vantageorigins[.]com

PhishDestroy first observed vantageorigins.com on Sep 5, 2026. Current evidence score: 89/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Spamhaus DBL, Cloudflare Radar, and URLQuery. VirusTotal stored 13 positive engine results: alphaMountain.ai, BitDefender, CRDF, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Kaspersky, Lionic, Netcraft, Sophos, VIPRE, Webroot; the total engine count is unavailable or inconsistent, and no check timestamp is available. Spamhaus DBL: DBL_SPAM on Sep 5, 2026 at 14:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 3 threat-system alerts on Sep 5, 2026 at 14:27 UTC. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 5, 2026 at 15:41 UTC. The separate external-blocklist snapshot contained no matches on Sep 5, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Sep 5, 2026 at 15:38 UTC. URLScan captured the page on Sep 5, 2026 at 14:25 UTC.

The collector marked the hostname reachable on Sep 5, 2026 at 14:25 UTC, but did not retain the HTTP response code. Registration records for the domain list TuringSign Inc. d/b/a Cosmotown as the registrar and Apr 8, 2026 as the creation date. At collection time, the hostname resolved to 163.61.188.2. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Nov 22, 2026; checked Sep 5, 2026 at 16:02 UTC.

The record contains 4 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.