app[.]olyrnpusdao[.]ink

The domain app.olyrnpusdao.ink was registered on January 28, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolved to the IP address 188.114.96.3, which is owned by Cloudflare, Inc. in Canada. The site returned an HTTP 404 status with the page title "404 Not Found" and was subsequently taken offline. The infrastructure was blocked by PhishDestroy and appears on a single security blocklist.

DNS resolution used Cloudflare authoritative nameservers clark.ns.cloudflare.com and samara.ns.cloudflare.com, and the site leveraged Cloudflare Browser Insights, HTTP/3, and a Google Trust Services / WE1 SSL certificate. VirusTotal analysis recorded two detections out of 94 security vendors, indicating limited but present malicious labeling. No additional content, branding, or phishing kit details have been observed; the page title provides no insight into the intended victim or lure.

Analysts should continue to monitor the IP range and Cloudflare‑hosted domains for similar patterns, incorporate the domain into corporate URL filtering and intrusion detection signatures, and verify that any inbound traffic to the resolved IP is blocked at the perimeter. Given the short operational window and the use of reputable cloud services, future campaigns may reuse the same hosting configuration, so proactive blocking of the associated IP and nameservers is advisable. The evidence presently confirms a generic phishing infrastructure that is no longer active, but its presence underscores the need for vigilance against rapidly deployed, cloud‑fronted malicious domains.