alverionis[.]com

Analysis indicates that alverionis.com is currently active and has been classified as a high‑risk generic phishing site. The domain was registered on 17 May 2026 through Ultahost, Inc. and immediately began serving a page titled “Marketz Group | Consultores | Marketing | Representantes Comerciales y Ventas”. The mismatch between the advertised marketing content and the underlying phishing intent is typical of credential‑harvesting campaigns. Infrastructure analysis reveals that the domain uses the authoritative name servers ns1‑ns4.ultahost.com, all hosted by Ultahost. MX records point to the domain itself, suggesting that any mail routing is likely controlled by the attacker. The site resolves to 159.100.6.19, an IP located in Germany and owned by UltaHost Inc. A valid Let’s Encrypt certificate (R13) is present, enabling HTTPS without raising immediate certificate warnings. Threat intelligence sources provide concrete indicators of compromise. VirusTotal logs show that 1 of 95 security vendors flagged the domain, and Gridinsoft assigns a trust score of 0 / 100. AlienVault OTX lists the domain in a single pulse, and PhishDestroy has already added it to its blocklist. Additionally, the domain appears on one public security blocklist, reinforcing the observation that it is being actively monitored by defensive communities. Defenders should treat any traffic to alverionis.com as malicious. Immediate actions include adding the domain and its resolving IP to network deny lists, updating email gateway filters to block inbound and outbound messages referencing the domain, and monitoring DNS query logs for associated sub‑domains. Continuous observation of the Ultahost name‑server infrastructure is advised, as further phishing campaigns may be deployed from the same host set.