# nexonltd.com — SUSPICIOUS

> PhishDestroy identifies nexonltd.com as a generic phishing domain. SSL certified by Google Trust Services, yet VirusTotal shows 0/95 detections.

## Summary
PhishDestroy identifies nexonltd.com as an active generic phishing domain designed to deceive users into entering sensitive credentials or downloading malware. This domain resolves to IP 172.67.163.3 and was registered through NAMECHEAP INC on January 07, 2026. Despite its recent creation and the presence of a Google Trust Services SSL certificate, VirusTotal currently shows 0 out of 95 security engines detecting any malicious activity, highlighting a critical window of exposure for unsuspecting users.  The threat posed by nexonltd.com is generic phishing, meaning it likely mimics legitimate services (e.g., login portals, financial institutions, or gaming platforms) to trick users into revealing personal information such as usernames, passwords, or payment details. The domain’s recent registration and low detection rate suggest it may be part of a rapidly evolving campaign, leveraging newly created domains to evade early-stage blocklists. Users who encounter nexonltd.com should treat it as high-risk, as its lack of detections does not guarantee safety.  If you have visited nexonltd.com, cease all interactions immediately and scan your device for malware using reputable antivirus software. Avoid entering any credentials or downloading files from this domain. Report the domain to your cybersecurity team or platform provider (e.g., web browser, email provider) to help block future access. Monitor financial accounts and change passwords for affected services if you suspect exposure. PhishDestroy advises blocking 172.67.163.3 at the network level to prevent further access.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-07 13:03:43
- Registrar: NAMECHEAP INC
- IP: 172.67.163.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/3cc44833-cf8e-43e4-a227-f6798974584e
- PhishDestroy: https://phishdestroy.io/domain/nexonltd.com/
- LLM endpoint: https://phishdestroy.io/domain/nexonltd.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nexonltd.com/
Last updated: 2026-03-29