ovaroexg[.]com

The domain ovaroexg.com was registered on 25 November 2025 through Hostinger Operations UAB and is serviced by Cloudflare nameservers magali.ns.cloudflare.com and stan.ns.cloudflare.com. DNS resolution points to IP address 104.21.14.80, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. No TLS certificate is presented, indicating the site was served over HTTP only. A passive web crawl captured the page title "Ovaro," but the page’s full content has not been publicly disclosed, leaving the exact phishing payload unknown.

Reputation signals are uniformly negative: Gridinsoft assigns a trust score of 1 out of 100, and the domain appears on one security blocklist. It has also been listed in an AlienVault OTX pulse (one occurrence) and is blocked by the PhishDestroy service. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, reinforcing the suspicion of malicious intent. The site is currently taken offline, yet the infrastructure footprint remains observable.

Defenders should continue to block the domain and its associated Cloudflare IP, monitor any future re‑registration attempts, and incorporate the registrar and nameserver information into threat‑intel feeds. Because the page content has not been examined, analysts should treat any future re‑hosting of the same title or similar URL patterns as high‑risk until verified. Ongoing vigilance is recommended for any traffic directed to 104.21.14.80 or to domains created by the same registrar within the past year.