risex-trade[.]com

The domain risex-trade.com was registered on 21 July 2026 through UnstoppableUS1 LLC, using the Unstoppable Domains name‑server pair ns1.unstoppabledomains.com and ns2.unstoppabledomains.com. DNS resolution points to the IPv4 address 186.2.175.103, which is currently listed on a single public security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal records indicate that the domain has been examined by 95 scanning engines; none of those engines raised a detection at the time of analysis. While the absence of a detection does not constitute a safety guarantee, the lack of any positive flag across a broad vendor set reduces the likelihood of known malware payloads being associated with the domain at this stage.

No public Safe Browsing, Open Threat Exchange (OTX) entries, SSL certificate details, HTTP response codes, or page‑title metadata have been observed for risex-trade.com, leaving those vectors unverified. The limited public footprint—only one blocklist entry and a single PhishDestroy indicator—suggests that the domain may be in an early deployment phase typical of generic phishing campaigns. However, the recent creation date (one day before the report) and the use of a fast‑changing DNS provider are consistent with infrastructure choices made to evade takedown and attribution.

Defenders should continue to monitor the IP address 186.2.175.103 and the domain risex-trade.com for any new classifications, especially additions to URL or IP reputation services. Adding the domain to local deny lists, enforcing strict outbound filtering for connections to the host, and employing heuristic URL inspection can mitigate potential credential‑harvesting attempts. Because the content of the site has not been publicly analysed, any user‑initiated interaction with the domain should be treated as potentially malicious until further evidence is gathered.