get-carv[.]xyz

Analysis performed on July 24, 2026 indicates that the domain get-carv.xyz was registered on February 21, 2026 and is currently taken offline. The site presented the page title “Nur einen Moment…”, which is the only visible content captured before takedown. The domain is listed on a single security blocklist, specifically PhishDestroy, and the blocklist entry corroborates its classification as a generic phishing resource. The SSL certificate presented under the identifier WE1 offers no additional trust, as evidenced by a Gridinsoft trust score of 0 out of 100.

VirusTotal scans show that three out of ninety‑five AV engines flagged the domain, confirming malicious behavior despite the low overall detection rate. The absence of a Safe Browsing entry and lack of OTX mentions suggest limited exposure in public threat‑sharing platforms, but the existing blocklist and AV detections are sufficient to treat the domain as hostile. Because the site is offline, active exploitation cannot be confirmed, yet the presence of a phishing‑related page title and the low trust score indicate a deliberate attempt to lure victims. No further intelligence regarding hosting provider, IP address, or registrar has been disclosed, leaving those infrastructure components unverified.

Defenders should continue to block get-carv.xyz at perimeter and DNS layers, monitor for any re‑registration attempts, and include it in threat‑intel feeds. Ongoing observation of related blocklist updates and VirusTotal re‑scans is recommended to capture any future activity. Security teams should verify that any redirects or embedded URLs associated with get-carv.xyz are also blocked, and consider sharing the indicator with downstream partners to improve collective defenses.