raxvatange[.]ink

This domain, raxvatange.ink, was registered through NameCheap on 24 April 2026. Since its creation, it has been observed in active phishing campaigns, leading to an elevated risk rating. VirusTotal reports that 17 of 91 scanned security engines flag the domain as malicious, indicating a substantial detection consensus. The domain is presently listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service.

No additional public blocklists or safe‑browsing feeds have yet reported the domain. The available intelligence does not include details such as hosting IP, SSL certificate status, HTTP response codes, or page‑title metadata, so the specific landing page content remains unverified. Consequently, analysts cannot confirm which brand or service is being spoofed, nor can they attribute a particular phishing kit to the infrastructure. The lack of such granular data introduces uncertainty regarding the exact attack vector, but the existing detection signals are sufficient to consider the domain hostile.

Defenders should immediately add raxvatange.ink to deny‑list rules, enforce DNS‑level blocking, and monitor outbound traffic for attempted connections. Security tools that integrate VirusTotal or PhishDestroy feeds will already flag the domain, but manual rule updates ensure coverage across environments that lack those integrations. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional infrastructure components or victim targeting patterns.