app[.]duarax[.]com

This domain is under investigation for generic phishing activity as of August 07, 2026. The domain app.duarax.com resolves to IP address 104.21.18.184. A scan by VirusTotal involving 91 vendors returned zero current detections; however, the absence of detections does not constitute proof of safety. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it as a potential threat. No additional threat intel details such as page title, brand impersonation, or hosting country are yet available in the supplied data. The domain is currently active and accessible.

The low detection rate combined with a single blocklist listing suggests that the threat may be recent or low-profile, but the generic phishing classification warrants caution. Defenders should treat this domain as suspicious until further analysis is completed. Recommended actions include monitoring network traffic for connections to this domain, inspecting any emails or messages referencing app.duarax.com, and checking internal logs for any interactions with the IP 104.21.18.184. Since the exact content of the site has not been analysed, it is unclear whether it hosts a login page, a credential harvester, or a distribution mechanism for malware. The lack of detections across 91 vendors does not rule out a targeted or newly deployed phishing campaign. Analysts should re-scan the domain periodically, as detection status can change quickly once security vendors update their signatures.

The single blocklist entry from PhishDestroy is the only concrete indicator of maliciousness at this time. The domain's resolution to a common hosting IP (104.21.18.184) associated with Cloudflare may indicate the use of a proxy or CDN, which complicates takedown efforts. No evidence of SSL certificate issues or HTTP status anomalies is present in the data.