veltroxis-9-6-pro[.]com

Analysis of veltroxis-9-6-pro.com shows that the domain was registered on February 23 2026 through Realtime Register B.V. and is presently taken offline. The domain resolves to IP address 104.21.28.195, which belongs to AS13335 Cloudflare, Inc. in the United States. Both authoritative name servers are hosted by Cloudflare (lisa.ns.cloudflare.com and vern.ns.cloudflare.com). No SSL certificate is presented for the host, and an HTTP request returns the page title "Server Not Found," indicating that the web service is not delivering content.

The domain appears on three independent security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal records indicate that the domain was scanned by 93 antivirus and URL scanning engines, none of which raised a detection; this absence of detections should not be interpreted as evidence of benign intent. The combination of recent registration, Cloudflare hosting, lack of TLS, and blocklist presence aligns with typical phishing infrastructure patterns. Uncertainty remains regarding the specific phishing campaign payload, target audience, or any active credential collection endpoints because the site is offline and no page content has been captured.

Defenders are advised to continue enforcing blocklist rules for the domain, monitor DNS queries for the associated IP and Cloudflare name servers, and consider adding the domain to local deny lists. Network sensors should inspect outbound traffic for attempts to resolve or contact the IP, and any residual client artifacts should be examined for potential credential exposure. Ongoing reconnaissance of the IP range and related Cloudflare-hosted domains is recommended to detect possible reuse of the infrastructure in future campaigns.