onenco[.]com

PhishDestroy identifies onenco.com as an active credential theft domain under investigation for potential fraudulent activities. The website is currently classified with a risk level of 'under_investigation' and exhibits behavior consistent with credential theft schemes. No specific brand impersonation has been confirmed at this stage, but the domain’s infrastructure and low detection rate raise immediate security concerns for potential visitors.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating a lack of widespread recognition in threat intelligence databases. The domain was registered through GoDaddy.com, LLC, resolves to IP address 188.114.97.3, and was created on December 21, 2022. It utilizes a Let’s Encrypt SSL certificate, which does not inherently indicate legitimacy. Despite the absence of blocklist entries at this time, the domain’s recent creation and low detection rate warrant heightened scrutiny.

The current status of onenco.com remains under active investigation, with no confirmed compromises or active campaigns documented yet. However, given the domain’s unresolved risk level and suspicious attributes, PhishDestroy advises users to avoid interacting with the site until further analysis is completed. If engagement is unavoidable, use a virtual machine or disposable session, enable multi-factor authentication on all accounts, and monitor for unauthorized access. Exercise extreme caution with any credentials entered on this domain.