lynexfl[.]org

Analysis of lynexfl.org shows a domain that was created on 21 February 2026 and is currently taken offline. The site presented a HTTP response with the page title "Redirecting..." and was served by Nginx with the OpenResty extension. The domain resolves to IP address 172.67.172.220, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate is issued by Let’s Encrypt (R12), indicating that the site employed a valid TLS certificate at the time of observation.

Registration was performed through NameSilo, LLC, and the authoritative nameservers are ns1.ns306.parklogic.com and ns2.ns306.parklogic.com. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on two independent security blocklists. It is also listed as blocked by PhishDestroy and ScamSniffer. VirusTotal scanned the domain with 93 antivirus and URL‑reputation engines; none reported a detection, though the absence of alerts does not constitute a safety guarantee.

The combination of a recent registration, low trust score, presence on blocklists, and the "Redirecting..." title is consistent with a generic phishing deployment. Uncertainty remains regarding the specific payload or credential‑harvesting page because the site content was not captured before takedown. Defenders should continue to block the domain at network perimeters, monitor the associated IP for any re‑use, and update URL filtering policies to include the observed hostnames and nameserver patterns. Ongoing vigilance is advised in case the infrastructure is repurposed for new phishing campaigns.