netxworld[.]online

Analysis of www.netxworld.online as of July 24 2026 indicates a high‑risk generic phishing campaign. The domain was registered through NameCheap, Inc. on February 21 2026 and is hosted behind Cloudflare’s network (AS13335, United States). DNS resolution points to IP 188.114.96.3, and the authoritative nameservers are hazel.ns.cloudflare.com and javier.ns.cloudflare.com. HTTP requests receive a 301 redirect response, and the site presents an SSL certificate issued by Let’s Encrypt (certificate identifier E7), confirming encrypted transport. Automated scanning on VirusTotal recorded a single positive detection out of 95 security vendors, and the domain appears on one external blocklist, where it is also listed by PhishDestroy.

The page title returned from the live endpoint is “Home | NetX”, but no further content analysis is available. Detected server technologies include Cloudflare’s edge services and HTTP/3 support. The presence of a valid TLS certificate and Cloudflare’s CDN does not mitigate the phishing risk; instead, they can be leveraged to increase credibility. The single vendor flag and blocklist entry suggest that at least one security product has identified malicious behavior, but the low detection count leaves uncertainty about the breadth of the payload or victim targeting. No additional intelligence such as malware hashes, command‑and‑control infrastructure, or phishing page screenshots is currently available.

Defenders should block outbound connections to 188.114.96.3 at the network perimeter, add www.netxworld.online to URL filtering and email phishing protection lists, and monitor DNS queries for the domain and its nameservers. Continuous re‑scanning on multi‑engine services is recommended to capture any escalation in detection counts. Organizations using Let’s Encrypt certificates should not assume safety based on issuance alone, and any credential‑capture attempts that reference “NetX” should be treated as suspicious.