The domain nexuscox.com was registered on 24 July 2026 through NameSilo, LLC and is served by the Cloudflare authoritative nameservers becky.ns.cloudflare.com and conrad.ns.cloudflare.com. DNS resolution points to the IPv4 address 45.135.237.216, which is the sole host observed for this indicator. The site presents a valid Let’s Encrypt certificate with a one‑year renewal period (YR1), confirming that TLS negotiation succeeds for clients that accept standard CA roots. Threat intelligence sources have added nexuscox.com to three public blocklists and it is currently listed by the PhishDestroy, MetaMask, and SEAL filtering services.
VirusTotal analysis shows that two out of ninety‑one scanned scanners flagged the domain, indicating that at least a minority of security engines consider the site malicious. No additional public reputation scores, Safe Browsing verdicts, or Open Threat Exchange (OTX) entries are available for this domain at the time of writing. Because the available data does not include a page title, content snapshot, or observed credential‑stealing payload, the exact phishing lure remains undefined beyond the generic classification.
Consequently, defenders should treat the domain as high‑risk based on its recent creation, active hosting, TLS availability, and inclusion on multiple blocklists. Recommended mitigation steps include adding the domain and its resolving IP address to network deny lists, configuring web proxies to block any HTTP(S) requests to nexuscox.com, and monitoring DNS logs for outbound queries to the associated Cloudflare nameservers. Continuous re‑evaluation is advised as additional telemetry—such as malware sandbox reports or user‑reported incidents—becomes available.