cortexinvest[.]us

Analysis conducted on July 27, 2026 indicates that the domain cortexinvest.us is actively leveraged for generic phishing. The domain was registered through NAMECHEAP INC on 16 January 2026 and is currently hosted on IP address 192.64.118.31. Both authoritative nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com resolve to the same hosting provider, suggesting a typical Namecheap hosting configuration.

Reputation checks show that the domain appears on one public security blocklist and is listed by PhishDestroy as a blocked entity. Google Safe Browsing classifies the site as a social engineering threat, and nine of ninety‑one VirusTotal scanners have flagged the domain, reinforcing the suspicion of malicious use. The available evidence does not include SSL certificate details, HTTP response codes, or page‑title content, leaving the exact presentation of the malicious page undocumented.

Nonetheless, the convergence of blocklist presence, Safe Browsing warning, and multiple vendor detections provides a high confidence indication that the domain is employed to harvest credentials or otherwise deceive users. Defenders should block network traffic to 192.64.118.31 and to the fully qualified domain name cortexinvest.us at perimeter devices, update intrusion detection signatures to include the domain, and monitor for outbound connections originating from internal hosts that may have interacted with the site. Continuous re‑evaluation is advised, as the threat actor may modify hosting or employ additional infrastructure, but current indicators suggest the domain remains active and poses a high risk.