# flexnexa.work: Flexible Online Jobs and Remote Work Landing Page | PhishDestroy
Content language: English
Canonical HTML report: https://phishdestroy.io/domain/flexnexa.work/
Machine-readable companion: https://phishdestroy.io/domain/flexnexa.work/llm.txt
## Summary
PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.
## Stored observations
- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-12 06:44:35 UTC
- Selected availability observation: 2026-11-12T12:33:10Z
- Stored record updated: 2026-11-12 15:22:24 UTC
- VirusTotal detections in the stored snapshot: 2/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean
## Stored infrastructure
- Observed IP address: 103.27.73.80
- Registrar in stored WHOIS data: NameCheap, Inc.
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200 (observed: 2026-11-12T12:33:10Z)
- Registration date in stored WHOIS data: 2026-07-10 14:19:09 UTC
## Evidence links
- URLScan report: https://urlscan.io/result/01a1ce80-655b-7148-ad8e-57d92c07e302/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/flexnexa.work
- Certificate Transparency search: https://crt.sh/?q=%25.flexnexa.work
- Web Archive lookup: https://web.archive.org/web/*/https://flexnexa.work/
## Corrections
- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq
## Public report package
PhishDestroy records flexnexa.work as a landing page promoting flexible online jobs, part-time remote work, and an application call to action.
On 2026-11-12, flexnexa.work displayed a dark-themed landing page branded "FLEXNEXA" with a navigation bar linking to Home, About, Positions, Features, Testimonials, and Contact Us, plus a green "Apply Now" button. The hero section reads "Explore Flexible Online Jobs" and invites visitors to explore flexible work-from-home roles and earn part-time income on their own schedule, alongside a photo of a person using a laptop and a "0K Monthly Visitor" counter.
The stored VirusTotal domain result reports 2 detections out of 92 engines. alphaMountain.ai reported "suspicious"; Forcepoint ThreatSeeker reported "suspicious".
Package revision: 2fb9f11e30eec6e47e1548bdebd70566cbf0e7f2cb85ae9f543eedcc3702c399
Text generated (not scan time): 2026-11-12 07:49:46
Reviewed evidence snapshot: {"domain":"flexnexa.work","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"flexnexa.work","final_host":"flexnexa.work","redirects":[],"captured_at":"2026-11-12T06:48:00Z","uuid":"8d50c120-745b-42c4-8b97-1ff4bfddab34","report_url":"https://radar.cloudflare.com/scan/8d50c120-745b-42c4-8b97-1ff4bfddab34","sha256":"e52989cafb666f44b9881e6179266b0e25e00e5637f5c4b46e586ce7c9889cbc","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The website presents itself as 'Flexnexa' and the domain 'flexnexa.work' matches this branding. There is no evidence of impersonation of a known brand, fake store characteristics, credential theft, or other malicious activities. The content describes a service for working remotely.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":2,"engines":92,"malicious":0,"suspicious":2,"analysis_date":"2026-11-02","retrieved_date":"2026-11-12","vendor_labels":{"alphaMountain.ai":"suspicious","Forcepoint ThreatSeeker":"suspicious"},"flagging_vendors":["alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 2 detections out of 92 engines. alphaMountain.ai reported \"suspicious\"; Forcepoint ThreatSeeker reported \"suspicious\".","page_paragraph_target_characters":516}
Source facts (timestamps as stored): {"record_id":1935671,"first_recorded_at":"2026-11-12 07:44:35","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":2,"denominator":92,"malicious":0,"suspicious":2,"vendors":{"alphaMountain.ai":"suspicious","Forcepoint ThreatSeeker":"suspicious"},"observed_at":"2026-11-02T19:51:40Z","checked_at":null,"fetched_at":"2026-11-12T06:47:17Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":2,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","Forcepoint ThreatSeeker"],"observed_at":"2026-11-02 19:51:40","checked_at":"2026-11-12 07:47:17","fetched_at":"2026-11-12 06:47:18","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"alphaMountain.ai":"suspicious","Forcepoint ThreatSeeker":"suspicious"},"vendor_names":["alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":52,"malicious":0,"suspicious":2,"undetected":38}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-12 07:47:32"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-12 08:37:07"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1935671,"scope":"checked_url","observed_at":"2026-11-12T12:33:10Z","http_status":200,"http_observed_at":"2026-11-12T12:33:10Z","stored_http_code":200,"stored_http_observed_at":"2026-11-12T12:33:10Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}
## Stored page captures
- URLScan · 2026-11-12: https://screenshots.phishdestroy.io/us/01a1ce80-655b-7148-ad8e-57d92c07e302.png
Captured: 2026-11-12 06:45:07 UTC
Source report: https://urlscan.io/result/01a1ce80-655b-7148-ad8e-57d92c07e302/
SHA-256: 3af1f326e108e1911983afe4a0642833ac02d6878be4e7a8b80b0e705170bc2e
- URLScan · 2026-11-12: https://screenshots.phishdestroy.io/us/01a1ce6a-e3de-716d-91d0-9e3d9d912445.png
Captured: 2026-11-12 06:21:30 UTC
Source report: https://urlscan.io/result/01a1ce6a-e3de-716d-91d0-9e3d9d912445/
SHA-256: 664a5cac4cc5c8caf1c17278ac76c29fe779c7683a9f4dfa2fc8da5b6bb9339b
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8d50c120-745b-42c4-8b97-1ff4bfddab34.png
Captured: 2026-11-12 06:48:00 UTC
Source report: https://radar.cloudflare.com/scan/8d50c120-745b-42c4-8b97-1ff4bfddab34
SHA-256: e52989cafb666f44b9881e6179266b0e25e00e5637f5c4b46e586ce7c9889cbc
- URLQuery: https://screenshots.phishdestroy.io/uq/ab5861d3-3266-41dc-9cb2-6da6bafdce5b.png
Source report: https://urlquery.net/report/ab5861d3-3266-41dc-9cb2-6da6bafdce5b
SHA-256: 74b42ec4f326c2000a40ebdfeff9af4f6e2247a8791d1a295d0c6b613d51fcbf
## Collected source observations
Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
"urlscan": {
"v": 1,
"fetched_at": "2026-11-12T06:48:49Z",
"uuid": "01a1ce80-655b-7148-ad8e-57d92c07e302",
"scanned_at": "2026-11-12T06:45:07Z",
"final_url": "https://flexnexa.work/",
"status": 200,
"ip": "103.27.73.80",
"ptr": "palace2.sfdns.net",
"domains": [
"fonts.gstatic.com",
"fonts.googleapis.com",
"use.fontawesome.com",
"ad.doubleclick.net",
"www.google.com",
"www.googletagmanager.com"
],
"ips": [
"142.250.154.94",
"142.251.13.95",
"172.67.142.245",
"142.251.110.148",
"142.251.152.119",
"142.251.110.97",
"103.27.73.80"
],
"asns": [
"15169",
"13335",
"150172"
],
"countries": [
"US",
"MY"
],
"doc_hash": "67a3e482dde53dcceeb2bb349c1f51d98dab4e5d61c6a084f55d1dfbee12b4a2",
"script_hashes": [
"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf",
"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89",
"cde800f1780155f3ec5825abf88e3158defb22d69d38fce72eec42eae76b4537",
"26af5d0344a83e8049c34e1b308f15f1eb2545543eb3ad6ea4fab30ac9d58aaa",
"3ac18341746e4a88df659245e1bf8f77995f154b083156f4d7ca27cb0f529733",
"e5d0ab3c9f3cd4ef188add308bb0cf77274cb4524b9a9022236b8f2ce8c194da",
"09c977687b69c47de97105f4e4e6dfa09cb1315c0992c2bb883c510a8faa970d",
"1278619813d4e9630421b15a064f8edb36a48da812a80003957108b8cddb5fc4",
"629e3105e61a441df8ee6f179b60e54f093ac005576d6618472f1d38b1ca7ffb",
"f2bee71232b9df7a6fc7a8ba4428241e08bf0c0949bb702af3752a97e39d6033"
],
"globals": [
"gtag",
"dataLayer",
"google_tag_data",
"google_tag_manager",
"elementskit",
"jQuery",
"validate_input",
"romethemeform_ajax_url",
"sending_form",
"intl_tel_input_script",
"intlTelInputGlobals",
"intlTelInput",
"expand",
"Chart",
"GLightbox",
"EvEmitter",
"imagesLoaded",
"jQueryBridget",
"getSize",
"matchesSelector",
"fizzyUIUtils",
"Outlayer",
"Masonry",
"Odometer",
"Swiper",
"wp",
"swv",
"wpcf7",
"nbcpf",
"DK_COOKIE",
"webpackChunkelementorFrontend",
"elementorModules",
"elementorFrontendConfig",
"elementorFrontend",
"jkit_ajax_url",
"jkit_nonce",
"animateCircle",
"ekit_config",
"ElementsKit_Helper",
"_wpemojiSettings"
],
"cookies": [
"_gcl_au"
],
"storage_keys": [
"_gcl_ls",
"wpEmojiSettingsSupports"
],
"tls": {
"san": [
"autoconfig.flexnexa.work",
"autoconfig.rolebridge.online",
"autodiscover.flexnexa.work",
"autodiscover.rolebridge.online",
"cpanel.flexnexa.work",
"cpanel.rolebridge.online",
"cpcalendars.flexnexa.work",
"cpcalendars.rolebridge.online",
"cpcontacts.flexnexa.work",
"cpcontacts.rolebridge.online"
],
"cipher": "AES_128_GCM",
"issuer": "YR2",
"subject": "rolebridge.online",
"protocol": "TLS 1.3",
"valid_to": "2027-01-31T17:13:10Z",
"valid_from": "2026-11-02T17:13:11Z"
},
"domain_age_days": 123,
"apex_age_days": 123,
"tls_age_days": 9,
"tls_valid_days": 89,
"requests": 141,
"verdicts": {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 77,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
},
"headers": {
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.1.34",
"link": "; rel=\"https://api.w.org/\"\n; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\n; rel=shortli"
}
},
"cf": {
"v": 1,
"fetched_at": "2026-11-12T06:48:52Z",
"uuid": "8d50c120-745b-42c4-8b97-1ff4bfddab34",
"scanned_at": "2026-11-12T06:48:00Z",
"final_url": "https://flexnexa.work/",
"status": 200,
"history": [
{
"url": "https://flexnexa.work/",
"status": 200
}
],
"dom_hash": "d74097393e836c4272644dce2d6b4526ad718da25524a9aaee2c6ff0f46cc1b7",
"doc_hash": "67a3e482dde53dcceeb2bb349c1f51d98dab4e5d61c6a084f55d1dfbee12b4a2",
"radar_rank": {
"bucket": ">200000"
},
"dns": [
{
"name": "flexnexa.work",
"type": "A",
"value": "103.27.73.80"
}
],
"dnssec_valid": false,
"ip": "103.27.73.80",
"whois": {
"registrar": "NameCheap, Inc.",
"created": "2026-07-10T16:19:09Z",
"updated": "2026-09-08T16:19:12Z",
"expires": "2027-07-10T16:19:09Z",
"nameservers": [
"dns1.serverfreak.biz",
"dns2.serverfreak.biz"
]
}
},
"vt": {
"v": 1,
"fetched_at": "2026-11-12T06:47:17Z",
"analysis_at": "2026-11-02T19:51:40Z",
"stats": {
"timeout": 0,
"harmless": 52,
"malicious": 0,
"suspicious": 2,
"undetected": 38
},
"detections": {
"alphaMountain.ai": "suspicious",
"Forcepoint ThreatSeeker": "suspicious"
},
"reputation": 0,
"categories": {
"alphaMountain.ai": "Suspicious (alphaMountain.ai)"
},
"registrar": "NAMECHEAP INC",
"created": "2026-07-10T16:19:09Z",
"expires": "2027-07-10T16:19:09Z",
"updated": "2026-09-08T16:19:12Z",
"first_seen": "2026-07-11T16:42:27Z",
"dns": [
{
"ttl": 14400,
"type": "MX",
"value": "flexnexa.work",
"priority": 0
},
{
"ttl": 8182,
"type": "A",
"value": "103.27.73.80"
},
{
"ttl": 21600,
"type": "NS",
"value": "dns1.serverfreak.biz"
},
{
"ttl": 21600,
"type": "NS",
"value": "dns2.serverfreak.biz"
},
{
"ttl": 21600,
"type": "SOA",
"rname": "root.system.serverfreak.net",
"value": "dns1.serverfreak.biz"
},
{
"ttl": 14400,
"type": "TXT",
"value": "v=spf1 +a +mx +ip4:103.27.73.80 include:spf.sfdns.net ~all"
}
],
"dns_at": "2026-11-02T19:57:06Z",
"jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae",
"cert": {
"san": [
"autoconfig.flexnexa.work",
"autoconfig.rolebridge.online",
"autodiscover.flexnexa.work",
"autodiscover.rolebridge.online",
"cpanel.flexnexa.work",
"cpanel.rolebridge.online",
"cpcalendars.flexnexa.work",
"cpcalendars.rolebridge.online",
"cpcontacts.flexnexa.work",
"cpcontacts.rolebridge.online"
],
"issuer": "Let's Encrypt / YR2",
"serial": "527855de270fa4b42013aadc8b68cf4504f",
"sha256": "9472915b804ee18adbfe59fe529c32ed33f7e3bed08b82f6b925c9dd9e52eeed",
"subject": "rolebridge.online",
"valid_to": "2027-01-31T17:13:10Z",
"valid_from": "2026-11-02T17:13:11Z",
"observed_at": "2026-11-02T19:57:06Z"
},
"whois": {
"registrar": "NAMECHEAP INC",
"registrar_iana_id": "1068",
"registrar_url": "http://www.namecheap.com",
"created": "2026-07-10T16:19:09Z",
"updated": "1-01-01T00:00:00Z",
"expires": "2027-07-10T16:19:09Z",
"status": [
"clientTransferProhibited"
],
"nameservers": [
"dns1.serverfreak.biz",
"dns2.serverfreak.biz"
],
"dnssec": "unsigned"
},
"rdap": {
"status": [
"client transfer prohibited"
],
"events": {
"registration": "2026-07-10T16:19:09Z",
"registrar expiration": "2027-07-10T16:19:09Z",
"last update of RDAP database": "2026-11-02T19:57:06Z"
}
}
},
"webcheck": {
"v": 1,
"fetched_at": "2026-11-12T06:49:14Z",
"mail_config": {
"mx": [
"flexnexa.work"
],
"spf": "v=spf1 +a +mx +ip4:103.27.73.80 include:spf.sfdns.net ~all",
"dkim": [
"default"
],
"dmarc": true,
"dkim_bits": 2048,
"spf_lookups": 3
},
"block_lists": {
"resolvers": 12,
"blocked_count": 0
},
"archives": {
"last": "2026-11-12T06:44:54Z",
"first": "2026-11-12T06:44:54Z",
"changes": 0,
"days_archived": 1,
"avg_page_bytes": 30284
},
"robots_txt": {
"agents": [
"*"
],
"present": true,
"sitemaps": [
"https://flexnexa.work/wp-sitemap.xml"
]
},
"sitemap": {
"present": true,
"url_count": 6
},
"social_tags": {
"title": "Flexnexa – Work Anywhere With Just an Internet Connection",
"robots": "max-image-preview:large",
"generator": "WordPress 7.1.4",
"canonicalUrl": "https://flexnexa.work/"
},
"trackers": {
"requests": 0
},
"mixed_content": {
"no_sri": [
"https://www.googletagmanager.com/gtag/js"
],
"third_party_scripts": 1
},
"status": {
"up": true,
"code": 200,
"timings": {
"dns": 194,
"tls": 169,
"wait": 164,
"connect": 164,
"download": 552
},
"response_ms": 1243
},
"tls_connection": {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
},
"ports": {
"open": [
21,
25,
80,
110,
143,
443,
587,
993,
995
]
},
"carbon": {
"bytes": 188698,
"co2_grams": 0.0069,
"cleaner_than": 8
},
"dns_server": {
"ns": [
{
"ip": "167.172.91.23",
"host": "dns2.serverfreak.biz"
},
{
"ip": "51.68.189.56",
"host": "dns1.serverfreak.biz"
}
],
"zone": "flexnexa.work"
},
"location": {
"ip": "103.27.73.80",
"asn": "150172",
"org": "Serverfreak Technologies Sdn Bhd",
"city": "Klang",
"country": "MY"
},
"ssl": {
"issuer": "Let's Encrypt / YR2",
"subject": "rolebridge.online"
},
"dns": {
"A": [
"103.27.73.80"
],
"MX": [
"{\"exchange\": \"flexnexa.work\", \"priority\": 0}"
],
"NS": [
"dns2.serverfreak.biz",
"dns1.serverfreak.biz"
],
"SOA": "{\"nsname\": \"dns1.serverfreak.biz\", \"hostmaster\": \"root.system.serverfreak.net\", \"serial\": 2026090207, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}",
"TXT": [
"v=spf1 +a +mx +ip4:103.27.73.80 include:spf.sfdns.net ~all"
]
},
"dnssec": {
"ds": false,
"rrsig": false,
"dnskey": false
},
"hsts": {
"message": "Site does not serve any HSTS headers."
},
"http_security": {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
},
"get_ip": {
"ip": "103.27.73.80",
"family": 4
},
"redirects": {
"chain": [
"https://flexnexa.work"
]
},
"subdomains": {
"count": 9,
"subdomains": [
"autoconfig.flexnexa.work",
"autodiscover.flexnexa.work",
"cpanel.flexnexa.work",
"cpcalendars.flexnexa.work",
"cpcontacts.flexnexa.work",
"mail.flexnexa.work",
"webdisk.flexnexa.work",
"webmail.flexnexa.work",
"www.flexnexa.work"
]
},
"linked_pages": {
"internal_count": 10
},
"whois": {
"registrar": "NameCheap, Inc.",
"created": "2026-07-10T16:19:09Z",
"updated": "2026-09-08T16:19:12Z",
"expires": "2027-07-10T16:19:09Z",
"status": [
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"dns1.serverfreak.biz",
"dns2.serverfreak.biz"
]
},
"headers": {
"headers": {
"content-type": "text/html; charset=UTF-8",
"x-powered-by": "PHP/8.1.34",
"link": "; rel=\"https://api.w.org/\", ; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", ; rel=shortlink"
}
}
}
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/8d50c120-745b-42c4-8b97-1ff4bfddab34.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/8d50c120-745b-42c4-8b97-1ff4bfddab34","captured_at":"2026-11-12T06:48:00Z","sha256":"e52989cafb666f44b9881e6179266b0e25e00e5637f5c4b46e586ce7c9889cbc","model_image_sha256":"3768e2bbf5a7b229ad3443c38cd210c524e3bf97cd37ded79cabb907acf810c4","available":true,"content_status":null}
## Complete dated records
Availability observations: https://phishdestroy.io/domain/flexnexa.work/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/flexnexa.work/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/flexnexa.work/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/flexnexa.work/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/flexnexa.work/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/flexnexa.work/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/flexnexa.work/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/flexnexa.work/records.json?source=content&format=json
## Dated availability observation
Latest stored reachability observation
```json
{
"state": "alive",
"label_key": "availability.active",
"detail_key": "detail.latest_reachability",
"params": [],
"source": "current_http_probe",
"record_id": 1935671,
"scope": "checked_url",
"observed_at": "2026-11-12T12:33:10Z",
"http_status": 200,
"http_observed_at": "2026-11-12T12:33:10Z",
"stored_http_code": 200,
"stored_http_observed_at": "2026-11-12T12:33:10Z",
"legacy_site_status": "alive",
"supports_outcome_badge": false,
"content_classification": "unknown",
"content_classification_at": null,
"registration_state": "unknown",
"policy": "20261102-dated-availability-v2"
}
```