khaculoxy[.]com

Analysis of the domain khaculoxy.com indicates it is an active phishing site with elevated risk. The domain was registered on June 07, 2026, and is currently flagged by 3 of 91 security vendors on VirusTotal, including PhishDestroy. It also appears on one security blocklist, confirming its malicious classification. The exact nature of the phishing content remains unverified, as no specific brand, page title, or phishing kit details were provided in available intelligence.

However, the domain's detection by multiple security vendors and its presence on a blocklist align with typical credential-harvesting infrastructure. Infrastructure analysis reveals no additional details regarding hosting provider, autonomous system number (ASN), or SSL certificate attributes. The domain's registration age—approximately seven weeks at the time of this report—suggests it may still be in an active deployment phase, a common characteristic of short-lived phishing campaigns.

Defenders are advised to block this domain at the DNS or proxy level and monitor for related indicators of compromise (IOCs) in network logs. Given the limited vendor detections, retrospective analysis of traffic to this domain may be necessary to identify previously undetected compromises. No further evidence links or HTTP response data were available to refine the assessment.