nexeracapital[.]live

This domain, nexeracapital.live, is flagged as a generic phishing resource targeting individuals seeking investment opportunities. Analysis indicates the site mimics a legitimate financial services portal, using branding elements and language designed to establish false credibility. The page title, 'nexeracapital– Safe investment with nexeracapital,' reinforces the deception by promoting a fabricated sense of security. No explicit drainer kit signatures have been identified, though the site likely harvests login credentials and financial details for subsequent unauthorized transactions or account takeovers. Infrastructure analysis reveals the domain was registered on July 5, 2024, through Dynadot Inc, a registrar frequently leveraged for short-lived phishing campaigns. It resolves to the IP address 188.114.96.3, which has been associated with other low-reputation domains in recent months. VirusTotal detection metrics show only 2 out of 95 security vendors currently flag the domain, suggesting limited initial visibility or evasion techniques. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy while obscuring malicious intent. No Google Safe Browsing (GSB) warnings are presently recorded, and blocklist inclusion remains minimal, further complicating detection. The domain remains active and poses an elevated risk to users, particularly those unfamiliar with phishing tactics in the financial sector. Response actions should include immediate reporting to hosting providers and registrar abuse contacts to facilitate takedown procedures. Users are advised to verify financial platforms through official channels, avoid clicking on unsolicited investment links, and employ multi-factor authentication to mitigate credential theft. Given the domain's recent registration and low detection rates, continued monitoring is warranted to assess potential shifts in infrastructure or targeting patterns.