world-nest[.]xyz

Analysis of world-nest.xyz shows that the domain was registered on 20 May 2026 through OwnRegistrar, Inc. and resolves to the IP address 163.61.188.108. Authoritative nameservers are ns1.globaldnsnetwork.com and ns2.globaldnsnetwork.com, indicating reliance on a public DNS provider. The domain is listed on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that at least one industry‑wide sinkhole treats it as malicious.

VirusTotal has processed the domain and three of ninety‑one scanning engines returned a positive detection, which aligns with the generic phishing classification. No public information on SSL certificates, HTTP status codes, page titles, or content has been disclosed, so the exact landing page and any targeted brand remain unknown. The short lifespan of the domain—registered less than three months before the report date—and its rapid appearance on a blocklist suggest a purpose‑built infrastructure for credential‑harvesting campaigns.

Defenders should monitor DNS queries for world-nest.xyz and its associated IP, enforce outbound filtering to block connections to 163.61.188.108, and ensure email security gateways reference the blocklist entry and PhishDestroy feed. Because the underlying payload and targeted brand have not been publicly observed, further sandbox analysis of any URLs or files that resolve to the domain is recommended to capture the phishing landing page and any subsequent malicious components.