# nxuqmp.pages.dev — SUSPICIOUS

> nxuqmp.pages.dev hosts a credential harvesting scam mimicking login portals. VirusTotal shows 0/95 detections. Check the full report.

## Summary
The domain nxuqmp.pages.dev poses a risk by impersonating legitimate login pages to steal user credentials. This type of phishing threat attempts to deceive visitors into entering sensitive information such as usernames and passwords, which can then be exploited for unauthorized access to personal or financial accounts. Users encountering this site should be cautious as it is designed to look convincing but aims to compromise their security.

PhishDestroy's analysis found that nxuqmp.pages.dev currently has 0 out of 95 detections on VirusTotal, indicating that automated scanners have not yet flagged it, which can sometimes happen with newly created or cleverly disguised phishing pages. The domain resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, adding a layer of apparent legitimacy to the site’s presentation. It is registered through Cloudflare, Inc., a common registrar and hosting provider for such pages. Given these factors, the site remains under investigation but is active and likely to be malicious.

If you have visited nxuqmp.pages.dev and entered any personal information, immediately change your passwords on the affected accounts and enable multifactor authentication where available. Monitor your accounts closely for any suspicious activity or unauthorized transactions. Avoid revisiting the domain and do not download any files or provide further information. Reporting the site to your organization’s security team or a relevant authority can help prevent others from falling victim to this scam. Always verify website URLs carefully before entering sensitive data, especially on sites that request login credentials.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/nxuqmp.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/nxuqmp.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/nxuqmp.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nxuqmp.pages.dev/
Last updated: 2026-04-03