svsnet[.]top

svsnet.top was registered on 5 December 2025 through NiceNIC International Group Co., Limited. The domain resolves to 104.21.96.86, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. DNS is served by harlan.ns.cloudflare.com and lisa.ns.cloudflare.com. A Google Trust Services / WE1 TLS certificate protects the site, and the server reports the generic title “Welcome to nginx!”. HTTP probing returned a 404 status, indicating the expected resource is missing or intentionally hidden.

The infrastructure is identified as using Cloudflare Browser Insights and HTTP/3, consistent with typical Cloudflare‑fronted services. Threat intelligence shows the domain is classified as generic phishing and was taken offline before the current assessment. It appears on a single security blocklist and is actively blocked by PhishDestroy. VirusTotal scans flagged the domain by three of ninety‑five AV engines, reinforcing the malicious classification despite the low overall detection count. No additional content analysis is available, so the exact phishing lures or targeted brands remain unknown.

Defenders should continue to block traffic to svsnet.top at the network perimeter and ensure any internal DNS resolvers return NXDOMAIN or a safe response. Monitoring for re‑registration or similar domains using the same registrar or Cloudflare hosting is advised. Because the site employed a valid TLS certificate from a trusted CA, reliance on certificate validation alone is insufficient; reputation‑based controls remain essential. Incident response teams should treat any artifacts referencing svsnet.top as malicious and quarantine related emails or logs pending further investigation.