysis shows that 2 of 95 security vendors have flagged the domain, indicating limited but notable detection. The domain appears on a single security blocklist and is actively blocked by PhishDestroy, reinforcing its malicious intent.

Infrastructure analysis reveals that osmosiss.zone resolves to the IP address 75.2.115.196, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The domain is delegated to the nameservers ns1.dyna-ns.net and ns2.dyna-ns.net, and registration was performed through Dynadot Inc. An SSL certificate issued by Let\u2019s Encrypt (YR1) is present, providing encryption but not legitimizing the site.

Threat intelligence sources show the domain is referenced in one AlienVault OTX pulse and is listed on one additional blocklist. The Gridinsoft trust score of 0 out of 100 reflects an exceptionally low reputation. Despite the modest vendor detection rate, the combination of active blocking, low trust score, and association with known phishing infrastructure justifies the high risk designation.

Defenders should prioritize the inclusion of osmosiss.zone in outbound and inbound filtering rules, enforce DNS sinkholing where feasible, and continuously monitor any changes in detection counts or blocklist status. Ongoing observation of the hosting IP and associated nameservers is recommended, as adversaries may pivot to adjacent infrastructure. Prompt updates to security tooling will help mitigate potential credential harvesting attempts originating from this domain.