app[.]avaea[.]eu[.]com

The domain app.avaea.eu.com was registered on February 21, 2026 through Instra Corporation Pty Ltd. It resolves to the IP address 104.21.54.146, which is hosted by Cloudflare, Inc. (AS13335) and geolocated in the United States. The domain is currently taken offline, and its status is listed as offline in the intelligence feed. Security tooling has identified the domain as malicious: PhishDestroy and ScamSniffer have both blocked it, and two independent security blocklists contain references to the same indicator. VirusTotal reports that five of ninety-three scanning engines have flagged the domain, confirming a modest but notable detection rate.

The domain’s MX configuration points to eu-com-wildcard-null-mx.centralnic.net, indicating a null mail exchanger that effectively disables email delivery for the domain. SSL certificate information is recorded under the identifier WE1, though no further certificate details are available. Authoritative name servers are ns1.centralnic.net through ns4.centralnic.net, consistent with the registrar’s infrastructure.

Observed evidence does not include a page title, brand targeting, or content analysis, so the exact phishing payload or impersonated service remains unknown. Defenders should consider the domain malicious based on the aggregated signals, enforce network-level blocking of the IP 104.21.54.146 and the FQDN, and monitor for any re‑activation or related subdomains. Additional scrutiny of traffic to Cloudflare edge nodes associated with this address may reveal further campaign activity, and continuous re‑inspection of the domain’s DNS records is advised should it return to an online state.