avenirgov[.]org

The domain avenirgov.org was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 216.198.79.1, which is assigned to AS16509 Amazon.com, Inc. and geolocated in the United States. An HTTPS connection is presented using a Let's Encrypt R12 certificate, and the server advertises HTTP Strict Transport Security (HSTS). The site returns HTTP status code 200 and the page title reported by crawlers is "Avenir Governance Advisory - Insight, Trust, Impact, Innovation". Technical fingerprinting identifies Vercel as the hosting platform, while the authoritative nameservers are desi.ns.cloudflare.com and oswald.ns.cloudflare.com.

Threat‑intel aggregators show the domain flagged as an investment‑type phishing campaign; two of ninety‑one VirusTotal scanners have raised alerts, and the domain appears on a single security blocklist, currently enforced by PhishDestroy. Gridinsoft assigns a trust score of 0 out of 100, indicating a high likelihood of malicious intent. The risk level is classified as high and the domain remains active.

No additional content analysis is available beyond the page title, so the specific phishing lure and credential‑capture mechanisms are not yet confirmed. Defenders should immediately block avenirgov.org at perimeter and DNS layers, add the address 216.198.79.1 to host‑based deny lists, and monitor for any outbound connections to the associated Amazon AS16509 range. Continuous re‑scanning with multi‑engine services is recommended to capture any evolving payloads, and security teams should update detection signatures to include the observed Vercel and HSTS fingerprinting patterns linked to this infrastructure.