indexlaunch.live was registered on July 19, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IPv4 address 216.198.79.1. The domain is delegated to Cloudflare DNS, as shown by the authoritative nameservers mckenzie.ns.cloudflare.com and seth.ns.cloudflare.com. Within days of creation the domain was added to two phishing‑focused blocklists, PhishDestroy and ScamSniffer, and both services continue to list it as active. VirusTotal has inspected the domain and 10 of 91 scanning engines reported a malicious verdict, providing independent confirmation of phishing‑related activity.
No public Safe Browsing, OTX, or SSL certificate information was supplied, so the presence of HTTPS, certificate issuer, or specific page titles cannot be verified at this time. The combination of rapid blocklist inclusion, partial VirusTotal detection, and the use of Cloudflare’s edge network suggests an operational phishing infrastructure rather than a dormant placeholder. Defenders should immediately block DNS resolution for indexlaunch.live and enforce network‑level filtering of traffic to 216.198.79.1. Adding the domain to local URL blacklist, proxy, and endpoint protection policies will reduce user exposure.
Because the site is fronted by Cloudflare, direct takedown of the hosting server may be ineffective; reporting the abuse to the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED with supporting VirusTotal and blocklist screenshots is advised. Continuous monitoring of VirusTotal re‑scans, blocklist status, and any future SSL or page‑title disclosures is recommended to maintain up‑to‑date threat intelligence. Until additional content analysis becomes available, the domain should be treated as a high‑risk phishing vector.