deriverse-dex[.]org

Analysis indicates that the domain deriverse-dex.org was registered on July 21, 2026 through Unstoppable Domains Inc. The authoritative name servers are ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, both belonging to the same registrar. DNS resolution points to the IPv4 address 186.2.175.103. Within a day of creation, the domain appeared on a security blocklist maintained by PhishDestroy and is currently listed as active. VirusTotal records show that one out of ninety‑five scanning engines flagged the domain, confirming at least a minimal level of malicious suspicion.

The limited detection footprint suggests that the malicious infrastructure is either newly deployed or evading broader detection. No additional public intelligence such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, or OTX reports are available for this domain at the time of writing. Defenders should consider the domain high risk based on its recent creation, association with a known blocklist, and the presence of a vendor detection.

Immediate mitigation steps include adding 186.2.175.103 to network deny lists, configuring DNS filtering to block queries for deriverse-dex.org, and monitoring outbound traffic for connections to the associated IP range. Continuous re‑evaluation is advised, as further analysis of the hosted content, certificate transparency logs, or subsequent detection updates may provide additional context. Until such data is obtained, the precautionary stance should treat the domain as a malicious phishing vector.