# neutys.net — SUSPICIOUS

> neutys.net is a recently created domain (Aug 28, 2025) posing as a login portal to steal credentials. 4/95 security vendors flag this site as malicious.

## Summary
PhishDestroy identifies neutys.net as an active credential harvesting domain operating with elevated risk. This domain was flagged by 4 out of 95 VirusTotal security vendors for phishing activity, indicating a high probability of malicious intent. The site resolves to IP 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on August 28, 2025. Despite having a Google Trust Services SSL certificate, the domain's recent creation date and low trust scores among security vendors suggest it is a newly established but already compromised resource.  The domain's technical indicators reveal several red flags. VirusTotal's detection rate of 4/95 suggests limited but notable recognition of its malicious nature. The IP address 188.114.96.3 is associated with hosting infrastructure known for malicious activity. The domain's creation date of August 28, 2025, indicates it is a very recent addition to the threat landscape, likely created to evade existing blocklists. The registrar, NICENIC INTERNATIONAL GROUP CO., LIMITED, has been linked to multiple malicious domains in the past, further increasing suspicion. The presence of a Google Trust Services SSL certificate may be used to lend false legitimacy to the site, tricking users into believing it is safe.  Users should immediately avoid interacting with neutys.net, especially any login forms or input fields. If you have already entered credentials on this site, change your passwords immediately and enable multi-factor authentication on all affected accounts. Report the domain to your IT administrator or security team if it appears in your organization's logs. Consider blocking the domain at the network level and updating firewall rules to prevent further access. Always verify the legitimacy of websites before entering sensitive information, and use tools like browser-based security extensions to detect and block such threats. Stay vigilant and report any suspicious activity to relevant authorities or security platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-28 09:22:12
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 4 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/efedda35-9358-439c-93d8-2ecc44cdfdbe
- PhishDestroy: https://phishdestroy.io/domain/neutys.net/
- LLM endpoint: https://phishdestroy.io/domain/neutys.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/neutys.net/
Last updated: 2026-03-23