This domain, veloxinv.com, was registered on February 6, 2026, through Dominet (HK) Limited and is currently under investigation for phishing activity. Infrastructure analysis reveals the domain is hosted on Cloudflare nameservers—eugene.ns.cloudflare.com, ollie.ns.cloudflare.com, and suzanne.ns.cloudflare.com—and resolves to the IP address 188.114.97.3. While VirusTotal scans from 91 security vendors show no active detections as of the latest assessment, this absence does not confirm the domain's legitimacy.
The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, indicating prior detection by specialized anti-fraud systems. The domain's content and specific phishing target remain unconfirmed, as no brand, page title, or scam classification details are available in the current intelligence. The use of Cloudflare infrastructure is consistent with both legitimate services and malicious campaigns seeking to evade detection through CDN-based hosting.
Defenders should treat this domain as high-risk pending further analysis, particularly given its presence on multiple blocklists and the lack of transparency regarding its operational purpose. Network-level blocking or monitoring is recommended for organizations with exposure to financial, cryptocurrency, or credential-harvesting threats, as MetaMask's inclusion among blocking entities suggests potential targeting of web3 or financial users.