nexuscivitation[.]netlify[.]app

PhishDestroy has identified the domain nexuscivitation.netlify.app as an active threat that impersonates the Discord brand to steal login credentials. This site is designed to trick users into believing they are on a legitimate Discord page, but any information entered, such as email addresses and passwords, would be collected by attackers. The page title, 'Nexus by Darko,' may appear innocuous, but the underlying intention is credential theft. Users who encounter this domain should avoid interacting with it entirely and report it to Discord's safety team.

Our analysis reveals strong evidence of malicious intent. The domain was registered through Netlify and was flagged by 10 out of 95 security vendors on VirusTotal, a significant indicator of risk. It currently resolves to IP address 98.84.224.111 and uses an SSL certificate issued by DigiCert Inc, which can give a false sense of security. The site appears on one security blocklist and remains active as of this report. These technical indicators, combined with the brand impersonation targeting Discord, confirm this is a dangerous phishing site.

If you have already visited nexuscivitation.netlify.app and entered any personal information, immediately change your Discord password and enable two-factor authentication if you haven't already. Monitor your account for suspicious activity. Run a full security scan on your device with trusted antivirus software. If you suspect your credentials have been compromised, report the incident to Discord's support team. Do not revisit the site. Stay vigilant and always verify URLs before entering sensitive data.