nelixcas[.]com

Nelixcas.com was identified as a phishing domain that posed risks to users by impersonating legitimate services. With a VirusTotal score of 14/95 and a Gridinsoft trust score of 1, the site was marked as suspicious and categorized as a high-risk scam. This indicates a significant potential for user data theft or financial fraud.

Registered with Dominet (HK) Limited, the domain was 145 days old at the time of its takedown and was hosted on an IP address of 188.114.97.3. Gridinsoft's evaluation pointed to multiple issues including the use of shared hosting, marking it as high-risk in its analysis. The domain also held an SSL certificate, which is often misused by malicious actors to lend credibility to their scams.

PhishDestroy has effectively blocked this domain after confirmation of its phishing activities, ensuring it is no longer active. Continuous monitoring is in place to prevent any resurgence or rebranding attempts from this threat actor.