slivpw[.]com

This domain, slivpw.com, is identified as a phishing site targeting users through fraudulent adult content distribution. Analysis of the page title, 'Leaking Nude Photos and Videos 18+ | SLIVPW.COM,' indicates an attempt to lure victims by impersonating platforms that claim to host leaked or exclusive explicit material. No specific brand impersonation or cryptocurrency drainer kit signatures were detected in the available data, but the domain’s content and structure align with credential harvesting and malware distribution tactics commonly used in adult-themed phishing campaigns.

Technical indicators confirm elevated risk. The domain resolves to IP address 185.191.127.128 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 8, 2026. It is flagged by 5 out of 95 security vendors on VirusTotal, appears on one security blocklist, and is blocked by enterprise phishing detection systems. The site uses a Let’s Encrypt SSL certificate and is hosted on infrastructure running WordPress, MySQL, PHP, and Nginx. The creation date is anomalous, suggesting potential domain spoofing or incorrect WHOIS data, which is frequently observed in malicious registrations.

As of the latest assessment, slivpw.com is offline, reducing immediate exposure risk. However, the domain remains registered and could be reactivated. Organizations should maintain blocklist entries for the domain and associated IP. Users are advised to avoid interaction with any future content from this domain and to verify the legitimacy of adult media platforms through trusted sources. Security teams should monitor for related infrastructure reuse, particularly under the same registrar or hosting provider.