en[.]nexusfreights[.]com

The domain en.nexusfreights.com was identified as a generic phishing site posing no specific brand impersonation or crypto drainer activity. It operated as a broad credential-harvesting page, targeting users through deceptive login or information submission forms. As of the latest verification, en.nexusfreights.com has been taken offline, though its prior activity remains a potential risk for those who interacted with it.

Technical indicators for en.nexusfreights.com include 0 of 95 VirusTotal vendors flagging the domain, while Google Safe Browsing has not issued any warnings. The domain appears on 1 security blocklist (PhishDestroy) and was registered through Dynadot LLC on June 11, 2025. It resolved to the IP address 192.3.141.252, hosted by AS36352 (HostPapa) in the US, with SSL certification issued by Let's Encrypt (YR1). The observed page title was 'Home - nexusfreights', and nameservers were ns1.serverdns.org and ns2.serverdns.org. Gridinsoft assigned a trust score of 0/100, reinforcing its suspicious nature.

Users who entered credentials on en.nexusfreights.com should immediately change passwords for any accounts accessed or submitted, prioritizing email, financial, and work-related logins. Enable two-factor authentication (2FA) where available to mitigate unauthorized access. Monitor accounts for unusual activity, such as unauthorized transactions or login attempts. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader takedown efforts. If financial or personal data was exposed, consider placing a fraud alert with credit bureaus.