orangeox[.]com

The domain orangeox.com was observed on July 27, 2026 as part of a generic phishing campaign. Registration data shows the domain was created through Wild West Domains, LLC. DNS resolution is served by ns37.domaincontrol.com and ns38.domaincontrol.com, both standard GoDaddy name servers. HTTP probing returns a 200 OK response, confirming that the web service is currently reachable. The site has been added to a single security blocklist and is actively blocked by the PhishDestroy detection engine.

VirusTotal has recorded 91 vendor scans; none of the scanners reported a malicious classification at the time of analysis, though the absence of detections does not constitute assurance of safety. No additional intelligence such as Safe Browsing alerts, OTX references, or SSL certificate details were available. The limited evidence suggests the infrastructure is modest and may rely on shared hosting services typical of many phishing operators.

Defenders should incorporate orangeox.com into URL filtering, DNS blocklists, and endpoint protection policies. Continuous monitoring for changes in detection counts, blocklist status, or hosting attributes is recommended. Incident response teams encountering traffic to this domain should treat the activity as potentially malicious and isolate affected systems pending further investigation.