use-felix[.]net

use-felix.net presents a high risk as an active generic phishing domain targeting individuals interested in cryptocurrency yield and stock trading. The site uses deceptive branding and claims to offer on-chain yield generation, which can mislead visitors into divulging sensitive information or transferring funds under false pretenses. The threat is classified as generic phishing, with the potential for credential harvesting or financial fraud.

Technical analysis reveals multiple concrete risk factors. The domain was registered on July 08, 2026 through Fewmoretaps OU d/b/a Trustname.com, an entity sometimes associated with rapid domain registrations. The site is currently active and resolves to IP address 107.189.23.176. VirusTotal data indicate that 2 out of 95 security vendors have flagged this domain as malicious or suspicious, confirming ongoing threat activity despite a relatively low detection rate. The page title, 'UseFelix — Trade Stocks & Generate Yield On-Chain,' is designed to emulate legitimate financial platforms, further increasing the risk to targeted users.

To mitigate exposure, network administrators and security operations teams should immediately block access to use-felix.net and its associated IP address (107.189.23.176) at both endpoint and perimeter levels. Users should be alerted to the impersonation tactics and advised to avoid interacting with unsolicited communications referencing this domain. Threat intelligence feeds should be updated to reflect this domain’s active status and phishing classification. Continuous monitoring for related domains using similar registration patterns or branding is recommended to preempt further attacks.