nexusmutual[.]hubs-beefy[.]lol

This domain, nexusmutual.hubs-beefy.lol, is identified as a high-risk credential theft threat. The domain mimics the legitimate Nexus Mutual website, which is a well-known platform in the DeFi and insurance sectors. Attackers are using this domain to trick users into revealing sensitive information such as login credentials, private keys, and other personal data.

Analysis indicates that the domain is flagged by 6 out of 95 security vendors on VirusTotal, suggesting that it has been recognized as malicious by a significant portion of the security community. The domain is registered through Dynadot LLC and was created on May 31, 2026. It appears on 1 security blocklist and is currently still active. The low blocklist count and the recent creation date indicate that the domain may be part of a new or ongoing campaign.

If users have visited this domain, they are strongly advised to change their Nexus Mutual account passwords and any other credentials that may have been entered on the site. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling two-factor authentication (2FA) for an added layer of security. Reporting the incident to Nexus Mutual's support team and any relevant security organizations is also recommended.