nelwork[.]xyz

PhishDestroy has identified nelwork.xyz as a generic phishing domain with an elevated risk level. This domain was designed to deceive users into revealing sensitive information, though it does not impersonate a specific known brand. Its registration on February 21, 2026, and immediate takedown suggest a malicious intent.

Technical indicators reveal that nelwork.xyz resolves to IP address 194.67.71.90 and was registered through REGRU-RU. VirusTotal shows 3 out of 95 security vendors flagging this domain, and it appears on three security blocklists. The domain currently lacks an SSL certificate, and its page title, "Срок регистрации домена nelwork.xyz истёк" (Russian for "Domain registration expired"), indicates it was taken offline. These factors contribute to its elevated risk assessment.

Users who encountered this domain should avoid entering any personal information, as it was likely collecting credentials for phishing attacks. Since the domain is offline, no immediate action is required, but users should monitor accounts for suspicious activity and report any phishing attempts to relevant authorities. PhishDestroy recommends using strong, unique passwords and enabling two-factor authentication as preventive measures against such threats.