From https://www.onyphe.io/summary/ip/161.117.248.89
So many sites beginning NX*
nxfusion.com is exactly the same as ncixus.com
ncixus.com has an MX record , postmaster@ncixus.com anyone.
Edit: webmail.ncixus.com, webdisk.ncixus.com, cpcalendars.ncixus.com, cpanel.ncixus.com, cpcontacts.ncixus.com