xulvertik[.]live

This domain, xulvertik.live, is identified as a generic phishing site impersonating an official AI-assisted trading platform. The page title, 'Xulvertik | Official Platform for AI Assisted Trading,' suggests an attempt to deceive users into believing it is a legitimate trading service. No specific drainer kit or brand impersonation beyond the fabricated 'Xulvertik' identity was confirmed, though the infrastructure aligns with common phishing tactics targeting financial or investment-related victims. Analysis indicates the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 25, 2026, an anomalous creation date likely resulting from a registration system error. It resolves to the IP address 188.114.97.3 and is flagged by 11 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists and is actively blocked by PhishDestroy and OISD. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. Detected technologies include Unpkg, jsDelivr, jQuery, Cloudflare Browser Insights, Cloudflare, and HTTP/3, which are frequently leveraged to obfuscate malicious activity or enhance site performance for phishing campaigns. The domain is currently offline, reducing immediate risk to users. However, the infrastructure remains registered, and historical patterns suggest similar domains may resurface under different names. Response actions should include monitoring for re-registration or rebranding attempts, particularly under variations of the 'Xulvertik' name or similar AI trading themes. Organizations are advised to block the domain and associated IP at the network level, and users should be cautioned against interacting with unsolicited investment or trading platforms, especially those promoted via phishing links.