onenana[.]com

The domain www.onenana.com was registered on October 23, 2024 through GoDaddy.com, LLC and resolves to IP address 104.17.246.119, an asset owned by Cloudflare, Inc. (AS13335) located in the United States. DNS resolution uses nameservers ns05.domaincontrol.com and ns06.domaincontrol.com. An HTTP request returns a 403 status code, while the TLS handshake presents a valid certificate issued by Google Trust Services under the WE1 root. Automated fingerprinting identified Microsoft ASP.NET, Lodash, Lightbox, jQuery, HSTS, Forter, Facebook Pixel, and Cloudflare Browser Insights as the underlying technologies. The page title reported is “onenana”. VirusTotal analysis recorded a single positive detection out of 95 security vendors. The domain appears on one security blocklist and has been blocked by PhishDestroy. The intelligence profile classifies the activity as a high‑risk brand impersonation campaign targeting Google and marks the infrastructure as active. Because the site returns a 403 response, the actual malicious content or credential‑harvesting page could not be retrieved, leaving the precise user‑facing payload uncertain. Defenders should add www.onenana.com to network‑level deny lists, update URL filtering policies, and monitor DNS queries for the associated IP address. Ongoing re‑scanning is recommended to capture any changes in detection status or additional malicious components.