veloranexenai[.]net

The domain veloranexenai.net was registered on February 21, 2026 and is currently listed as taken offline. Intelligence sources indicate that it has been associated with a generic phishing campaign. AlienVault OTX cites the domain in a single threat‑intelligence pulse, and it appears on one public security blocklist that is actively enforced by the PhishDestroy filtering service.

VirusTotal analysis shows that 17 of 93 scanned security vendors flagged the domain as malicious, confirming a consensus of suspicion across multiple detection engines. No additional technical artifacts such as hosting IP, ASN, SSL certificate details, or page‑title metadata have been disclosed, so the underlying infrastructure remains unknown. The limited exposure on blocklists and the modest detection count suggest that the campaign has not achieved widespread distribution, yet the presence on a reputable blocklist and the multi‑vendor detection rating warrant a precautionary response.

Defenders should ensure that any outbound DNS or HTTP requests to veloranexenai.net are denied at the perimeter, update local and cloud‑based URL filtering policies to include the domain, and monitor for any residual connections that may arise from compromised clients. Continuous review of threat‑intel feeds for new pulses or additional blocklist entries is recommended, as further attribution or expanded malicious activity could emerge. Given the domain’s recent creation date and its already flagged status, early containment is advisable to prevent potential credential harvesting or other phishing‑related impacts.