sxsvi[.]vip

The domain sxsvi.vip is currently flagged as a generic phishing infrastructure. DNS resolution points exclusively to the IPv4 address 188.114.96.3, which is hosted behind Cloudflare as indicated by the authoritative nameservers matteo.ns.cloudflare.com and priscilla.ns.cloudflare.com. The domain is listed on a single public security blocklist and has been actively blocked by the PhishDestroy sinkhole, confirming that at least one defensive platform has observed malicious activity associated with the host.

VirusTotal records show that the domain was submitted to 91 antivirus and URL‑reputation engines; none of the scanners raised a detection at the time of analysis, but the absence of a positive result does not imply benign intent. The threat classification is recorded as generic phishing, and the status remains active, meaning the site is still reachable and may be used to harvest credentials or deliver fraudulent content. No additional intelligence such as page title, SSL certificate details, HTTP response codes, or brand targeting is presently available, leaving the exact payload and victim profile uncertain.

Defenders should continue to enforce blocklist rules for sxsvi.vip, monitor outbound DNS queries for the associated IP address, and consider adding the domain to internal URL filtering policies. Ongoing traffic analysis and periodic re‑scanning with VirusTotal or similar services are recommended to detect any future changes in the domain’s behavior.