nexus-fe-4ll[.]pages[.]dev

This domain, nexus-fe-4ll.pages.dev, has been identified as a high-risk brand impersonation threat specifically targeting Google. The site is actively serving phishing content designed to deceive users into believing they are interacting with a legitimate Google service, making it a critical security concern for anyone who may encounter it.

PhishDestroy analysis reveals multiple alarming indicators: VirusTotal flags this domain with 5 out of 95 security vendors marking it as malicious. It appears on three separate security blocklists, and its SSL certificate is issued by Google Trust Services (WE1), which is ironic given the fraudulent intent. The domain resolves to IP address 2606:4700:310c::ac42:2d0d, was registered through Cloudflare, Inc., and was created on February 21, 2026. Despite these red flags, the site remains active, posing an ongoing threat.

Users who encounter this domain should immediately close any open pages and avoid entering any credentials or personal information. Since this is a Google brand impersonation, it may attempt to steal login credentials or other sensitive data. It is strongly recommended to report the domain to Google Safe Browsing and to your email or security provider. Additionally, enabling multi-factor authentication on Google accounts and using a password manager that detects phishing sites can provide an extra layer of protection.