nexarollin[.]world

This report details the threat posed by the domain nexarollin.world. The site presented itself as "Shade Network — The Private Execution Layer" and was engaged in a social media scam. The primary threat was the impersonation of the Discord brand, designed to deceive users into believing they were interacting with a legitimate Discord-related service, likely to harvest credentials or distribute malware.

Technical evidence confirms the malicious nature of the domain. VirusTotal flagged the site with 6 detections out of 95 security vendors. The domain was registered through NameCheap, Inc. and hosted on IP address 104.21.84.169, which is associated with AS13335 Cloudflare, Inc. in the United States. The domain was created on 2025-07-04 and used an SSL certificate from Google Trust Services / WE1. The site was flagged by security vendors including ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, and SOCRadar, and appeared on 3 blocklists.

The domain nexarollin.world is currently offline/down. The risk level is assessed as very high, supported by a DOM risk score of 10 and a GridinSoft trust rating of 0 out of 100. Users who may have interacted with the site while it was active should take precautionary measures, such as changing passwords and monitoring for unauthorized account activity.