oklahomaweddingpros[.]com

PhishDestroy identifies oklahomaweddingpros.com as an active credential theft threat targeting users under the guise of wedding services. While no specific brand impersonation or drainer kit was detected, the domain’s use of social engineering tactics aims to deceive victims into divulging sensitive login information.

Technical analysis reveals that oklahomaweddingpros.com has a VirusTotal detection rate of 6 out of 95 security vendors, indicating moderate consensus on its malicious nature. The domain was registered through GoDaddy.com, LLC on January 13, 2022. It holds an SSL certificate issued by Let's Encrypt and resolves to the IP address 103.153.182.81. Google Safe Browsing flags this domain for social engineering, and it appears on one security blocklist, including blocking by InversionDNS.

Currently, the domain remains active and continues to pose an elevated risk for credential theft attacks. Immediate blocking and monitoring of network traffic related to this domain are strongly recommended. Users should be alerted to avoid interacting with oklahomaweddingpros.com to prevent compromise. Security teams should maintain updated blocklists and conduct periodic scans to ensure no residual exposure persists.