nexus-iota-five[.]vercel[.]app

This domain, nexus-iota-five.vercel.app, is flagged as a high-risk generic phishing site targeting business professionals under the guise of "Business Nexus - Connect Entrepreneurs." Analysis indicates no direct association with known brand impersonation or drainer kits, but the page structure and metadata suggest credential harvesting for unauthorized account access or financial fraud. The domain presents itself as a legitimate networking platform, increasing the likelihood of successful social engineering against entrepreneurs and corporate employees. Infrastructure analysis reveals the following technical indicators: the domain is registered through Tucows Domains Inc. with a creation date of February 21, 2026, though this appears to be a falsified or backdated record. It resolves to IP address 216.198.79.131, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by Google Trust Services (WR1), a common tactic to appear legitimate. VirusTotal detection shows 9/95 security vendors flagging the domain as malicious, while only one blocklist (PhishDestroy) currently lists it. Google Safe Browsing status remains unconfirmed but is likely unblocked given the low blocklist coverage. The domain remains active as of the latest verification, with no takedown or sinkholing observed. Response actions should include immediate blacklisting by enterprise security gateways, endpoint protection updates, and user awareness training emphasizing the risks of unsolicited business networking invitations. Despite the low blocklist count, the 9/95 VirusTotal detection rate and active hosting on cloud infrastructure indicate a persistent threat. Organizations are advised to monitor for credential reuse attempts from harvested data and implement multi-factor authentication to mitigate potential account takeovers.