morexx-investments[.]net

morexx-investments.net was registered through NameSilo, LLC on 4 January 2025. The domain is delegated to the authoritative name servers ns21.v-sys.org and ns22.v-sys.org and resolves to the IPv4 address 91.235.142.249. As of 27 July 2026 the domain remains active and is listed as a generic phishing threat under investigation.

VirusTotal has processed the domain with 91 scanning engines; none of the engines reported a detection at the time of the scan, but the absence of a flag does not constitute a safety assurance. The domain is currently blocked by the PhishDestroy service and appears on a single external blocklist, indicating that at least one security feed has classified it as malicious. No public SSL/TLS certificate information, HTTP response codes, or page title data have been published, and no brand or targeted service has been identified in the available intelligence.

Consequently, the precise phishing lure and payload remain unknown. Defenders should treat the domain as hostile: add the domain and its resolving IP address to outbound and inbound deny lists, enforce DNS sink‑hole or proxy filtering, and monitor for any new indicators such as URL patterns or file hashes that may appear in future threat feeds. Continuous re‑evaluation is advised, especially if additional analysis surfaces content‑level evidence or if the domain begins to appear in additional blocklists.