fluxbeam-dex[.]org

Analysis of fluxbeam-dex.org shows a newly registered domain created on 22 July 2026. The registrar is listed as Fewmoretaps OU d/b/a Trustname.com. DNS resolution points to the IPv4 address 186.2.175.109, which is currently the sole A‑record. The domain is served by four nameservers: ares.trustname.com, ns1.anycastdns.cz, ns2.anycastdns.cz, and zeus.trustname.com, indicating use of a mixed hosting infrastructure that includes both the registrar’s own DNS and external anycast services.

The domain has been observed on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one anti‑phishing platform has identified it as malicious. VirusTotal has recorded scans from 91 vendors, none of which have raised a detection; this absence should not be interpreted as a clean verdict, as the domain may employ evasion techniques or have not yet been fully analyzed by those engines. No public SSL certificate details, HTTP response codes, or page title information are available at this time, so the content served by the site remains unverified. The lack of visible brand or target information prevents attribution of a specific impersonated service, and the generic phishing classification is based solely on the threat type label supplied.

Defenders should add the domain and its associated IP address to inbound and outbound filtering rules, monitor DNS queries for the listed nameservers, and continue to query threat intel platforms for updates. Email gateways should inspect outbound messages for references to this domain and consider quarantine. Because the domain is only two days old, further activity such as credential‑harvesting pages or malware distribution may appear; continuous observation is recommended. Future scans should be revisited when additional telemetry becomes available, particularly any changes in TLS fingerprint or redirection behavior.