netomex[.]com

Analysis of netomex.com, created on February 21, 2026 and registered through Hello Internet Corp, shows that the domain is currently offline but was previously flagged for brand impersonation of x.com and classified as a crypto scam. The domain resolves to IP address 188.114.97.3, which is hosted by Cloudflare (AS13335) in the United States and is served by the Cloudflare nameservers kareem.ns.cloudflare.com and poppy.ns.cloudflare.com. No SSL certificate was observed for the site, indicating that communications would have been unencrypted if the site were active.

Reputation checks reveal a Gridinsoft trust score of 0 out of 100 and the domain appears on a single security blocklist, having been blocked by PhishDestroy. VirusTotal scans reported 16 detections out of 95 security vendors, confirming that multiple analysis engines consider the domain malicious. The page title returned by the server is simply "netomex.com," providing no additional context about the content.

While the offline status limits immediate threat exposure, the combination of a low trust score, multiple vendor detections, and the explicit classification as a crypto scam suggests a high likelihood of malicious intent. Defenders should continue to block the domain and its associated IP address at perimeter firewalls and DNS filtering layers, monitor for any re‑activation or related domains registered by the same registrar, and consider adding the IP to threat‑intel feeds. Because no SSL, content, or detailed landing‑page information is available, further investigation would be required if the site becomes active again to confirm the exact phishing mechanisms employed.