nexus-mods.biz
Category: Gaming
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of nexus-mods.biz
nexus-mods.biz appears to present itself as a gaming-related tools and mods portal branded as "Nexus Mods." Based on the homepage screenshot and scanned URLs, the site promotes downloadable tools for multiple games and references functions such as ESP, aimbot, triggerbot, radar tools, skin changers, spoofers, and other game modifications. The content appears aimed at players seeking cheats, mod menus, or gameplay-altering utilities rather than a conventional gaming news or community site.
The domain name and page design suggest an attempt to look like a polished software hub, with sections such as Home, Games, Catalog, How It Works, Features, and FAQ. However, the domain is very new and does not appear to have an established traffic ranking based on the provided data. No clear operator identity is visible in the scan details, so ownership and accountability are not readily verifiable from the available information.
Safety Assessment for nexus-mods.biz
This domain shows multiple risk indicators at the time of this scan. It was flagged by 19 out of 91 security engines, with several detections describing the site as phishing, malicious, suspicious, spam, or malware-related. In addition, one threat database listing was present, while major content-malice and phishing databases in the provided results were otherwise clean. The malware scan also marked a large number of internal pages as suspicious, although those findings did not include a named malware family and should be treated as lower-confidence on their own.
Context also raises concern. The site is only 80 days old, has no reported traffic ranking in the provided data, and promotes game-cheat style tools such as aimbots, spoofers, and skin changers. Websites in this niche can carry elevated risk because they may distribute unwanted software, credential theft lures, or misleading downloads. While a valid SSL certificate is present, that only indicates encrypted transport and does not by itself establish trustworthiness.
Based on the combination of multi-engine detections, a blacklist listing, the very recent registration date, and the nature of the content, this website may pose potential risks to visitors at the time of this scan.
Technical Description
The site is served through Cloudflare infrastructure and resolves to an IP address associated with Cloudflare in Toronto, Canada. It uses a valid SSL/TLS certificate issued by Google Trust Services, with the certificate shown as expiring on 2026-12-11. The web server is reported as Cloudflare, and the domain uses Cloudflare nameservers.
From a domain-security perspective, DNSSEC appears to be unsigned, which means DNS responses do not benefit from DNSSEC validation. The domain is also very newly registered, which can be a cautionary signal when combined with adverse reputation findings. No iframe-related issues were reported in the supplied scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?