onoplanoai[.]ink

Analysis of the domain onoplanoai.ink indicates it is an active phishing infrastructure with elevated risk as of July 29, 2026. The domain was registered on May 8, 2026, through NameCheap, Inc., a registrar frequently associated with newly observed phishing campaigns. At the time of assessment, 18 of 91 security vendors on VirusTotal have flagged the domain, suggesting detection by a minority but non-negligible portion of the security community. The domain also appears on one security blocklist, further corroborating its malicious classification.

No specific brand impersonation or targeted scam type has been confirmed in available data, and the exact content of the site remains unanalyzed. The page title and visual characteristics are not documented in the provided intelligence, limiting attribution to a generic phishing classification. Infrastructure analysis reveals no additional details regarding hosting provider, autonomous system number (ASN), or geolocation, which could aid in clustering this domain with known threat actor infrastructure. Defenders are advised to treat onoplanoai.ink as an active threat.

Network-level blocking is recommended based on existing detections and blocklist inclusion. Organizations should monitor for connections to this domain in proxy logs, endpoint telemetry, and DNS queries. If internal access is detected, incident response procedures should be initiated to assess potential credential compromise or data exfiltration. Given the domain's recent registration and limited but consistent detection by security vendors, continued monitoring for updates to its detection status and blocklist presence is warranted.