nexushar[.]com

Analysis of nexushar.com indicates that the domain was registered on 21 February 2026 and is currently taken offline. The site presented a page titled “NexusHarbor Credit Union || Home” while claiming to impersonate Google, aligning with a tech‑support scam profile. Infrastructure tracing shows the domain resolves to 107.173.193.235, an address owned by HostPapa (AS36352) located in the United States. The SSL certificate is identified as R10, a low‑trust certificate often associated with malicious actors.

Reputation data show a Gridinsoft trust score of 0 out of 100 and a single blocklist entry by PhishDestroy, confirming that at least one security feed has flagged the domain. VirusTotal’s scan returned a single positive detection out of 93 vendors, indicating limited but concrete suspicion from the scanning community. The combination of a brand‑impersonation claim, low‑trust SSL, minimal blocklist presence, and a positive VirusTotal flag suggests a deliberate attempt to lure victims into a tech‑support scheme, despite the site being offline at the time of analysis.

Uncertainties remain regarding the exact phishing kit, the presence of credential‑stealing forms, and any active command‑and‑control infrastructure, as no page content beyond the title has been examined. Defenders should continue to block the domain at network perimeter devices, update URL filtering lists with the observed IP address and ASN, and monitor for any resurgence of the domain or similar sub‑domains hosted on the same IP range. Incident response teams should also advise users to disregard unsolicited Google‑related tech‑support communications and to report any related emails to the appropriate security channels.