ruxfunds[.]net

Analysis of ruxfunds.net shows that the domain was registered on June 25, 2025 and remains active as of the report date, July 27, 2026. The registration was processed through Cloudflare, Inc., and the authoritative name servers are marge.ns.cloudflare.com and quincy.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which is part of Cloudflare’s hosting infrastructure.

VirusTotal records indicate that two of ninety‑one security vendors have flagged the domain, providing an early signal of malicious activity. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the assessment that it is being used for phishing. No additional public metadata such as page title, SSL certificate details, or specific phishing kit identifiers are presently available, leaving the exact content and targeting of the site uncertain.

Given the combination of recent creation, Cloudflare‑based hosting, vendor detections, blocklist presence, and active blocking by PhishDestroy, defenders should treat ruxfunds.net as high‑risk. Recommended mitigations include adding the domain to network and endpoint deny lists, monitoring outbound traffic for connections to 188.114.96.3, and employing URL filtering solutions that reference the known blocklist entry. Continuous re‑evaluation is advised, as further intelligence—such as page content or additional vendor detections—may emerge and refine the threat profile.