Analysis of huedox.com indicates a high-risk phishing domain registered on July 23, 2026, through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to IP 64.7.198.11 and uses Cloudflare nameservers (eve.ns.cloudflare.com, tosana.ns.cloudflare.com). As of July 28, 2026, the domain remains active and is flagged by 11 of 91 security vendors on VirusTotal, including PhishDestroy, MetaMask, and SEAL, with listings on three additional security blocklists.
No specific brand impersonation or phishing kit has been confirmed in the available data, though the domain exhibits characteristics consistent with account verification or credential harvesting schemes. Infrastructure analysis reveals Cloudflare hosting, which may obscure origin details and complicate takedown efforts.
Defenders should prioritize blocking the domain and its associated IP at the network level, while monitoring for related subdomains or SSL certificates tied to the same infrastructure. The registration age (5 days at time of reporting) suggests recent deployment, and continued activity warrants immediate action despite the lack of confirmed brand targeting.