checkfindstats[.]com[.]givingitallmybest[.]xyz

This domain, checkfindstats.com.givingitallmybest.xyz, was registered on 2025-12-09 through OwnRegistrar, Inc. and is currently listed as offline. The domain resolves to the IPv4 address 192.3.190.187, which belongs to AS36352 (HostPapa) located in the United States. No TLS certificate is presented; HTTP connections are unencrypted. The authoritative name servers are dns1.webproserver.com and dns2.webproserver.com.

Reputation checks show a Gridinsoft trust score of 0 out of 100, indicating a highly malicious reputation. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service. VirusTotal analysis records two positive detections out of ninety‑five scanned engines, confirming that at least two security vendors have flagged the site as malicious. The page title returned from the live endpoint reads "CryptoPulse • Crypto Portfolio Tracker", suggesting an attempt to lure cryptocurrency users, and the intelligence categorizes the activity as wallet/seed phishing targeting the brand "across".

The limited public evidence does not include a valid SSL certificate, and the site is no longer reachable, which prevents further content inspection. Defenders should immediately block the domain and its associated IP address at perimeter and DNS layers, add the host to internal blocklists, and monitor for any future resurrection of the same infrastructure. Continuous observation of the HostPapa hosting range is advised, as the attacker may reuse the same ASN for other phishing campaigns. Because the site is offline, any ongoing credential harvesting attempts are likely halted, but remnants of the phishing kit may still be cached or distributed through other vectors; therefore, security teams should also review recent email and web traffic for similar "CryptoPulse" or "across" references.