app[.]voevux[.]com

This domain, app.voevux.com, is currently active and resolves to the IPv4 address 64.7.198.11. Registration records indicate that the domain was created on May 25, 2026 and is listed under the registrar Fewmoretaps OU d/b/a Trustname.com. The authoritative name servers are cheryl.ns.cloudflare.com and jacob.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s DNS infrastructure. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain as malicious, and the domain is present on one external security blocklist.

The phishing campaign has been identified as a generic phishing threat and has been blocked by the PhishDestroy mitigation service. No additional public intelligence, such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information, is available at this time. The available evidence suggests that the infrastructure is deliberately obscured by using Cloudflare’s DNS, which can impede direct IP‑level takedown actions.

Defenders should add app.voevux.com to local blocklists, enforce DNS filtering against the listed Cloudflare name servers, and monitor outbound connections to the IP address 64.7.198.11. Network traffic inspection rules that detect HTTP or HTTPS requests to this host should be deployed, and any user‑initiated attempts to resolve the domain should be logged for incident response. Continuous re‑evaluation is advised, as additional detection data may emerge from further scanning or from community threat feeds.