kolorijo[.]openwatersociety[.]com

Analysis of the domain kolorijo.openwatersociety.com indicates a high‑risk generic phishing infrastructure that remains active as of the report date, July 22, 2026. The domain was registered through Dynadot Inc. on April 10, 2013 and is currently served by Cloudflare nameservers dexter.ns.cloudflare.com and sierra.ns.cloudflare.com. DNS resolution points to the IPv4 address 74.225.253.27.

The domain is listed on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple threat‑intelligence feeds consider it malicious. VirusTotal records show that the domain was examined by 95 scanning engines, none of which raised a detection at the time of analysis; this lack of detections does not imply safety and should be interpreted as a limitation of current signatures. No publicly available page title, SSL certificate details, HTTP response codes, or content snapshots have been disclosed, leaving the exact phishing payload and target brand undefined.

Because the domain leverages reputable Cloudflare infrastructure, attribution based on hosting alone is inconclusive, but the combination of blocklist presence, registrar history, and persistent resolution to a single IP suggests a purpose‑built phishing operation. Defenders should add kolorijo.openwatersociety.com to outbound filtering rules, enforce DNS‑based blocking, and monitor for any future changes in its hosting or resolution patterns. Continuous re‑scanning with multi‑engine services is recommended to capture any emerging malicious payloads that may appear on the site.