nevorixqaltrume[.]com

This domain, nevorixqaltrume.com, is identified as a generic phishing site currently active and targeting individuals seeking financial literacy resources. Analysis indicates the domain is designed to mimic legitimate financial education platforms, potentially harvesting sensitive user data or distributing fraudulent investment schemes under the guise of market insights and financial guidance. No direct brand impersonation is confirmed, but the thematic focus on "Finanční gramotnost a přehled trhu" suggests an intent to exploit trust in financial advisory content. Infrastructure analysis reveals the domain was registered on June 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.38.9, which is part of a network hosting multiple suspicious domains. VirusTotal detection metrics show 2 of 95 security vendors have flagged this domain as malicious, a low but notable indicator given the domain's recent registration. The page title, "Nevorix Qaltrume | Finanční gramotnost a přehled trhu," aligns with phishing tactics that leverage localized content to appear credible to specific regional audiences. Current status remains active, with no confirmed takedown or sinkholing. Organizations and individuals are advised to block this domain at the network level and include it in endpoint protection rules. Users encountering this domain should avoid inputting any personal or financial information, as the site is likely engineered for credential theft or financial fraud. Security teams are recommended to monitor associated IP ranges and registrar activity for related threats, given the domain's high-risk infrastructure and thematic targeting of financial topics.