famousfoxes[.]live

This domain, famousfoxes.live, is an active cryptocurrency phishing site first registered on February 21, 2026. Infrastructure analysis reveals it is hosted on Cloudflare (AS13335) at IP 188.114.97.3, returning a 301 HTTP redirect. The page title, 'Redeem Treasure | Famous Fox Federation | The most famous NFTs on the blockchain,' suggests a focus on NFT-related fraud, though the exact mechanics of the scam remain unconfirmed as the site content has not been directly analyzed. The domain is registered through NiceNIC International Group Co., Limited and uses Cloudflare nameservers (kiki.ns.cloudflare.com, porter.ns.cloudflare.com). It appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, indicating broad recognition as malicious. Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk. Technologies detected include React, HSTS, and Cloudflare Browser Insights, which may be used to obfuscate or enhance the site's functionality. Defenders should treat this domain as an active threat, block access at the network level, and monitor for related infrastructure. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. No specific brand impersonation beyond the 'Famous Fox Federation' branding is confirmed in the available data.