nexwald-nexus-app[.]net

This domain, nexwald-nexus-app.net, is identified as a brand impersonation threat targeting the 'across' brand. Analysis confirms the domain is currently offline, though it previously hosted deceptive content designed to mislead users into believing it was an official platform. The page title, 'Nexwald Nexus App ™ | The Official Site 【UPDATED 2025】,' explicitly mimics legitimate branding to enhance credibility and lure victims. Infrastructure analysis reveals the domain was registered on April 22, 2025, through MainReg INC. and lacks an SSL certificate, a common red flag for fraudulent sites. It resolves to the IP address 91.236.116.114, located in Sweden under AS42237 (w1n ltd). Security vendors flagged the domain in 19 of 95 VirusTotal scans, and it appears on one security blocklist. The absence of encryption, combined with its recent creation and hosting on a high-risk autonomous system, further corroborates its malicious intent. Given its current offline status, the domain poses a reduced immediate threat, but its infrastructure remains a potential risk for future abuse. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for re-registration or re-emergence under similar naming conventions. End users who may have interacted with the domain should verify account integrity and reset credentials for any associated services, particularly those linked to the 'across' brand.