pvptrade[.]xyz

This domain, pvptrade.xyz, was registered on 4 November 2025 through Web Commerce Communications Limited and presently resolves to the IPv4 address 193.142.147.11, which belongs to AS213438 ColocaTel Inc. located in the Netherlands. The site is currently taken offline and has been actively blocked by the PhishDestroy sinkhole, indicating that it was previously used for malicious activity. No Transport Layer Security certificate is presented, meaning all HTTP traffic would be unencrypted. The authoritative nameservers are ns1.bullethost.net and ns2.bullethost.net, both of which are commonly observed on other abuse‑related domains.

Gridinsoft assigns a trust score of zero out of one hundred, and VirusTotal reports that seven of ninety‑five scanning engines have flagged the domain as malicious, reinforcing the suspicion of phishing behavior. The domain appears on a single external blocklist and is referenced in one AlienVault OTX pulse, providing additional corroboration from community‑sourced intelligence. The only visible page element is the title "pvptrade.xyz", and no further content analysis is available because the site is offline. Given the combination of registrar information, low‑reputation hosting, lack of TLS, multiple vendor detections, and inclusion on blocklists and OTX, defenders should treat pvptrade.xyz as a confirmed phishing infrastructure.

Recommended actions include adding the domain to corporate web‑filter and DNS‑sinkhole policies, monitoring the IP address for any future changes, and watching for re‑registration attempts. Because the site is currently offline, continuous observation of DNS records and WHOIS data is advisable to detect possible re‑activation or migration to alternative hosting. Organizations using endpoint protection should ensure that their detection signatures incorporate the observed indicators, and threat‑intel teams should share the domain hash and associated IP with peer groups to improve collective defenses.