xvvchi[.]com

This domain, xvvchi.com, is flagged as an active phishing site targeting decentralized finance (DeFi) mining operations. Registered on April 27, 2026, through Gname.com Pte. Ltd., it resolves to IP address 43.175.169.161 and remains operational as of July 12, 2026. The page title, 'defi mining,' suggests a focus on cryptocurrency-related fraud, though the exact mechanics of the scheme are not yet confirmed. Infrastructure analysis reveals the use of Nginx, jQuery, HSTS, and Popper, with a Let's Encrypt SSL certificate providing HTTPS encryption. The domain is blocked by multiple security providers, including ScamSniffer, PhishDestroy, and BLP-Malware, and appears on three security blocklists. AlienVault OTX lists it in 16 threat intelligence pulses, indicating widespread detection. Six of 95 security vendors on VirusTotal have flagged the domain, though the absence of detections from other vendors does not imply safety. Gridinsoft assigns it a trust score of 0/100, reinforcing its high-risk classification. Defenders should treat this domain as malicious and prioritize blocking it at the network level. The combination of DeFi-themed branding, recent registration, and active blocklist presence aligns with known phishing tactics targeting cryptocurrency users. Further analysis of the site's content or backend may reveal additional indicators, but current evidence justifies immediate containment. No specific brand impersonation has been confirmed beyond the DeFi mining theme.