neronix560profit[.]com

neronix560profit.com was registered on February 21, 2026 through Name SRS AB and is currently taken offline. The domain resolves to the Cloudflare IP address 188.114.97.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. DNS resolution uses the Cloudflare authoritative nameservers amir.ns.cloudflare.com and marlowe.ns.cloudflare.com. No TLS certificate is presented, indicating that the site operated without HTTPS encryption. The page title observed in prior crawls – “Neronix +560 Profit - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni” – aligns with the declared scam type of an investment scam and suggests an attempt to lure victims with promised high returns.

The domain is listed as impersonating the brand “base”, although the exact brand context is limited to the intelligence record. Detection signals show that the domain appears on one security blocklist and has been referenced in a single AlienVault OTX pulse. VirusTotal recorded detections from two of ninety‑three scanning engines, and the site is blocked by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high confidence in malicious intent. The low detection count on VirusTotal does not imply safety; rather, it is consistent with a short‑lived or recently taken‑down payload.

Current uncertainties include the exact content that was served before the takedown, the presence of any credential‑stealing forms, and whether additional infrastructure (e.g., command‑and‑control servers) was associated with the domain. No SSL certificate and the use of Cloudflare’s generic nameservers limit attribution beyond the registrar and hosting provider. Defenders should continue to block neronix560profit.com at perimeter filters, update any URL‑allowance lists, and monitor for related domains registered through Name SRS AB that resolve to the same Cloudflare IP range.