maderix[.]ltd

The domain maderix.ltd carries an elevated risk level as a generic phishing site, according to PhishDestroy's analysis. This type of threat typically mimics legitimate login portals to steal credentials, and the domain's current offline status suggests it was taken down after detection, though it could resurface under different hosting.

Technical indicators paint a clear picture: VirusTotal flagged the domain with 2 out of 95 security vendors marking it malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, created on March 27, 2026, and resolves to IP 188.114.96.3. Its SSL certificate is issued by Google Trust Services / WE1, and the page title was "MADERIX." AlienVault OTX found it in one threat intelligence pulse, and it appears on one security blocklist, with zero trust scores from PhishDestroy's internal systems.

Users encountering maderix.ltd should avoid interacting with it entirely—do not click links, enter credentials, or download files. Even though it is offline, phishing domains often return under new IPs or registrars. PhishDestroy recommends reporting the domain to your security team and blocking it at the network level. If any credentials were entered on similar sites, change them immediately and enable multi-factor authentication on all accounts.