playtroverse[.]xyz

The domain playtroverse.xyz was registered on July 22, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and became active within days. Current DNS configuration points to the Cloudflare authoritative nameservers diva.ns.cloudflare.com and nile.ns.cloudflare.com, which resolve the hostname to the IPv4 address 188.114.96.3. The domain is classified as a generic phishing site and remains active as of the report date (July 26, 2026). It is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy filtering service.

VirusTotal analysis shows that four out of ninety‑one scanning engines have raised a detection, indicating that at least some security products recognise malicious behavior associated with the domain. No additional public intelligence such as OTX tags, SSL certificate details, or HTTP response codes were available at the time of analysis. The rapid creation date and immediate appearance on a blocklist suggest a purposeful campaign aimed at credential harvesting, but the specific target brand or lure has not been disclosed.

Defenders should continue to enforce DNS‑based blocking for playtroverse.xyz across enterprise resolvers, monitor outbound connections to 188.114.96.3, and consider adding the domain to internal blacklists. Network traffic inspection should be configured to alert on any HTTP or HTTPS requests to the domain, and endpoint protection solutions should be updated to reflect the four VirusTotal detections. Ongoing observation is recommended to capture any future changes in hosting, associated IPs, or detection counts.