# Phishing sites impersonating Nexo PhishDestroy has recorded 22 phishing domains impersonating Nexo since 2025-10-21, 4 of them in the last 30 days. The most used registrars are NICENIC and Cosmotown; the most common TLDs are .com and .net. Open Nexo only from its official app or a saved bookmark. 22Domains, all time 4Last 30 days 5Online at last check 1Confirmed takedowns ## New domains in the last 90 days 2102026-07-292026-09-122026-10-26 * Nexo phishing domains detected per day (domains per day, UTC): 8 from 2026-07-29 to 2026-10-26; peak 2 on 2026-09-11. * The last day is still in progress.Data tableNexo phishing domains detected per day, domains per day Date | Domains | 2026-07-29 | 0 | 2026-07-30 | 0 | 2026-07-31 | 0 | 2026-08-01 | 0 | 2026-08-02 | 0 | 2026-08-03 | 0 | 2026-08-04 | 0 | 2026-08-05 | 0 | 2026-08-06 | 0 | 2026-08-07 | 0 | 2026-08-08 | 0 | 2026-08-09 | 0 | 2026-08-10 | 0 | 2026-08-11 | 0 | 2026-08-12 | 0 | 2026-08-13 | 0 | 2026-08-14 | 0 | 2026-08-15 | 0 | 2026-08-16 | 0 | 2026-08-17 | 0 | 2026-08-18 | 0 | 2026-08-19 | 0 | 2026-08-20 | 0 | 2026-08-21 | 0 | 2026-08-22 | 0 | 2026-08-23 | 0 | 2026-08-24 | 0 | 2026-08-25 | 0 | 2026-08-26 | 0 | 2026-08-27 | 0 | 2026-08-28 | 0 | 2026-08-29 | 0 | 2026-08-30 | 0 | 2026-08-31 | 0 | 2026-09-01 | 0 | 2026-09-02 | 0 | 2026-09-03 | 0 | 2026-09-04 | 1 | 2026-09-05 | 0 | 2026-09-06 | 0 | 2026-09-07 | 0 | 2026-09-08 | 0 | 2026-09-09 | 0 | 2026-09-10 | 0 | 2026-09-11 | 2 | 2026-09-12 | 0 | 2026-09-13 | 0 | 2026-09-14 | 0 | 2026-09-15 | 0 | 2026-09-16 | 0 | 2026-09-17 | 0 | 2026-09-18 | 1 | 2026-09-19 | 0 | 2026-09-20 | 0 | 2026-09-21 | 0 | 2026-09-22 | 0 | 2026-09-23 | 0 | 2026-09-24 | 0 | 2026-09-25 | 0 | 2026-09-26 | 0 | 2026-09-27 | 0 | 2026-09-28 | 0 | 2026-09-29 | 1 | 2026-09-30 | 0 | 2026-10-01 | 0 | 2026-10-02 | 0 | 2026-10-03 | 0 | 2026-10-04 | 0 | 2026-10-05 | 0 | 2026-10-06 | 0 | 2026-10-07 | 0 | 2026-10-08 | 0 | 2026-10-09 | 1 | 2026-10-10 | 0 | 2026-10-11 | 0 | 2026-10-12 | 0 | 2026-10-13 | 0 | 2026-10-14 | 0 | 2026-10-15 | 0 | 2026-10-16 | 0 | 2026-10-17 | 0 | 2026-10-18 | 0 | 2026-10-19 | 0 | 2026-10-20 | 0 | 2026-10-21 | 0 | 2026-10-22 | 2 | 2026-10-23 | 0 | 2026-10-24 | 0 | 2026-10-25 | 0 | 2026-10-26 * | 0 | ## How to tell a fake Nexo site Words most often added to the brand in reported domains: access, chain, block, nexodesktop, claim, abc, nexovaltrion, valerza, drops, ngt. - Type the address yourself or use a bookmark; phishing links for Nexo arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Nexo will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Nexo phishing domains The 22 most recently detected domains impersonating Nexo Domain | First detected | Status at last check | Registrar | Listed because | [nexo-claim.top](https://phishdestroy.io/domain/nexo-claim.top/) | 2026-10-22 | Offline | NICENIC | Name imitates Nexo | [nexo-claim.sbs](https://phishdestroy.io/domain/nexo-claim.sbs/) | 2026-10-22 | Online | NICENIC | Name imitates Nexo | [nexotaxtranscript.com](https://phishdestroy.io/domain/nexotaxtranscript.com/) | 2026-10-09 | Online | NICENIC | Name imitates Nexo | [nexofinex.com](https://phishdestroy.io/domain/nexofinex.com/) | 2026-09-29 | Online | OrangeHost | Name imitates Nexo | [nexora-asset.org](https://phishdestroy.io/domain/nexora-asset.org/) | 2026-09-18 | Online | Dynadot | Name imitates Nexo | [nexoraxcapital.xyz](https://phishdestroy.io/domain/nexoraxcapital.xyz/) | 2026-09-11 | Offline | Cosmotown | Name imitates Nexo | [nexongs.com](https://phishdestroy.io/domain/nexongs.com/) | 2026-09-11 | Online | Cosmotown | Name imitates Nexo | [account.nexoglobalservice.com](https://phishdestroy.io/domain/account.nexoglobalservice.com/) | 2026-09-04 | Offline | Cosmotown | Name imitates Nexo | [web3nexo1.cc](https://phishdestroy.io/domain/web3nexo1.cc/) | 2026-07-27 | Offline | Dynadot | Name imitates Nexo | [nexodesktopwallet.com](https://phishdestroy.io/domain/nexodesktopwallet.com/) | 2026-06-12 | Unknown | NICENIC | Name imitates Nexo | [nexoacervolia.live](https://phishdestroy.io/domain/nexoacervolia.live/) | 2026-06-01 | Offline | NICENIC | Name imitates Nexo | [s1ngt3f.nex0grid.com](https://phishdestroy.io/domain/s1ngt3f.nex0grid.com/) | 2026-04-11 | Unknown | NICENIC | Page title names Nexo | [nexodesktop.io](https://phishdestroy.io/domain/nexodesktop.io/) | 2026-03-18 | Unknown | NICENIC | Name imitates Nexo | [nexo-block.com](https://phishdestroy.io/domain/nexo-block.com/) | 2026-03-07 | Unknown | NiceNIC | Name imitates Nexo | [nexodesktop.com](https://phishdestroy.io/domain/nexodesktop.com/) | 2026-02-23 | Unknown | NiceNIC | Name imitates Nexo | [access.block-nexo.io](https://phishdestroy.io/domain/access.block-nexo.io/) | 2026-02-23 | Offline | NiceNIC | Name imitates Nexo | [nexo-chain.com](https://phishdestroy.io/domain/nexo-chain.com/) | 2026-02-18 | Unknown | NiceNIC | Name imitates Nexo | [access.nexo-chain.com](https://phishdestroy.io/domain/access.nexo-chain.com/) | 2026-02-17 | Unknown | NiceNIC | Name imitates Nexo | [nexo-drops.com](https://phishdestroy.io/domain/nexo-drops.com/) | 2026-02-08 | Taken down | NiceNIC | Name imitates Nexo | [nexo-365valerza.net](https://phishdestroy.io/domain/nexo-365valerza.net/) | 2026-02-05 | Offline | PublicDomainRegistry.com | Name imitates Nexo | [nexovaltrion-ai.net](https://phishdestroy.io/domain/nexovaltrion-ai.net/) | 2026-01-31 | Offline | PublicDomainRegistry.com | Name imitates Nexo | [nexo.abc.br](https://phishdestroy.io/domain/nexo.abc.br/) | 2025-10-21 | Offline | SHINJIRU-MY (ASN: 45839) | Name imitates Nexo | How the 22 domains are attributed to Nexo: 21 (95%) imitate the name in the domain, 1 (5%) name Nexo in the stored page title and 0 (0%) carry only the stored brand label, which can be wrong. Open a report to see its evidence. [All 22 Nexo reports](https://phishdestroy.io/domain/?brand=Nexo) ## Where they are registered and hosted ### Registrars - [NICENIC](https://phishdestroy.io/registrar/nicenic/)13 - [Cosmotown](https://phishdestroy.io/registrar/cosmotown/)3 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)2 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)2 - SHINJIRU-MY (ASN: 45839)1 - [OrangeHost](https://phishdestroy.io/registrar/orangehost-llc/)1 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)11 - [.net](https://phishdestroy.io/tld/net/)2 - [.io](https://phishdestroy.io/tld/io/)2 - [.br](https://phishdestroy.io/tld/br/)1 - [.live](https://phishdestroy.io/tld/live/)1 - [.cc](https://phishdestroy.io/tld/cc/)1 - [.xyz](https://phishdestroy.io/tld/xyz/)1 - [.org](https://phishdestroy.io/tld/org/)1 ### Hosting networks - CLOUDFLARENET - Cloudflare, Inc., US5 - Cloudflare, Inc.5 - Amazon.com, Inc.3 - NEW DHAKA HARDWARE2 - SHINJIRU-MY-AS-AP Shinjiru Technology Sdn Bhd, M1 - Interserver, Inc1 - NEWDHAKAHARDWARE-AS-AP - NEW DHAKA HARDWARE, BD1 - PONYNET - FranTech Solutions, US1 ## Techniques seen in these reports - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/): 21 domains (95.5%) imitate the Nexo name in the domain. Counted from the stored classification and signals of each report; a domain can show more than one technique. ## Related - [Lookalike Domain Generator](https://phishdestroy.io/developer-tools/lookalike-generator) Checks a sign of typosquatting - [Crypto wallet drained? Emergency steps](https://phishdestroy.io/critical-action) If you already entered a seed phrase or signed a request - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) Report a fake Nexo site to its registrar and host Data: PhishDestroy domain-report database, built 2026-10-26. Counts cover every reported domain whose stored target brand is Nexo; share of all PhishDestroy reports: 0.01%. Canonical: https://phishdestroy.io/brand/nexo/