# www.nexusflare.live — SUSPICIOUS

> Malicious domain nexusflare.live hosts a phishing login page. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies nexusflare.live as an active phishing site impersonating a login portal to steal credentials. This domain resolves to IP 64.29.17.1 and uses a Let’s Encrypt SSL certificate to appear legitimate. Threat actors are actively using it to harvest usernames and passwords under the guise of a secure service. Do not enter any login details on this site; assume all input is compromised.

This domain was flagged on VirusTotal with zero detections out of 95 engines as of the latest scan, indicating it remains undetected by most antivirus tools. The domain is registered through a privacy-protected registrar and was recently created, suggesting it is part of a fast-moving campaign designed to evade detection. The lack of signatures highlights the need for behavioral monitoring and proactive threat hunting rather than relying solely on antivirus engines.

If you visited nexusflare.live and entered any credentials or personal information, immediately change your passwords on all accounts using a different device or network. Enable multi-factor authentication where possible and scan your system for malware. Report the incident to your IT team or platform provider and monitor accounts for unauthorized access. Avoid reusing passwords across services to limit exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 64.29.17.1

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/www.nexusflare.live
- PhishDestroy: https://phishdestroy.io/domain/www.nexusflare.live/
- LLM endpoint: https://phishdestroy.io/domain/www.nexusflare.live/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.nexusflare.live/
Last updated: 2026-04-05