stocknexusglobal[.]sbs

stocknexusglobal.sbs is an active domain observed in phishing infrastructure. The domain was registered on June 22, 2026 through Dynadot Inc, using horizon.dns-parking.com and orbit.dns-parking.com as nameservers. DNS resolution points to IP 145.79.210.143. The IP address is currently listed on at least one security blocklist and the domain itself appears on a blocklist, being blocked by PhishDestroy. VirusTotal analysis shows that 13 of 91 security vendors have flagged the domain as malicious, indicating a moderate consensus of malicious intent.

The domain is still active as of the report date, July 27, 2026. The limited public data does not include a page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts, so the exact content served by the site remains unverified. However, the combination of recent registration, use of parking nameservers, association with a known blocklist, and multiple vendor detections strongly suggests the domain is being used for generic phishing campaigns. The presence of the domain on PhishDestroy’s blocklist further corroborates this classification. Defenders should add 145.79.210.143 to network‑level deny lists and block any DNS queries for stocknexusglobal.sbs at the perimeter.

Email security gateways should treat messages containing URLs to this domain as malicious and quarantine them. Continuous monitoring of VirusTotal and other reputation services for changes in detection count is recommended. Because the hosting provider and registrar are publicly known, takedown requests can be directed to Dynadot Inc. and the hosting operator responsible for the IP address. Organizations should also share this indicator of compromise with threat‑sharing communities to improve collective detection.