Verificação de phishing e segurança de orewealth.com

Analysis of orewealth.com indicates that the domain is currently active and has been identified as a generic phishing site. The domain was registered on November 14, 2025 through Hostinger Operations, UAB, and resolves to the IPv4 address 88.222.222.53. Its authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, both of which are typical of domains that are parked or used for rapid deployment of malicious infrastructure.

The domain appears on one security blocklist and has been explicitly blocked by PhishDestroy, confirming that at least one reputable anti‑phishing service considers it malicious. VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors, with none reporting a detection; this absence of detections does not constitute evidence of safety and should be interpreted as a lack of current signatures rather than validation of legitimacy. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status, trust‑score, or page‑title information is available in the current intelligence set, leaving those vectors unverified.

Given the limited but concrete indicators—blocklist presence, registrar information, IP address, and parking name servers—defenders should treat orewealth.com as a high‑confidence phishing indicator. Recommended mitigations include adding the domain and its resolving IP address to network‑level blocklists, monitoring DNS queries for the domain or its name servers, and ensuring that email filters flag any messages containing orewealth.com URLs. Continuous re‑evaluation is advised, as future changes to the hosting environment or detection signatures could alter the threat posture.