chalixacapital[.]com

Analysis indicates that chalixacapital.com was registered on 17 January 2026 through GoDaddy.com, LLC and is currently resolving to the IPv4 address 88.222.219.128. The host is geolocated to Great Britain and is associated with the organization UAB INIT. The site presents a valid Let’s Encrypt YR2 certificate, and an HTTP request returns status 200 with the page title “Chalixa Capital Forex – True ECN Forex Broker.”

Infrastructure profiling shows a Gridinsoft trust score of 0 out of 100, confirming a lack of reputable content. The domain is listed on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans report that 2 of 95 security vendors have flagged the domain, suggesting limited but non‑trivial detection across scanning engines.

The observed characteristics align with a generic phishing operation aimed at impersonating a forex broker, as reflected in the page title and the high‑risk classification. While the site is reachable and serves content, the specific phishing kit or credential harvesting mechanism has not been publicly disclosed, leaving the exact payload unknown. Nevertheless, the combination of a recent registration, low trust score, active blocklist entry, and vendor flags warrants a high confidence rating for malicious intent.

Defenders should add chalixacapital.com to network and email filtering deny lists, monitor outbound connections to 88.222.219.128, and consider sinkholing the IP if feasible. Continuous re‑evaluation is advised, as the domain remains active and could evolve its tactics. Incident response teams should treat any credential submissions to this site as compromised and advise affected users to reset authentication details immediately.