vodafone-aiq-quiz[.]oathstudio[.]com

The domain vodafone-aiq-quiz.oathstudio.com is actively hosting a site titled "Vodafone - AIQ" and is currently resolved to the IP address 185.151.47.78, an Amazon Web Services host located in the United Kingdom. The zone is delegated to the Cloudflare nameservers lochlan.ns.cloudflare.com and melody.ns.cloudflare.com, and the domain registration was performed through GoDaddy.com, LLC. TLS termination uses a Let's Encrypt certificate (YR2), and an HTTP GET returns a 200 status code, indicating the page is reachable. VirusTotal analysis shows 19 of 91 security vendors have flagged the domain, and the site is listed on at least one public blocklist, with PhishDestroy actively blocking it. The domain is marked as active as of the report date, July 19, 2026. No additional technical payloads, credential‑capture forms, or malicious scripts have been publicly disclosed beyond the page title, so the exact attack vector remains unverified. Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the associated IP and nameservers, and apply URL filtering to prevent user access. Continuous re‑scanning with multiple threat‑intel services is recommended to capture any emerging indicators, and any credential submissions observed should be investigated for potential compromise of Vodafone‑related accounts.