register-elixir[.]co

The domain register-elixir.co was created on July 30, 2024 and is presently taken offline. Technical analysis shows it resolves to the IP address 198.18.0.186 and lacks an SSL certificate, indicating that any data exchanged would be unencrypted. The registrar listed is OwnRegistrar, Inc., while the authoritative name servers include jeff.ns.cloudflare.com, journey.ns.cloudflare.com, ns1.parkco2.neustar.biz, and ns2.par, suggesting a mixed infrastructure that may leverage both Cloudflare and Neustar services. Trust scoring from Gridinsoft assigns a zero out of one hundred, reflecting a complete lack of reputational confidence.

The domain is currently blocked by three independent anti‑phishing services—PhishDestroy, ScamSniffer, and Enkrypt—and appears on three public security blocklists. VirusTotal reports that eleven of ninety‑five scanned security vendors flagged the domain, reinforcing the presence of malicious indicators. Despite the offline status, the combination of zero trust score, multiple blocklist entries, and vendor detections classifies the domain as a high‑risk phishing vector.

Defenders should continue to deny DNS resolution for register-elixir.co, enforce outbound filtering of traffic to its associated IP address, and ensure that any residual references in email or web content are quarantined. Ongoing monitoring of the IP space and name server configuration is advisable, as threat actors may repurpose the domain or associated infrastructure for future campaigns. Updating internal threat intelligence feeds with the observed indicators will aid in rapid detection of related activity.