# nexapay.one — SUSPICIOUS > nexapay.one is a confirmed phishing domain detected by PhishDestroy. Multiple security vendors have flagged this domain. Our analysis includes WHOIS records, SSL data, and blocklist cross-referencing. ## Summary Threat Overview The domain nexapay.one has been flagged as a phishing threat. PhishDestroy's automated scanning systems detected multiple risk indicators associated with this domain. Detection Details This domain was identified through a combination of automated analysis, community reports, and cross-referencing with global threat intelligence feeds including VirusTotal, Google Safe Browsing, and 50+ specialized blocklists. Risk Indicators - Domain registered on one TLD - Domain length: 11 characters - Vt Detected Stay Safe Always verify URLs before entering credentials. Use a password manager to avoid typing passwords on fake sites. Enable two-factor authentication wherever possible. ## Threat Details - Verdict: SUSPICIOUS - Site status: dead (HTTP 0) - Page title: nexapay.one ## Domain Intelligence - Registered: 2026-03-12 03:07:01 - Registrar: Name.com, Inc. - Country: US - IP: 104.21.86.230 - IP Country: US - IP City: San Francisco - IP Org: AS13335 Cloudflare, Inc. - Nameservers: ["hassan.ns.cloudflare.com", "coraline.ns.cloudflare.com"] - SSL Issuer: Google Trust Services / WE1 ## Detection Status - VirusTotal: 2 vendors flagged Vendors: ["Gridinsoft", "SOCRadar"] - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["PhishDestroy"] ## Evidence - Screenshot: https://urlscan.io/screenshots/019ce201-9f68-7218-9cbb-3432300f79fe.png - PhishDestroy: https://phishdestroy.io/domain/nexapay.one/ - LLM endpoint: https://phishdestroy.io/domain/nexapay.one/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/nexapay.one/ Last updated: 2026-03-19