nexusdnm[.]live

This domain is flagged as a high-risk generic phishing threat and remains active as of July 12, 2026. The page title reads 'Nexus Market Official Mirrors | Nexus Onion Link & Secure Access', which suggests an attempt to impersonate a darknet market or provide misleading access links. Infrastructure analysis shows the domain was created on February 21, 2026, registered through NiceNIC International Group Co., Limited, and resolves to IP 188.114.97.3. The domain uses Cloudflare services and HTTP/3, with an SSL certificate issued by Google Trust Services. Threat intelligence sources indicate broad recognition of malicious activity: AlienVault OTX lists the domain in 22 threat pulses, and VirusTotal shows 4 out of 95 security vendors flagging it. Additionally, the domain appears on two security blocklists, PhishDestroy and BLP-Malware. Despite these indicators, the exact phishing content or landing page has not been visually analyzed, and no specific brand or kit has been identified beyond the market-themed title. Defenders should treat this domain as actively hostile, block all traffic to it, and monitor for related infrastructure. The registration and hosting details should be reported to the registrar and hosting providers for abuse action.