Analysis of the domain allivex.live indicates active phishing infrastructure as of July 31, 2026. Registered on July 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain currently resolves to IP address 172.67.169.218 and uses Cloudflare nameservers ingrid.ns.cloudflare.com and peter.ns.cloudflare.com. While VirusTotal scans by 91 vendors show no current detections, this absence does not confirm safety, as phishing domains often evade initial detection.
The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it as malicious. No specific brand target, phishing kit, or page content has been confirmed at this time, leaving the exact nature of the threat uncertain. Defenders should treat allivex.live as suspicious based on its recent registration, Cloudflare-hosted nameservers, and blocklist inclusion.
Network security teams are advised to monitor traffic to 172.67.169.218, implement DNS-based blocking for the domain, and investigate any connections from internal systems. Further analysis of the site's content and behavior is required to determine the precise phishing campaign or scam type.