vam-sa[.]pt

The domain vam-sa.pt was created on 12 January 2009 and remains active as of the report date, 25 July 2026. Infrastructure analysis shows it resolves to the IPv4 address 185.32.188.31 and is served by the authoritative name servers ns1.ptservidor.net, ns2.ptservidor.net, and ns3.ptservidor.net. The site has been flagged by Google Safe Browsing for social engineering, indicating that the URL is being used to lure users into disclosing credentials or personal data.

VirusTotal reports that 7 of 91 security vendors have identified the domain as malicious, reinforcing the suspicion raised by other tooling. The domain is listed on at least one external security blocklist and has been actively blocked by the PhishDestroy mitigation service, demonstrating that defensive communities have recognized it as a threat. No additional public evidence such as page titles, SSL certificate details, or HTTP response codes is presently available, leaving the exact content and target brand of the fraudulent page unconfirmed.

Given the combination of active hosting, multiple detection vendor flags, Safe Browsing classification, and blocklist presence, security teams should treat vam-sa.pt as a high‑risk phishing resource. Recommended actions include adding the domain to internal blocklists, monitoring DNS queries for the associated IP address, and ensuring that endpoint protection solutions are updated to reflect the current detection status. Continuous observation for any changes in the domain’s hosting or content is advised, as further analysis may reveal additional indicators of compromise.