oqjdwo1[.]icu

oqjdwo1.icu is a domain flagged for generic phishing activities. No specific brand or drainer kit has been identified in association with this domain. The domain poses a significant risk due to its involvement in phishing attacks, which can lead to credential theft, financial loss, and other malicious outcomes.

Infrastructure analysis reveals that oqjdwo1.icu has a VirusTotal score of 5/95, indicating that while a minority of security vendors have flagged it as malicious, there is still a notable risk. The domain is registered through FewMoreTaps OÜ, a registrar known for being used by various malicious actors. It resolves to the IP address 188.114.97.3. The domain was created on April 28, 2026, and it appears on one security blocklist. Additionally, it has been mentioned in one threat intelligence pulse on AlienVault OTX and has a Gridinsoft trust score of 0/100, the lowest possible rating, further emphasizing its suspicious nature.

The domain is currently offline, which suggests that it has been taken down or is no longer active. However, the risk remains elevated, and it is advisable to continue monitoring for any signs of reactivation. Response actions should include blocking the domain in network configurations and educating users about the dangers of phishing. Despite the domain being offline, the infrastructure and registrar history indicate that it could be reactivated in the future, requiring ongoing vigilance.