nextier[.]co[.]com

The domain nextier.co.com stands out with 13 out of 95 VirusTotal vendors marking it as malicious. Despite being offline now, it was initially detected by PhishDestroy on May 29, 2026. The domain was hosted in the United States under the IP address 104.168.81.174, managed by HostPapa. It was registered through Moniker Online Services LLC and had an SSL certificate issued by Let's Encrypt.

This domain was particularly concerning due to its high platform risk score of 88 out of 100. The presence of a phishing page under the title www.api.nextier.co.com suggests a sophisticated attempt to mimic legitimate services. The rapid detection and subsequent inclusion in public blocklists, including PhishDestroy's, indicate the effectiveness of the monitoring systems in place.

The domain's offline status now reduces its immediate threat, but its initial activity highlights the ongoing challenges in combating phishing threats. The relatively high number of VirusTotal detections underscores the domain's malicious intent. Such domains often exploit the gap between registration and detection by antivirus databases, emphasizing the need for early detection systems like PhishDestroy's to mitigate potential damage.