Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 8. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

nexus-help[.]online

“nexus-help.online”

Threat verdict Critical 78/100 evidence score
Availability Server error The latest stored response was inconclusive
VirusTotal detections: 8/95 Scam type: Generic Phishing
Dec 3, 2025

Evidence Summary

CRITICAL
Evidence score
78/100

This domain, nexus-help.online, is flagged as a phishing site designed to impersonate legitimate support portals. Visitors may encounter fake login forms, fraudulent customer service chats, or requests for sensitive information under the guise of technical assistance. Such sites often harvest credentials, payment details, or personal data for malicious use, including account takeovers or financial fraud. The threat is particularly dangerous for users seeking help with software, accounts, or services, as the domain mimics trusted support channels to lower victim defenses. Analysis indicates nexus-help.online was registered on December 02, 2025, through Dynadot LLC, a registrar frequently used for short-lived phishing domains. The domain resolves to IP address 199.59.243.228, which has been associated with other malicious infrastructure. Security vendors have flagged this domain in 4 out of 95 detection engines, and it appears on at least one security blocklist. The combination of recent registration, low trust scores (0/100), and active detections confirms its role in phishing campaigns targeting unsuspecting users. If you visited nexus-help.online or entered any information on the site, immediate action is required. Disconnect the device from the network to prevent potential data exfiltration. Run a full scan using updated security software to detect and remove any malware. Change passwords for all accounts accessed from the compromised device, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication where available. Monitor accounts for unauthorized activity and report the incident to relevant fraud teams. Avoid clicking on links or downloading attachments from suspicious sources to prevent further exposure.

VirusTotal
VirusTotal
8 det.
Age
8 mo
Observed status
Server error HTTP 502
PhishDestroy
DestroyList
Listed

Data Coverage

VirusTotal 8 / 95 URLQuery report stored — detailed verdict pending PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS no certificate data WHOIS 8 mo old Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
9/11

Blocklist coverage

10 monitored external feeds · stored snapshot Aug 12, 2026

10 monitored external feeds No match

Detection timeline

  1. Domain status

    Reachable → Unreachable

  2. Cloudflare Radar

    Cloudflare Radar scan stored · Open scan

  3. VirusTotal

    8 → 4

  4. Domain status

    Unreachable → Reachable

Stored Capture

Page Title
nexus-help.online

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN nginx · AS16509 AMAZON-02, US
IP Reputation IP abuse confidence 0/100 0 reports checked Jul 28, 2026
Registrar Dynadot US(US)
IP Address 199.59.243.228 US
GeoUS Tampa, US
NetworkAS16509 · Amazon.com, Inc.
RegistrationCreated Dec 2, 2025 (252d)
HTTP Status502 Error
Elapsed Since First Report 90 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Server error.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, TLS names and timestamps
First DetectedDec 3, 2025
DOM Analysisanalyzed Apr 23, 2026DOM analysis score 78/100
Submitted URLhttp://nexus-help.online/
Nameserversns1.dyna-ns.netns2.dyna-ns.net
TLS observationscanned Aug 12, 2026
ICANN OVERSIGHT

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

8 / 95 security vendors flagged this domain
View on VT
Last analyzed
ChainPatrol
alphaMountain.ai
CRDF
CyRadar
Forcepoint ThreatSeeker
Gridinsoft
Seclookup
SOCRadar

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing

External tools

HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/nexus-help.online"
  title="PhishDestroy threat report for nexus-help.online"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.