avriational[.]io

avriational.io is currently flagged as a high‑risk generic phishing site. The domain was registered on June 22 2026 through GNAME.COM PTE. LTD. and resolves to the Cloudflare‑hosted address 104.21.25.247. Its authoritative nameservers are henrik.ns.cloudflare.com and noor.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure.

VirusTotal analysis shows that eight of ninety‑one scanning engines have raised detections, suggesting malicious payloads or phishing‑related content. The domain is listed on three external blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL threat‑intelligence feeds, confirming consensus among multiple security vendors that the site is abusive. The domain’s status is listed as active on the reporting date of August 04 2026, indicating that the phishing infrastructure is still operational. No additional public metadata such as SSL certificates, HTTP response codes, or page titles have been released, leaving the exact content and lure techniques unverified. Given the recent creation date, the Cloudflare hosting, and the presence on multiple reputable blocklists, defenders should treat avriational.io as a confirmed phishing indicator.

Recommended mitigation steps include adding the domain to DNS‑based deny lists, configuring web‑proxy filters to block HTTP(S) requests to the host, and ensuring endpoint protection solutions ingest the blocklist entries from PhishDestroy, MetaMask, and SEAL. Continuous monitoring of the IP 104.21.25.247 for any anomalous traffic and periodic re‑scans on VirusTotal or similar services are advised to capture potential evolution of the payload. Defenders should also review recent network logs for connections to this address to detect possible compromise. Until further forensic evidence is obtained, the domain should remain blocked and any internal communications referencing it should be quarantined.