audaceinviora[.]net

Analysis of audaceinviora.net indicates a high-risk phishing domain that was taken offline following detection by multiple security vendors. The domain, registered on February 24, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, resolved to the IP address 104.21.32.177, which is part of Cloudflare's network (AS13335) and geolocated in the United States. Infrastructure analysis reveals the use of Cloudflare nameservers (aarav.ns.cloudflare.com and lily.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. No SSL certificate was present, increasing the likelihood of interception or manipulation of unencrypted traffic.

The domain appears on three security blocklists and is explicitly flagged for social engineering by Google Safe Browsing. Detection vendors PhishDestroy, MetaMask, and SEAL have classified it as malicious, while VirusTotal reports that 4 out of 93 security engines identified the domain as suspicious. The page title, 'Suspected phishing site | Cloudflare,' further corroborates its classification as a phishing endpoint, though the specific target or phishing kit remains unconfirmed due to the site's offline status. Defenders should treat this domain as compromised and prioritize blocking it at the DNS and network levels.

Given its association with Cloudflare's infrastructure, monitoring for similar domains using the same nameservers or IP ranges may help identify related threats. The absence of an SSL certificate and the domain's rapid takedown suggest it was operational for a limited period, but historical logs should be reviewed for connections to this address. No brand or scam type is explicitly named in available data, so attribution beyond generic phishing is not supported by current evidence.