heozux[.]com

Analysis of the domain heozux.com indicates it is an active phishing site under investigation as of July 24, 2026. The domain was registered on July 19, 2026, through Fewmoretaps OU operating under the name Trustname.com. Infrastructure analysis reveals the domain is hosted on Cloudflare nameservers (alaric.ns.cloudflare.com and eloise.ns.cloudflare.com) and resolves to the IP address 104.21.48.7. At present, the domain appears on a single security blocklist, having been flagged by PhishDestroy, though no additional public threat intelligence sources have confirmed malicious activity as of this report.

VirusTotal scans conducted by 91 vendors returned no detections, though this absence does not confirm the domain's safety. The lack of detections may reflect limited visibility or delayed analysis by security vendors rather than an absence of malicious intent. The domain remains operational, and its exact content or targeted brand has not been conclusively identified in available data. No evidence links the domain to a specific phishing kit, scam category, or impersonated brand at this time.

Defenders are advised to treat heozux.com as a potential threat based on its recent registration, Cloudflare-hosted infrastructure, and inclusion on a security blocklist. Organizations should monitor network traffic for connections to 104.21.48.7 and consider implementing temporary blocks or alerts for this domain pending further analysis. Additional scrutiny is warranted given the domain's age and the registrar's history, though no definitive malicious payload or campaign has been confirmed. Updates to this assessment will be provided as new intelligence emerges.