oneclckdrive[.]com

This domain, oneclckdrive.com, is currently flagged as an active phishing site targeting cloud storage users. Registered on May 11, 2026, through Squarespace Domains LLC, the domain resolves to IP address 144.31.165.16, hosted in Germany under Play2go International Limited. Infrastructure analysis reveals the use of Nginx web server technology and a Let's Encrypt SSL certificate (serial E8), which provides HTTPS encryption but does not validate legitimacy. The domain returns an HTTP 302 redirect status, a common technique used in phishing campaigns to forward victims to malicious endpoints. The page title, 'OneClickDrive | Premium Marketplace,' suggests an attempt to mimic a cloud storage or file-sharing service, though the exact content and target brand remain unconfirmed as the site has not been fully analyzed. The domain appears on one security blocklist and is blocked by at least one anti-phishing service. A single security vendor on VirusTotal has flagged the domain, though this does not constitute comprehensive detection. Gridinsoft assigns a trust score of 0/100, indicating high risk based on infrastructure and behavioral indicators. Defenders should treat this domain as an active threat. The use of Squarespace nameservers (nsd1.squarespacedns.com through nsd4.squarespacedns.com) is consistent with legitimate domains but does not preclude malicious use. Organizations are advised to block the domain and its resolving IP at the perimeter, monitor for internal connections, and alert users to avoid interaction. Further analysis of the redirect chain and payload is recommended to determine the full scope of the campaign.