raydex[.]org

Analysis indicates the domain raydex.org resolves to the IP address 186.2.175.35. The IP is currently listed on a single security blocklist, where the blocklist operator PhishDestroy has explicitly flagged the domain, suggesting prior detection of phishing‑related activity. Registration records show the domain was created on July 11 2026 and was registered through Spaceship, Inc. The authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net, both consistent with the registrar’s infrastructure.

VirusTotal has processed the domain with 91 scanning engines; none reported a malicious classification, but the lack of detections does not constitute proof of safety and must be weighed against other indicators. No additional data such as SSL certificate details, HTTP response codes, page title, Safe Browsing verdicts, or other reputation scores are presently available. The combination of a recent registration, blocklist inclusion, and the use of a registrar‑provided nameserver set aligns with patterns observed in newly deployed phishing infrastructure.

Defenders should add raydex.org to internal watchlists, enforce DNS filtering based on the observed blocklist entry, and monitor outbound connections to IP 186.2.175.35 for anomalous traffic. Re‑scanning the domain with multi‑engine services on a regular cadence is advised to capture any future changes in classification. Until further evidence is obtained, the domain remains under investigation and should be treated as potentially hostile.