nexusxz[.]top

Analysis of the domain nexusxz.top shows it was registered through NameSilo, LLC on 20 July 2026 and is currently active. The authoritative name servers becky.ns.cloudflare.com and conrad.ns.cloudflare.com resolve the domain to the single IPv4 address 45.135.237.216, a Cloudflare‑hosted endpoint that is frequently used by malicious actors to hide infrastructure. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing service has observed abusive activity associated with the host.

VirusTotal records demonstrate that the domain was submitted to 91 scanning engines; none reported a detection, but the absence of a positive result does not constitute a safety guarantee. No public page title, SSL certificate details, or HTTP response codes have been disclosed, so the surface‑web characteristics remain unknown. The limited intelligence suggests a generic credential‑stealing phishing operation, consistent with the “generic phishing” classification supplied in the source data.

Uncertainty remains regarding the specific lures, victim geography, and any payload delivered after credential capture. Defenders should add nexusxz.top to inbound and outbound web filtering rules, monitor DNS queries for the associated IP address, and enforce strict email authentication checks to reduce the likelihood of successful phishing delivery. Continuous re‑inspection of the domain on sandbox and URL‑reputation services is advised, as threat actors may later attach malicious payloads or alter the site’s behavior.