nexus-market-online[.]com

Analysis indicates an elevated risk level for nexus-market-online.com, specifically a fake login phishing threat. The domain has been taken offline, but its historical data reveals significant red flags that warrant attention. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on March 27, 2026. It resolves to the IP address 172.67.137.246. VirusTotal reports that 4 out of 95 security vendors flag this domain, and it appears on one security blocklist. The SSL certificate is issued by Google Trust Services, which may have been used to instill a false sense of security in potential victims.

Infrastructure analysis reveals that nexus-market-online.com has a low trust score, with only 4 out of 95 security vendors identifying it as a phishing site. The registrar, NICENIC INTERNATIONAL GROUP CO., LIMITED, has been associated with other suspicious domains. The creation date of March 27, 2026, suggests that the domain was recently registered and may have been part of a targeted campaign. The IP address 172.67.137.246 has not been previously linked to any significant malicious activities, but the overall context of the domain's registration and detection counts raises concerns.

To mitigate the risks associated with fake login phishing, users and organizations are advised to verify the legitimacy of any login pages by cross-referencing the domain with official sources. Implementing multi-factor authentication (MFA) can significantly reduce the likelihood of credentials being compromised. Network administrators should update their security blocklists to include this domain and monitor for any related activity. Regular security awareness training for employees and users can also help in recognizing and avoiding phishing attempts.