chat[.]deliverynexus[.]com[.]br

The domain chat.deliverynexus.com.br was a phishing site operating as a delivery scam, designed to deceive victims into believing they were interacting with a legitimate parcel or logistics service. No specific brand was impersonated, and no crypto drainer kit was identified. The site has since been taken offline, but it previously posed an elevated risk to users by attempting to extract personal or financial information under false pretenses.

Technical analysis of chat.deliverynexus.com.br revealed multiple indicators of malicious activity. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ChainPatrol, alphaMountain.ai, and SOCRadar. Google Safe Browsing classified it as a phishing threat under the 'SOCIAL_ENGINEERING' category. It appeared on one security blocklist, PhishDestroy, and had a Gridinsoft trust score of 0 out of 100. The domain was registered through HSTDOMAINS on October 27, 2025, and resolved to the IP address 147.93.182.78, hosted by Contabo Inc. in the US (AS40021). No SSL certificate was present, and the observed page title was 'Chatwoot'.

Users who interacted with chat.deliverynexus.com.br should take immediate steps to secure their accounts. If personal or financial information was entered, change passwords for any affected services and enable two-factor authentication. Monitor bank statements and credit reports for unauthorized transactions. Report the phishing domain to local cybercrime authorities and platforms like Google Safe Browsing or the Anti-Phishing Working Group to aid in takedown efforts. Victims may also submit complaints to consumer protection agencies such as the FTC or their regional equivalent.