astrivahodl[.]com

On July 27 2026, analysis of the domain astrivahodl.com indicates that it is actively being used in a generic phishing campaign. The domain was registered on September 09 2025 through Internet Domain Service BS Corp. and is hosted on the IP address 51.89.0.70. Authoritative nameservers ns1.sterkhost.com and ns2.sterkhost.com resolve the domain, confirming that the hosting provider is Sterkhost. The domain remains active and is listed on a single security blocklist; it has also been blocked by the PhishDestroy mitigation service.

VirusTotal reports that the domain was scanned by 91 vendors, none of which raised a detection at the time of scanning, but the absence of detections does not constitute a safety assurance. No public SSL certificate information, HTTP response codes, Safe Browsing verdicts, OTX mentions, or page title data are currently available, leaving those vectors unverified. The limited visibility suggests a low-profile infrastructure that may be used to host credential‑stealing pages or redirect victims to additional malicious resources.

Defenders should add astrivahodl.com to their deny or sinkhole lists, monitor DNS queries for the associated IP and nameservers, and continue to track any emerging detections from sandbox or endpoint telemetry. Regular re‑scanning on multi‑vendor platforms and inclusion in threat‑intel feeds are recommended to capture any future changes in behavior. Because the domain’s creation date is less than a year old, rapid escalation of activity cannot be ruled out, and organizations should remain vigilant for any inbound traffic matching the domain or its hosting footprint.