rlive[.]at

Analysis indicates that the domain rlive.at currently resolves to the IPv4 address 2.27.86.196. The authoritative name servers are a.dnspod.com, b.dnspod.com and c.dnspod.com, all belonging to the DNSPod service. The domain remains active as of the report date (16 July 2026) and is classified as a generic_phishing threat with a high risk rating. VirusTotal scanning shows that three out of ninety‑one security vendors have flagged the domain, providing additional corroboration of malicious intent. No further technical artifacts such as malware hashes, payload samples, or specific phishing kits have been disclosed. Consequently, the observable infrastructure consists solely of the resolved IP address and the DNSPod name server configuration. Defenders should consider blocking or sinkholing the IP 2.27.86.196 and the domain rlive.at at the DNS level, monitor for any outbound connections to that address, and update detection rules to capture traffic to the identified name servers. Ongoing observation is recommended to capture any future changes in the domain’s hosting, additional detections, or the emergence of associated command‑and‑control infrastructure.