platinumvest[.]org

The domain platinumvest.org is currently flagged as an active generic phishing infrastructure. Registration data shows the domain was created on 25 August 2025 and the registrar listed is Cloudflare, Inc., indicating the use of Cloudflare’s domain privacy and DNS services. Network resolution points to the IPv4 address 104.21.89.184, which is part of Cloudflare’s edge network and does not reveal a dedicated backend server. The domain appears on one external security blocklist and has been added to the PhishDestroy blocklist, confirming that at least one dedicated anti‑phishing feed is already propagating the indicator.

VirusTotal analysis reports that 16 of 91 security vendors have classified the domain as malicious, providing a modest but notable consensus of detection. The mixed vendor signal suggests that the site exhibits characteristics commonly associated with phishing, such as suspicious URL patterns or known malicious payloads, though the exact content has not been publicly disclosed. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is available, leaving the visual and functional aspects of the site unverified. Given the elevated risk rating, defenders should immediately block DNS resolution for platinumvest.org at the network perimeter and add the associated IP address 104.21.89.184 to any outbound allow‑list exclusions.

Continuous monitoring of Cloudflare edge IP ranges is advised, as the same address may host other malicious domains in the future. Analysts should also track future VirusTotal submissions and blocklist updates for changes in detection counts. Until more detailed forensic evidence is obtained, the domain should be treated as a high‑confidence phishing indicator and incorporated into intrusion‑detection signatures and email gateway filters.