veloxam[.]net

Analysis of the domain veloxam.net indicates active involvement in a generic phishing campaign as of the report date, July 28, 2026. The domain was registered on March 03, 2026 through Hostinger Operations, UAB, and is served by Cloudflare name servers eugene.ns.cloudflare.com and suzanne.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.96.3, which is the sole host observed for this infrastructure.

The domain appears on three external security blocklists, and it is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, suggesting that multiple threat intelligence feeds have flagged the domain for malicious activity. VirusTotal has processed the domain using 91 vendor scanners, none of which returned a detection at the time of analysis; however, the absence of detections does not constitute evidence of safety and should be interpreted in the context of the broader blocklist findings. No public information is available regarding SSL certificate details, HTTP response codes, Safe Browsing status, Open Threat Exchange mentions, or page title metadata, indicating that these vectors have not yet been reported or disclosed.

The current risk level is listed as "under investigation" and the operational status is marked as active. Defenders are advised to continue enforcing blocklist rules that include veloxam.net, monitor DNS queries for the associated IP address, and consider adding the domain to internal deny lists. Ongoing observation of the hosting infrastructure and any future detections from additional scanning engines should be incorporated into the threat profile to refine mitigation actions.