nexusgaming[.]site
“NEXUS – Deine Gaming Plattform”
nexusgaming.site — 未验证. 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 81/100. 注册商: NameCheap.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, nexusgaming.site, is currently active and serves an HTTP 200 response with the page title “NEXUS – Deine Gaming Plattform”. The site is hosted on IP address 185.199.110.153, which is owned by GitHub, Inc. in the United States, suggesting the use of GitHub Pages or other GitHub‑provided hosting. Registration was performed through NameCheap, Inc., and the domain is delegated to the public nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. TLS is provided by a valid Let’s Encrypt certificate, indicating that encrypted connections are accepted without certificate warnings.
Reputation checks show the domain appears on one security blocklist and is listed by PhishDestroy as a confirmed phishing source. VirusTotal scans report that three of ninety‑one antivirus or URL‑reputation engines flagged the domain, providing additional corroboration of malicious activity. No further detail about the payload, credential‑harvesting form, or targeted brand is available from the supplied intelligence; the page title is the only content observed. Given the combination of blocklist inclusion, multiple vendor detections, and the use of a trusted SSL certificate to disguise malicious intent, defenders should treat nexusgaming.site as high‑risk.
Recommended mitigations include adding the domain to web‑filter deny lists, configuring DNS sink‑hole rules, and monitoring outbound traffic for connections to the 185.199.110.153 address. Incident response teams should also collect HTTP request/response logs for any user interactions with the site to aid future attribution. Continuous re‑evaluation is advised, as additional indicators may emerge if the site begins serving phishing pages or credential‑stealing forms.
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。