domlexir[.]co[.]com

Analysis of the domain domlexir.co.com indicates it was registered on February 21, 2026, through Moniker Online Services LLC. As of July 25, 2026, the domain is offline, but prior activity classified it as a generic phishing threat. Infrastructure review shows it used nameservers ns1.nic.co.com, ns2.nic.co.com, ns3.nic.co.com, and ns4.nic.co.com, which are associated with the .co.com subdomain registry. The page title captured during active monitoring was identical to the domain name, offering no explicit indication of a targeted brand or service. Detection data reveals the domain appeared on one security blocklist and was flagged by PhishDestroy.

VirusTotal recorded a single detection from 93 security vendors, though this does not confirm widespread consensus. No additional context—such as hosting provider, IP address, or SSL certificate details—was available to further assess the infrastructure. The lack of brand-specific indicators or known phishing kit signatures suggests this was a broad, opportunistic campaign rather than a targeted impersonation. Defenders should treat this domain as a confirmed phishing resource, despite its current offline status.

Historical blocklist entries and detection records justify continued monitoring for potential reactivation. Network security teams are advised to review logs for connections to domlexir.co.com or its nameservers and apply appropriate blocking measures if the domain resurfaces. Given the absence of brand-specific evidence, generic phishing detection rules should be prioritized over brand-tailored protections for this infrastructure.