opgmoney[.]sbs

The domain opgmoney.sbs was registered on March 23, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted behind Cloudflare infrastructure, as indicated by the nameservers may.ns.cloudflare.com and sevki.ns.cloudflare.com and the resolved IP address 104.21.15.184, which resolves to a Cloudflare data centre in Canada. The site returns a HTTP 404 response with the page title "Error 404 (Not Found)!!1", and no SSL certificate is presented, suggesting that the site is either misconfigured or deliberately taken offline. Cloudflare Browser Insights and HTTP/3 support are detected, confirming modern web stack usage. The domain has been flagged by multiple security entities: PhishDestroy, MetaMask, and SEAL have listed it as blocked, and three public blocklists also contain the domain.

VirusTotal scans show that four of ninety‑four security vendors have flagged the domain, reinforcing the suspicion of malicious activity. Gridinsoft assigns a trust score of zero out of one hundred, indicating a lack of trustworthiness. The threat categorisation supplied identifies the operation as an investment scam, a form of generic phishing that typically lures victims with promises of financial returns. Because the site is offline, direct content analysis is unavailable; the only observable artifact is the 404 error page title, which does not reveal the phishing payload or landing page structure.

Defenders should continue to block the domain at perimeter devices, update DNS filtering rules to include the known IP address and Cloudflare nameservers, and monitor for any re‑registration attempts. Incident responders should also consider correlating logs for connections to the Cloudflare IP range during the period prior to takedown, as these may contain traces of victim interaction. Ongoing vigilance is recommended, given the recent creation date and the involvement of multiple anti‑phishing platforms.