app[.]doahux[.]com

Analysis indicates that the domain app.doahux.com was registered on June 10, 2026 through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to the IP address 172.67.183.213, an address commonly associated with shared hosting services and known to host other malicious content. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming its involvement in phishing campaigns.

VirusTotal scans show that 10 of 91 security vendors flag the domain as malicious, reinforcing the suspicion of malicious activity. No additional data such as SSL certificate details, HTTP response codes, page titles, or brand targeting has been published, leaving the exact payload or impersonated brand undefined at this stage. The limited but consistent evidence—registration details, blocklist inclusion, vendor detections, and hosting IP—supports an elevated risk rating.

Defenders should immediately block traffic to app.doahux.com at network perimeters, add the associated IP 172.67.183.213 to deny lists, and monitor for any related domains registered by the same registrar. Continuous re‑evaluation is advised in case new indicators, such as content analysis or additional vendor detections, become available.