revio[.]live

The domain revio.live was registered on 27 February 2026 via Global Domain Group LLC and is currently taken offline. DNS resolution points to 188.114.97.3, an address owned by AS13335 Cloudflare, Inc. and located in the United States. The domain uses Cloudflare's authoritative nameservers rita.ns.cloudflare.com and vin.ns.cloudflare.com, and no TLS certificate was observed during scanning, indicating that HTTPS was not configured. VirusTotal analysis returned six positive detections out of ninety‑five submitted scanners, confirming that multiple security products consider the domain malicious.

It appears on a single external blocklist and is explicitly blocked by the PhishDestroy service. The page title returned by the HTTP request is the literal string “revio.live/”, providing no additional context about the intended victim brand or lure. Because the site is offline, content inspection could not be performed, leaving the exact phishing payload or credential‑harvesting technique unknown.

Infrastructure analysis suggests the operator leveraged Cloudflare’s edge network to hide the true origin and to benefit from the provider’s global CDN. Defenders should continue to enforce blocking of the domain and its associated IP address, add the nameservers to watchlists, and monitor for any re‑registration attempts. Ongoing telemetry collection from threat‑intel feeds is recommended to detect potential re‑use of the same hosting infrastructure for future phishing campaigns.