nexusplainentry[.]xyz

Analysis as of July 25, 2026 indicates that nexusplainentry.xyz is currently taken offline. The domain was registered on February 21, 2026 and resolves to the IP address 104.21.33.13, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. The SSL certificate presented is identified as WE1, suggesting a standard TLS deployment without additional validation. VirusTotal has recorded detections from 13 of 93 scanned security vendors, confirming that multiple independent engines classify the site as malicious.

The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy filtering service. No additional public intelligence such as Safe Browsing, OTX, or registrar details were provided, and the page title or content has not been captured, leaving the exact phishing lure unknown. The combination of recent registration, Cloudflare hosting, a modest detection count, and inclusion on a blocklist aligns with typical infrastructure used for short‑lived phishing campaigns.

Defenders should ensure that outbound connections to 104.21.33.13 are denied or inspected, add nexusplainentry.xyz to DNS and URL filtering policies, and monitor for any future re‑registration of the domain or related subdomains. Continuous review of Cloudflare‑hosted IP ranges for anomalous traffic is advised, as threat actors frequently reuse such infrastructure. Given the elevated risk rating and existing vendor detections, the domain should be treated as hostile until a definitive remediation confirmation is received.