sxsvi[.]com

This domain, sxsvi.com, is currently under investigation for credential theft activity. Analysis indicates the infrastructure is designed to harvest login credentials through deceptive web forms, though no specific brand impersonation has been confirmed at this stage. The domain remains operational and unflagged by most security mechanisms. Infrastructure analysis reveals the domain was registered on December 03, 2019, through Gname.com Pte. Ltd. It resolves to the IP address 172.67.151.183 and has not been flagged by any of the 95 vendors on VirusTotal. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. No blocklist entries or trust score deviations have been recorded, suggesting the domain has evaded detection thus far. The current status of sxsvi.com remains active, with no confirmed takedown or mitigation efforts in place. Organizations and users are advised to monitor network traffic for connections to this domain and its associated IP. Implementing DNS-based blocking at the resolver level is recommended to prevent potential credential harvesting attempts. Security teams should conduct retrospective analysis to identify any prior interactions with this infrastructure and assess potential exposure. Given the domain's age and lack of detection, heightened scrutiny is warranted for any related activity.