Analysis as of July 31, 2026 indicates that dynomex.com was registered on May 01, 2026 through the registrar Fewmoretaps OU d/b/a Trustname.com. The domain is delegated to Cloudflare name servers bryce.ns.cloudflare.com and karsyn.ns.cloudflare.com and resolves to the IP address 172.67.170.115, which belongs to Cloudflare's edge network. Threat intel sources report that the domain has been blocked by the PhishDestroy service and appears on one public security blocklist, confirming that at least one sinkhole or filtering system has taken action against it.
VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors, none of which returned a detection at the time of the scan; this absence of detections does not constitute a validation of safety. No public information is available regarding the site’s SSL certificate, HTTP response codes, page title, or any observed brand impersonation, leaving the content and intent of the web page unverified. The combination of recent registration, Cloudflare hosting, active blocklist inclusion, and phishing‑specific blocking suggests a heightened probability that dynomex.com is being used for credential‑harvesting or other deceptive activities.
Defenders should consider adding the domain to outbound filtering rules, monitor DNS queries for resolutions to 172.67.170.115, and incorporate the indicator into threat‑intel feeds. Continuous re‑evaluation is advised in case additional telemetry, such as page‑content analysis or user reports, becomes available.