pvausapro[.]com

This domain, pvausapro.com, is identified as a generic phishing threat specifically targeting cryptocurrency wallet users. Analysis indicates no direct brand impersonation, but the infrastructure aligns with known wallet-draining phishing kits designed to harvest private keys or seed phrases. The domain exhibits characteristics typical of credential theft operations, including obfuscated JavaScript payloads and rapid redirection chains observed in prior campaigns. Infrastructure analysis reveals the domain was registered on May 24, 2026, through Web Commerce Communications Limited dba WebNic.cc. It currently resolves to no active IP address, suggesting either a sinkholed or dormant state, though the domain itself remains registered and unseized. VirusTotal reports 1/95 security vendors flagging this domain as malicious, while Google Safe Browsing (GSB) has not yet listed it. The domain appears on three independent security blocklists, including PhishDestroy and SEAL, with MetaMask also marking it as a confirmed phishing resource. As of the latest verification, pvausapro.com remains active and unmitigated, posing a persistent risk to users who may encounter it through malvertising, social engineering, or compromised ad networks. No takedown requests or registrar enforcement actions have been observed. Users are advised to block this domain at the network level and treat any associated links or redirects as hostile. Wallet software and browser extensions should be configured to reject connections to this domain, and security teams are encouraged to monitor for related infrastructure using the registration seed 08103d for further pivoting.