avaive[.]cc

The domain avaive.cc was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently active. DNS resolution points to IP address 104.21.28.73, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are adi.ns.cloudflare.com and fattouche.ns.cloudflare.com, and the site presents a Google Trust Services / WE1 SSL certificate, indicating TLS termination at the CDN edge. HTTP requests return a 521 status code with the page title "avaive.cc | 521: Web server is down," confirming that the origin server is unavailable while the Cloudflare front‑end remains reachable. Technical profiling identifies Cloudflare and HTTP/3 as the underlying services. The domain is listed on one security blocklist and has been flagged by PhishDestroy. Independent scanning on VirusTotal shows that 7 of 93 security vendors have generated detections for this host, and Gridinsoft assigns a trust score of 0 out of 100. The intelligence categorizes the activity as generic phishing with a high risk rating, employing brand impersonation tactics, although the specific target brand has not been disclosed in the available data. Current uncertainties include the exact content of the phishing payload and whether the site ever served a functional login page before the backend became unreachable. Defenders should immediately block avaive.cc at network perimeters, update DNS and URL filtering rules, and monitor for any related C2 infrastructure that may share the same Cloudflare IP range. Continuous re‑evaluation is advised, as the domain remains active and may resume malicious delivery once the backend server is restored.