enroll-nexus[.]com

Analysis indicates that enroll-nexus.com was registered on June 07, 2026. Within a short interval it has already been flagged by multiple security services. VirusTotal reports that 5 of 91 scanned vendors classify the domain as malicious, suggesting that at least a subset of scanners detect known phishing indicators. The domain is presently listed on three public blocklists and is actively blocked by the PhishDestroy, MetaMask, and SEAL filtering platforms, reflecting consensus among anti‑phishing tools that the site is being used for illicit credential collection.

The threat classification in the provided intelligence is “generic phishing”, and the risk level is marked as elevated with an active status. No additional infrastructure details such as hosting IP, ASN, or SSL certificate information are available in the current dataset, so the broader hosting environment cannot be profiled at this time. Likewise, page‑level metadata such as title or brand targeting has not been disclosed, leaving the exact lure or impersonated service unknown.

The limited evidence set nevertheless supports immediate defensive measures: enterprises should add enroll‑nexus.com to web‑filter deny lists, ensure endpoint protection solutions ingest the blocklist entries, and monitor network traffic for any attempted connections to the domain. Continuous re‑scanning of the domain on multi‑engine platforms is advisable to capture any evolution in its malicious payloads. Analysts should also watch for related domains that share registration patterns or appear in the same blocklists, as threat actors often operate multiple drop sites in parallel.