thesocialnexus[.]co[.]za

The domain thesocialnexus.co.za is currently classified as a generic phishing site and remains active as of the report date, July 23, 2026. Infrastructure analysis shows the domain resolves to the IPv4 address 192.185.25.212, which is hosted by Cherry On Top Hosting Solution. Registration data indicates the domain was created on July 24, 2025 and was registered through the same Cherry On Top Hosting Solution provider.

Both authoritative name servers, ns1.cherryontophosting.com and ns2.cherryontophosting.com, are under the same hosting umbrella, suggesting a single‑provider deployment. VirusTotal has recorded detections from two of ninety‑five scanning engines, confirming that at least a minority of security vendors have identified malicious characteristics associated with the domain. The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its malicious reputation.

No public information is available regarding SSL/TLS configuration, HTTP response codes, page title, or any observed brand impersonation, leaving those aspects of the threat surface unverified. Defenders should consider adding the domain and its resolving IP address to network‑level deny lists, monitoring for any outbound connections to the host, and ensuring that email filters reference the blocklist entries that already flag the domain. Continuous re‑evaluation is advised, as additional detection engines may flag the domain over time and further intelligence could emerge regarding the content served at the URL.