pvp[.]wanmei-vouch[.]xyz

Analysis of pvp.wanmei-vouch.xyz shows a recently registered domain (creation date February 21, 2026) that was taken offline before the report date of July 24, 2026. The site presented the page title "完美世界竞技平台-专业赛事对战平台" and is flagged as a brand impersonation campaign targeting the Dota 2 community. Infrastructure investigation reveals the domain resolves to IP address 47.76.116.249, which is hosted in Hong Kong under ASN 45102, Alibaba (US) Technology Co., Ltd. The SSL certificate associated with the domain is identified as R11, indicating a standard certificate without extended validation. A Gridinsoft trust score of 0 out of 100 further suggests the site is considered highly untrustworthy by that vendor.

VirusTotal analysis recorded five detections out of ninety‑three scanning engines, confirming suspicious activity across multiple security products. The domain appears on a single external blocklist, PhishDestroy, reinforcing its malicious classification. Current HTTP status is offline, limiting direct observation of content, but the known page title and brand impersonation tag imply the site was designed to lure Dota 2 users.

Defenders should add the domain and its associated IP to deny‑list rules, monitor for any resurgence of the host, and ensure that endpoint protection solutions are updated with the five VirusTotal detections. Continuous watch of the IP range owned by ASN 45102 is advised, as similar abuse may arise from the same provider. Because the site is no longer reachable, immediate threat mitigation focuses on blocking inbound requests and educating users about unsolicited Dota 2‑related communications that reference the Chinese page title or similar branding.