On July 30, 2026, the domain notrxfee.com is under active investigation for potential phishing activity. The domain was created on July 29, 2026, indicating recent registration, which is often a characteristic of phishing domains. Currently, the domain is blocked by PhishDestroy, a known security tool, suggesting that it has been identified as a threat. The domain resolves to the IP address 172.67.198.252, which is hosted by Cloudflare, a popular DNS and web security provider. This resolution to Cloudflare nameservers (ashton.ns.cloudflare.com and jill.ns.cloudflare.com) is noteworthy, as it may indicate the use of reputable infrastructure to mask malicious intent.
The domain appears on one security blocklist, further raising concerns about its legitimacy. The registrar for the domain is PDR Ltd. d/b/a PublicDomainRegistry.com, a common registrar used by both legitimate and malicious actors. While the domain was scanned by 91 vendors on VirusTotal, no detections were reported at the time of the scan. However, the absence of detections does not guarantee the domain's safety, as phishing sites can often evade initial detection.
Safe Browsing and other similar tools have not provided additional classifications or flags for this domain. The exact content and purpose of the website have not been fully analyzed, and it is unclear if the site mimics any specific brand or service. Defenders are advised to monitor the domain closely and consider implementing additional security measures such as URL filtering and user awareness training to prevent potential phishing attacks. Further investigation is required to determine the full scope and nature of the threat posed by notrxfee.com.