oxcsnetwork-1780388413424[.]staticrun[.]app

The domain oxcsnetwork-1780388413424.staticrun.app is flagged as a high-risk generic phishing site. It poses a significant threat by attempting to deceive users into providing sensitive information, such as login credentials, under the guise of a professional email service. No specific brand impersonation or drainer kit has been identified.

Analysis indicates that the domain has a VirusTotal score of 14/95, which suggests a moderate level of consensus among security vendors regarding its malicious nature. The domain is registered through CloudFlare, Inc., and resolves to the IP address 5.161.68.219, which is located in the United States and is part of the AS213230 Hetzner Online GmbH network. The domain currently holds a Let's Encrypt SSL certificate, which may be used to gain user trust. It appears on one security blocklist and is still active as of the latest intelligence.

The current status of the domain is active, indicating ongoing threat. Response actions should include blocking the domain at the network level to prevent access, educating users about the signs of phishing, and monitoring for any attempts to access the site. Despite the blocklist presence and VirusTotal flags, the domain remains accessible, posing a continued risk to users who may not be aware of its malicious intent.