vantagelux-trade[.]cc

This domain, vantagelux-trade.cc, is actively flagged as a high-risk brand impersonation phishing site targeting the 'base' brand. Registered on June 14, 2025, through Dynadot LLC, the domain resolves to IP address 192.99.81.100 and is hosted on infrastructure utilizing Nginx. Analysis indicates the domain is currently active and has been detected on two security blocklists, including PhishDestroy and BLP-Malware. The SSL certificate is issued by Let's Encrypt, a common feature in both legitimate and malicious domains, offering no conclusive indication of intent. Infrastructure analysis reveals the domain is associated with 23 threat intelligence pulses in AlienVault OTX, suggesting prior malicious activity or ongoing monitoring by security researchers. Five of 95 security vendors on VirusTotal have flagged the domain, though the absence of detections from other vendors does not confirm safety. The Gridinsoft trust score of 0/100 further supports the assessment of malicious intent. Defenders should treat this domain as a confirmed phishing threat. Recommended actions include blocking the domain and its resolving IP at the network perimeter, alerting users to avoid interaction, and monitoring for related indicators of compromise. The exact content or functionality of the site has not been analyzed, but the available evidence aligns with brand impersonation tactics. No additional details regarding the phishing kit or specific attack vector are currently available.