originworld[.]ai

The domain originworld.ai was registered on July 16, 2026 through the HOSTINGER operations, UAB registrar and is currently delegated to the Atlas and Hyperion parking nameservers (atlas.dns-parking.com, hyperion.dns-parking.com). DNS resolution points to the IPv4 address 46.202.182.115, which is the sole hosting endpoint observed for this domain. VirusTotal analysis shows that two of ninety‑one scanning engines have flagged the domain, indicating that a minority of security products have identified malicious characteristics.

The domain appears on two external blocklists and is explicitly listed by PhishDestroy and ScamSniffer as a confirmed phishing source. No additional public intelligence such as SSL certificate details, HTTP response codes, page title, or content classification is presently available, leaving the full scope of the hosted payload undocumented. The limited detection coverage, combined with the recent creation date and active status, suggests a short‑lived infrastructure typical of opportunistic phishing campaigns.

Defensive teams should prioritize immediate blocking of originworld.ai at perimeter filters, add the associated IP address 46.202.182.115 to network‑level deny lists, and monitor for any derivative sub‑domains that may be provisioned under the same registrar. Continuous re‑scanning on multi‑vendor platforms is recommended to capture any evolving malicious payloads, and periodic checks of the hosting provider’s abuse channels may yield further attribution.