buemux[.]com

Analysis of buemux.com as of August 07, 2026 indicates that the domain is actively used in a generic phishing operation and is assigned an elevated risk rating. The domain is currently blocked by the PhishDestroy mitigation service, suggesting that at least one reputable anti‑phishing platform has taken defensive action against it. DNS resolution points to the IP address 104.21.50.221, which is the sole hosting endpoint observed for this indicator.

The domain appears on a single security blocklist, confirming that it has been flagged by external threat‑intelligence feeds, though the specific list is not disclosed in the provided data. VirusTotal scans show that 2 of 91 security vendors have flagged the domain, providing modest but notable detection confidence across multiple scanning engines. No additional evidence such as SSL certificate details, HTTP response codes, page title, or registrar information is available in the current intelligence set, leaving those aspects of the infrastructure unverified.

Defenders should prioritize adding buemux.com and its resolved IP 104.21.50.221 to network‑level deny lists, enforce URL filtering rules that block access to the domain, and monitor related DNS queries for potential lateral spread. Continuous re‑evaluation is advised, as further telemetry could reveal expanded hosting, additional detection vendor votes, or new blocklist inclusions that would affect the overall threat posture.