nexusflare[.]live

The domain www.nexusflare.live operates as a generic phishing threat. It is currently active and displays a cloaking score of 1/10, indicating it serves benign content to scanners while potentially harmful content to users. This tactic is often used to evade detection and prolong the domain's malicious activity. Despite being flagged by only 1 out of 94 vendors on VirusTotal, PhishDestroy has identified it as a threat and listed it on its blocklist.

Registered with NameCheap, Inc., the domain is hosted on an IP address (64.29.17.1) managed by Vercel, Inc., located in the United States. The domain was created on April 5, 2026, and detected by PhishDestroy on the same day, highlighting its freshness and the rapid response of PhishDestroy's detection systems. The platform risk score for this domain is high, at 81 out of 100, underscoring its potential danger to users.

Phishing domains like www.nexusflare.live exploit the time gap between their creation and when antivirus databases update, typically within 24 to 72 hours. PhishDestroy's pipeline identifies these threats during this critical window, providing early warnings before they propagate widely in AV databases. The low detection rate on VirusTotal should not be misconstrued as safety but rather as an indication of the domain's recent emergence and the sophisticated techniques employed to avoid detection.