nexholdra[.]ink

Analysis of the domain nexholdra.ink shows that it was registered on 21 February 2026 through Spaceship, Inc. and is currently listed as offline. The only visible artifact is the page title “Plesk Obsidian 18.0.76”, which indicates the underlying hosting control panel but provides no indication of a targeted brand. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy service, confirming its use in a phishing campaign. VirusTotal records show that 1 of 93 scanning engines flagged the site, and Gridinsoft assigns a trust score of 0 / 100, both suggesting malicious intent despite the low detection count.

Nameserver resolution points to launch1.spaceship.net and launch2.spaceship.net, both belonging to the registrar’s infrastructure. No public IP, SSL certificate, or additional content information is available, leaving the exact hosting location and payload unknown. Given the limited but consistent indicators—recent registration, blocklist presence, low trust score, and the Plesk title—defenders should treat the domain as a confirmed phishing source.

Recommended actions include adding nexholdra.ink to local and network‑level blocklists, updating email security gateways to quarantine messages containing URLs to the domain, and monitoring for any future DNS resolution changes that could signal re‑activation. Continuous verification with VirusTotal and other multi‑engine scanners is advised to capture any new detections. Logging of any outbound connections to the domain should be enabled to detect potential attempts to reach the site if it becomes active again.