cpanel[.]elixirxcapital[.]com

Analysis of cpanel.elixirxcapital.com shows that the domain is actively used for a generic phishing campaign. The registration record lists Global Domain Group LLC as the registrar, indicating a commercial registration pathway. VirusTotal has recorded detections from three of ninety‑one scanners, confirming that at least a minority of security engines recognise malicious behavior. The site returns an HTTP 307 temporary redirect, a response often leveraged to forward victims to credential‑harvesting endpoints while obscuring the final destination.

Nameserver resolution points to ns27.asurahosting.com and ns28.asurahosting.com, both associated with the Asura Hosting provider, suggesting the hosting infrastructure is shared with other potentially abusive sites. The domain is presently listed on one public blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing the classification as a high‑risk phishing vector. The risk level is marked high and the operational status remains active, meaning the threat continues to be reachable.

No additional intelligence such as page title, SSL certificate details, or brand targeting has been disclosed, leaving those facets unverified. Defenders should add the domain to URL filtering rules, enforce blocklist updates, and monitor traffic to the associated nameservers for anomalous patterns. Continuous re‑scanning with multi‑engine services is advised to capture any evolution in detection coverage.