nexusgaming233-github-io[.]pages[.]dev

This domain, nexusgaming233-github-io.pages.dev, represents a high-risk credential harvesting operation targeting users of the Discord communication platform. Analysis indicates the domain impersonates legitimate Discord login interfaces under the pretext of a gaming service labeled "Nexus Rust," a tactic designed to deceive users into submitting account credentials, payment details, or other sensitive information. The infrastructure is structured to exploit trust in both the Discord brand and gaming-related offers, increasing the likelihood of successful compromise for users seeking access to exclusive content or communities. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on September 2, 2020, and resolves to the IP address 172.66.44.205, hosted within Cloudflare’s AS13335 network in the United States. Detection metrics from security vendors indicate significant malicious classification, with 12 out of 95 engines on VirusTotal flagging the domain as phishing or fraudulent. Additionally, the domain appears on three distinct security blocklists, including entries from domain reputation and phishing detection systems. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the underlying threat, as encrypted connections are commonly exploited in phishing to lend false legitimacy to malicious sites. Users who visited nexusgaming233-github-io.pages.dev should immediately revoke any entered credentials, particularly for Discord and associated accounts. Password resets should be performed from official platforms, and multi-factor authentication should be enabled where available. System scans using updated security tools are recommended to detect potential secondary infections. If financial or personal data was submitted, affected parties should monitor accounts for unauthorized activity and report incidents to relevant fraud response authorities. The domain is currently offline, but similar threats may persist under alternate infrastructure; vigilance is advised when interacting with unsolicited links or offers.