salvissglobalclubs[.]com

Analysis of salvissglobalclubs.com indicates active phishing infrastructure as of July 27, 2026. The domain was registered on August 22, 2024, through TuringSign Inc. d/b/a Cosmotown and currently resolves to the IP address 216.104.47.46. Infrastructure review shows nameservers hosted under ns15.superdomainzone.com, ns16.superdomainzone.com, ns39.superdomainzone.com, and ns40.superdomainzone.com, a pattern consistent with bulletproof or low-reputation hosting providers. The domain appears on at least one security blocklist, and PhishDestroy has implemented blocking measures against it.

VirusTotal scans report five security vendors flagging the domain as malicious out of 91 total detections, though the exact nature of the threat—whether credential harvesting, malware distribution, or another phishing variant—remains unconfirmed due to limited content analysis. No brand impersonation or specific scam type has been identified in available data, and the domain’s exact content is not yet analyzed. Defenders should treat salvissglobalclubs.com as high-risk infrastructure, particularly given its persistence since registration and continued resolution.

Network-level blocking is recommended for organizations, and security teams should monitor for connections to 216.104.47.46 or related nameserver activity. Further investigation into the hosting provider and registrar may reveal additional linked domains or campaigns. Given the domain’s age and detection history, it is unlikely to be a transient or misconfigured legitimate site.