fiviora[.]com

The domain fiviora.com was registered on November 24, 2025 through GoDaddy.com, LLC and currently resolves to the IPv4 address 104.18.11.206, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. DNS resolution is handled by the authoritative nameservers butterfly.dnspod.net and louis.dnspod.net. The site presents an HTTP 200 response and serves a TLS certificate issued by Let’s Encrypt (E8), indicating that encrypted transport is in place. Passive fingerprinting identifies a stack that includes PHP, Zoho, PayPal, Swiper, PayPal Marketing Solutions, Google Analytics, and Cloudflare, suggesting the use of multiple third‑party services. The page title returned by the server is "fiviora". The domain appears on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that 4 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious activity. The threat is classified as credential phishing, targeting user credentials through a likely counterfeit login flow. While the exact content of the landing page has not been examined, the converging evidence—recent registration, use of reputable brand names in the technology stack, blocklist inclusion, and multiple vendor detections—supports a high‑risk assessment. Defenders should add fiviora.com to network and endpoint block lists, monitor DNS queries for the associated nameservers, and enforce strict outbound filtering for connections to the identified Cloudflare IP. Continuous re‑evaluation is recommended in case additional indicators emerge.