vuopox[.]com

The domain vuopox.com was registered on July 15, 2026 through the registrar Fewmoretaps OU d/b/a Trustname.com. It is currently hosted on the IP address 64.7.198.11 and uses Cloudflare nameservers hank.ns.cloudflare.com and maria.ns.cloudflare.com. Within five days of its creation the domain appeared on a security blocklist and has been added to the PhishDestroy blocklist, indicating that at least one security provider has observed malicious activity associated with the host. VirusTotal scans have recorded two positive detections out of ninety‑five submitted engines, confirming that a minority of scanners have identified the site as malicious. The threat type is catalogued as generic phishing and the risk level is assessed as high, with the operational status marked as active as of the report date, July 20, 2026. Analysis of the available telemetry shows that the infrastructure is minimal, relying on a single IPv4 address and standard Cloudflare DNS services, a pattern frequently employed by short‑lived phishing campaigns to benefit from Cloudflare’s performance and obscuration features. The limited detection footprint—only one blocklist entry and two VirusTotal positives—suggests that the campaign may be in an early deployment phase, or that detection mechanisms have not yet fully propagated. No additional intelligence such as Safe Browsing verdicts, OTX references, SSL certificate details, HTTP response codes, or page‑title metadata is presently available, leaving the full scope of the malicious payload and target brand undefined. Defenders should proactively block traffic to vuopox.com at network perimeter devices and update endpoint protection signatures to include the two VirusTotal‑identified detections. Monitoring of DNS queries for the associated Cloudflare nameservers can provide early warning of any future resolution changes. Given the high‑risk classification, security teams are advised to treat any communications originating from or referencing vuopox.