oxelviania[.]net

oxelviania.net was registered on February 3 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently marked as taken offline. The authoritative name servers are ns1.suspended-domain.com and ns2.suspended-domain.com, indicating the domain is hosted on a generic suspended‑domain service. DNS resolution points to the IPv6 address 2606:4700:3035::6815:284c, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. No TLS certificate is presented for the site, and the Gridinsoft trust score is 0 out of 100, reflecting a lack of any perceived legitimacy.

VirusTotal has recorded 15 detections out of 93 scanning engines, and the domain appears on three independent blocklists, specifically PhishDestroy, MetaMask and SEAL. The page title retrieved from the live site reads “Oxelvian - Piattaforma Ufficiale Italia | Trading IA 2026”, and the listed scam type is brand impersonation targeting the “base” brand, although the exact brand name is not otherwise referenced in the collected metadata. The evidence set does not include any Safe Browsing or OTX entries, nor does it contain details about HTTP response codes beyond the offline status.

Consequently, while the infrastructure signals a high‑confidence malicious operation—evidenced by multiple vendor detections, blocklist listings, a zero trust score, and the absence of encryption—certain aspects remain unknown, such as the specific phishing kit used, the existence of credential‑harvesting forms, or the duration of active hosting before takedown. Defenders should proactively block oxelviania.net at DNS and proxy layers, add the associated IPv6 address to network deny lists, monitor for any future re‑registration, and update endpoint security signatures to reflect the observed 15 VirusTotal detections. Continuous verification of the domain’s status is recommended, as the offline flag may change if the operators migrate to a new host.