slapventures[.]xyz

Analysis of slapventures.xyz, registered through NiceNIC International Group Co., Limited on 21 February 2026, shows that the domain was taken offline at the time of assessment (24 July 2026). The domain resolves to IP 104.21.28.224, which belongs to Cloudflare, Inc. (AS13335) and is located in the United States. Cloudflare’s DNS service is indicated by the authoritative nameservers frida.ns.cloudflare.com and maxim.ns.cloudflare.com. The site was served over HTTPS using a Google Trust Services certificate issued to the WE1 authority, confirming that TLS termination occurred at Cloudflare’s edge. Detected technologies include Hostinger hosting and HTTP/3 support, consistent with Cloudflare’s network.

The page title returned during the brief scan was "Providence | Explore. Craft. Survive", which does not directly reference a known brand or service, and no further content analysis is available because the site is offline. VirusTotal recorded six positive detections out of ninety‑three scanners, and the domain appears on two public phishing blocklists, specifically PhishDestroy and ScamSniffer. Gridinsoft assigned a trust score of 0 out of 100, indicating a high likelihood of malicious intent.

No additional intelligence such as OTX references or Safe Browsing alerts were provided. Taken together, the registration pattern, rapid creation-to‑take‑down window, low trust score, positive VirusTotal detections, and inclusion on multiple anti‑phishing blocklists constitute strong evidence that slapventures.xyz was used for phishing. The exact phishing campaign details, target victims, and payloads remain unknown due to the site’s offline status. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑hosting of the same content on other Cloudflare‑protected IPs, and update internal threat intel feeds with the observed indicators: domain name, IP address, nameservers, SSL certificate issuer, and the page title.