nx[.]strengthoa[.]com

The domain nx.strengthoa.com has been identified as a generic phishing site, specifically a fake login page, and is currently offline. This domain was registered through IONOS SE on May 07, 2026, and has been associated with elevated risk levels.

Infrastructure analysis reveals that the domain nx.strengthoa.com resolves to the IP address 87.106.100.91. It appears on one security blocklist and has been flagged by 18 out of 95 security vendors on VirusTotal. The domain's creation date on May 07, 2026, indicates a relatively recent registration, which can be a common tactic used by phishing actors to evade detection. The registrar, IONOS SE, is a known entity, but the association with a phishing site suggests that the domain was likely registered using compromised or fraudulent credentials. The low detection count on VirusTotal (18/95) suggests that the domain may have been part of a targeted campaign, potentially evading broader detection mechanisms.

Currently, the domain nx.strengthoa.com is taken offline and blocked by PhishDestroy. Despite this, the risk level remains elevated due to the nature of the threat and the potential for the domain to be reactivated. Security professionals and organizations are advised to monitor for any signs of the domain becoming active again and to implement additional security measures such as DNS filtering and user education on recognizing phishing attempts. Users should avoid clicking on links from unknown sources and verify the legitimacy of login pages through official channels.