wwwoucnyi[.]com

PhishDestroy has flagged wwwoucnyi.com as a generic phishing domain engaged in fake login scams, with no specific brand or drainer kit affiliation detected at this stage. The domain, registered through DYNADOT LLC on August 22, 2025, is currently hosted on IP address 54.215.31.113 and secured via a Let's Encrypt SSL certificate, suggesting an attempt to appear legitimate. While VirusTotal currently shows 3/95 detections and no blocklist entries, this absence of flags may reflect a low-sophistication campaign or delayed threat intelligence updates. Technical indicators for wwwoucnyi.com include a VirusTotal detection score of 3/95, registration through DYNADOT LLC, and an IP resolution of 54.215.31.113. The domain was created on August 22, 2025, and is not currently listed on Google Safe Browsing (GSB) or other major blocklists as of this advisory. This combination of fresh registration, low detection rates, and legitimate-looking infrastructure highlights the domain's potential for evading early-stage scrutiny, despite its active phishing operations. As of this advisory, wwwoucnyi.com remains an active threat, with an under-investigation risk status. Immediate response actions include flagging the domain for GSB inclusion, coordinating with DYNADOT LLC for potential takedown, and updating network defenses to block the associated IP and domain. While the current risk is categorized as under_investigation, the lack of detections and fresh infrastructure warrant heightened caution. Users and organizations are advised to avoid interacting with wwwoucnyi.com, monitor for related indicators, and report any suspicious activity to their security teams or PhishDestroy for further analysis.