fluxscann[.]pro

Analysis of fluxscann.pro indicates that the domain is actively being used for a phishing campaign as of the report date, August 06, 2026. The domain was registered on July 30, 2026 through Global Domain Group LLC and is served by the authoritative nameservers ns1.globaldomaingroup.com and ns2.globaldomaingroup.com. DNS resolution directs traffic to the IP address 216.198.79.1, which is the sole host associated with the domain in public records.

The site has been added to a single security blocklist and is presently blocked by the PhishDestroy filtering service, reflecting its classification as malicious by at least one external mitigation platform. VirusTotal reports that the domain was examined by 91 commercial scanning engines; at the time of analysis none of those engines generated a detection, a fact that does not constitute confirmation of safety given the limited visibility of the payload. No additional telemetry such as SSL certificate details, HTTP response codes, page titles, or brand targeting has been released, leaving the exact content and attack vector unverified.

Consequently, the current evidence base consists of registrar metadata, DNS infrastructure, blocklist inclusion, and the absence of detections across a large vendor set. Defenders should continue to deny network access to the IP 216.198.79.1, enforce domain‑level blocking for fluxscann.pro across perimeter and endpoint controls, and monitor for any new indicators that may emerge from subsequent URL or payload analysis. Ongoing observation is required to determine whether the infrastructure expands, adopts additional hosting, or begins to exhibit detectable payload characteristics.