ibinexus[.]gxnexus[.]com

The domain ibinexus.gxnexus.com was registered on 2026-02-21 through HOSTINGER operations, UAB and is hosted on the IP address 84.32.84.18, which belongs to AS47583 Hostinger International Limited located in Lithuania. DNS resolution uses the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. The site presents an HTTP 403 response and carries a Let's Encrypt R12 TLS certificate, indicating that encryption is in place but content is not publicly reachable. Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of confidence in legitimacy. The domain is currently listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that four of ninety‑three scanned engines flagged the domain, supporting the suspicion of malicious activity. The page title returned from the server is "Trusted Partner - iBi Nexus," suggesting an attempt to masquerade as a trusted partner of the iBi Nexus brand. No additional page content has been observed, and the exact phishing payload or credential‑harvesting mechanisms remain unknown. Defenders should add ibinexus.gxnexus.com to block lists, monitor DNS queries for the associated IP and nameservers, and enforce network‑level filtering of TLS connections to the domain. Continuous re‑evaluation is advised, as the active status and high risk rating indicate the campaign may evolve or expand its infrastructure.