The domain atvids.com is currently under investigation for involvement in generic phishing activity. As of July 29, 2026, the domain remains active and is registered through NAMECHEAP INC. Its creation date is December 15, 2024, indicating it has been operational for over a year and a half. The domain resolves to IP address 188.114.97.3 and uses Cloudflare nameservers (nicolas.ns.cloudflare.com and tess.ns.cloudflare.com), which is common for both legitimate and malicious domains.
According to available intelligence, atvids.com has been scanned by 91 vendors on VirusTotal, with zero vendors currently flagging it as malicious; however, the absence of detections cannot be interpreted as proof of safety. Notably, atvids.com is blocked by PhishDestroy and appears on one security blocklist, suggesting at least one threat intelligence provider has identified suspicious or harmful activity associated with this domain. There is no information provided on Safe Browsing status, OTX, SSL configuration, page title, or site content, so the exact intent or impersonated brand (if any) cannot be determined from the current evidence set. Defenders should treat this domain with caution due to its blocklist presence and ongoing investigation.
Immediate action is recommended to monitor for further indicators of compromise or evidence of phishing campaigns, especially considering its registration via a commonly abused registrar and hosting behind Cloudflare infrastructure. The lack of widespread detection underscores the importance of not relying solely on automated scanning results when assessing potential threats. Further analysis, including active content inspection and traffic monitoring, is advised to clarify the domain’s risk profile.