nexusportal[.]vip

The domain nexusportal.vip has been categorized as an elevated risk, specifically associated with credential theft. This categorization indicates a significant threat level based on multiple security analyses and vendor reports.

The domain was created on February 24, 2026, and it resolves to an IP address of 45.93.8.168. It is registered through NiceNIC International Group Co., Limited. Current intelligence shows that it appears on one security blocklist and has garnered a trust score of 0/100 from Gridinsoft. Furthermore, it is flagged by 5 out of 95 security vendors on VirusTotal, confirming its malicious nature. The domain has been taken offline and was noted for utilizing an SSL certificate from Let's Encrypt, with technologies such as Ubuntu and Nginx detected on the site.

To mitigate the risks associated with this credential theft threat, organizations should enhance their monitoring of related domains and utilize security tools designed to flag and block known phishing infrastructures. Users must be educated on recognizing phishing attempts, employing multi-factor authentication to protect sensitive information, and promptly reporting any suspicious activities they encounter online.