pvbcoins[.]com

The domain pvbcoins.com was registered on 21 February 2026 through Web Commerce Communications Limited dba WebNic.cc and is served by the authoritative name servers ns100.webnic.cc and ns101.webnic.cc. DNS resolution points to the IPv4 address 154.86.0.20, which is allocated to AS54801 Zillion Network Inc. in Hong Kong. The site is currently taken offline, and the phishing infrastructure has been seized by the PhishDestroy takedown service. The certificate presented for the domain is identified as R12, indicating a standard SSL/TLS certificate without extended validation.

VirusTotal analysis shows that 14 of 95 scanning engines flag the domain as malicious, confirming a detection consensus that aligns with its classification as a brand‑impersonation campaign targeting the SUI ecosystem. The domain appears on a single security blocklist and has been added to the PhishDestroy blocklist, reflecting early detection by community‑driven defenses. The risk rating is elevated, suggesting that attackers may have leveraged the domain to harvest credentials or distribute malicious payloads before the takedown. Evidence confirms the impersonation of the SUI brand, but the exact payload, phishing page content, and victim interaction flow remain unknown because the site is no longer reachable and no page title or HTTP response body has been captured.

Analysts should continue to monitor the associated IP address and ASN for any re‑use, and consider adding the IP to internal blocklists. Defenders are advised to update web filtering rules to block pvbcoins.com, enforce DNS sink‑holing for its name servers, and educate users about unsolicited communications that reference SUI services. Ongoing vigilance is required to detect potential replica infrastructure that may reuse the same registrar or hosting provider.