nuvexo[.]io

Analysis of nuvexo.io conducted on July 24, 2026 reveals that the domain was registered on September 20, 2025 through NiceNIC International Group Co., Limited and is currently hosted on Cloudflare infrastructure (AS13335). The authoritative name servers are ken.ns.cloudflare.com and sofia.ns.cloudflare.com, and DNS resolution points to IP address 172.67.198.177, which is geolocated to the United States. No TLS certificate is presented for the site, indicating that HTTPS is not available. The page title returned during the brief offline crawl reads “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | NUVEXO”, directly referencing the Ethereum brand and positioning the site as a cryptocurrency exchange.

This aligns with the reported scam type of brand impersonation targeting Ethereum users. Reputation signals show the domain appears on a single blocklist, PhishDestroy, and receives a Gridinsoft trust score of 1 out of 100, reflecting a very low confidence in legitimacy. VirusTotal scans report ten out of ninety‑five security engines flagging the domain as malicious, providing independent corroboration of the threat. The low detection count suggests that the malicious activity may be recent or limited in exposure, but the presence of multiple detections confirms that at least some security products recognize the site as abusive.

The current operational status is listed as offline, which may indicate that the phishing infrastructure has been taken down or is temporarily inactive. Nevertheless, the combination of brand‑related page title, registrar information, Cloudflare hosting, blocklist inclusion, low trust score, and multiple vendor detections constitutes sufficient evidence for security teams to treat nuvexo.io as a malicious brand‑impersonation actor.