nevolquerci[.]org

The domain nevolquerci.org is a confirmed phishing site engaged in brand impersonation targeting Amazon. It presented itself as an ecommerce scam, luring victims with fraudulent offers rather than deploying a cryptocurrency drainer kit. As of the latest verification, nevolquerci.org has been taken offline, though it previously posed an elevated risk to users who may have interacted with it.

Technical indicators show nevolquerci.org was detected by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. Google Safe Browsing did not flag the domain, but it appeared on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on March 15, 2025, and resolved to the IP address 66.29.132.181, hosted on AS22612 (Namecheap, Inc.) in the US. The SSL certificate was issued by Sectigo RSA Domain Validation Secure Server CA. The observed page title, 'MAXWIN5000 Link Website Gacor Paling Populer Hari Ini 2025,' did not align with Amazon's legitimate branding, further confirming its fraudulent nature.

Users who visited nevolquerci.org should immediately change any passwords entered on the site, particularly for Amazon or linked accounts, and enable two-factor authentication. Monitor financial statements for unauthorized transactions and report suspected fraud to Amazon's official security team. The domain can also be reported to PhishDestroy and other anti-phishing organizations to aid in takedown efforts.