cliclstartnow[.]xyz

The domain cliclstartnow.xyz was registered on 2026-04-09 through Namecheap and is currently hosted on Cloudflare infrastructure (IP 188.114.97.3, located in Canada). The authoritative nameservers are dexter.ns.cloudflare.com and lia.ns.cloudflare.com, and the site presents a valid SSL certificate issued by Google Trust Services under the WE1 designation. HTTP requests return status code 200 and the page title reported is “Olympus: Endgame”. VirusTotal analysis shows that 2 of 94 security vendors have flagged the domain, and it is listed on a single public blocklist. The domain is actively blocked by the PhishDestroy feed and received a Gridinsoft trust score of 0 out of 100. Intelligence classifies the activity as a high‑risk generic phishing operation with an investment‑scam focus. Analysis indicates that the infrastructure is typical of cloud‑based abuse, leveraging Cloudflare’s CDN to obscure the origin. The low vendor detection count suggests limited exposure in current scanning engines, but the presence on a dedicated phishing blocklist and the zero trust score highlight malicious intent. The exact content of the landing page beyond the title has not been captured, so the specific tactics used to lure victims remain unknown. Defenders should immediately add cliclstartnow.xyz to deny‑list rules, enforce DNS sinkholing, and monitor outbound connections to the associated IP address. Continuous re‑scanning with multiple AV engines is advised to detect any future payload changes. Network sensors should flag any HTTP 200 responses from this domain, and security teams should treat any communications referencing “Olympus: Endgame” as potentially malicious.