nexus[.]yoyocode[.]agency

The domain nexus.yoyocode.agency is a generic phishing site that does not impersonate any known brand or use a drainer kit. It poses an elevated risk by attempting to harvest user credentials or other sensitive information through deceptive means. As of the latest verification, nexus.yoyocode.agency has been taken offline, though prior activity may still pose a residual threat to users who interacted with it.

Technical indicators confirm the domain's malicious nature. nexus.yoyocode.agency was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through OVH SAS on February 21, 2026, and resolved to the IP address 185.199.111.153, hosted by Fastly, Inc. in the US. The SSL certificate was issued by Let's Encrypt (R13), and the observed page title was 'NEXUS - L'Avenir de la Data'. Technologies detected on the site included Three.js, Varnish, Tailwind CSS, GitHub Pages, Cloudflare, Unpkg, HSTS, and Fastly. Google Safe Browsing did not flag the domain at the time of analysis.

Users who may have interacted with nexus.yoyocode.agency should take immediate safety steps. If credentials were entered, change passwords for all potentially affected accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions or relevant service providers. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Victims can also file complaints with local cybercrime authorities or consumer protection agencies.