nexa-seoul[.]comConfirmed suspected, neutralized
Fraudpol's analyst team reviewed and confirmed abuse on this domain. The case status was updated to neutralized on 02 October 2026. If you landed here after searching this domain: do not enter payment details, credentials, or personal information.
Listings are published only after verification by our team and are removed if a review shows the site is legitimate.
Listed incorrectly? Request a reviewCase summary
- Domain
- nexa-seoul[.]com
- Abuse type
- suspected
- First reported
- 01 October 2026
- Confirmed
- 02 October 2026
- Registrar
- GMO Internet Group, Inc. d/b/a Onamae.com
- Reports on file
- 1
Analyst write-up
Suspected Cryptocurrency Exchange Phishing and Impersonation on nexa-seoul[.]com
A suspected phishing attempt impersonating a cryptocurrency exchange was identified on the domain nexa-seoul[.]com. The site exhibited behaviors consistent with impersonation and requesting payments, specifically cryptocurrency exchange phishing targeting Binance. This dedicated site was set up for this activity.
Timeline
The activity on nexa-seoul[.]com was reported on October 1, 2026, and monitored by Fraudpol from the moment the report arrived. Notifications were sent to Threatfox, the hoster, the registrar GMO Internet Group, Inc. d/b/a Onamae[.]com, SmartScreen, Google Web Risk, URLhaus, PhishTank, and Spamhaus. The site was neutralized on October 2, 2026, 23 hours after the report, with a time to first action of 3.4 hours. The last update on this case was on October 2, 2026, and the outcome observed was "verified offline by our team".
Indicators
nexa-seoul[.]comRegistrar: GMO Internet Group, Inc. d/b/a Onamae[.]comUses Cloudflare: yes
What to do
Always verify the legitimacy of cryptocurrency exchange websites before entering credentials or making payments. Check the URL carefully for any discrepancies and use official applications or bookmarks for access.
Handling record
- Offline since
- 02 October 2026
Evidence bundle hash (SHA-256)
e00ea5181d679a7af1099024115d2afb156d77f161ad656756946816f5b1e938
Evidence on file
Forensic evidence archived. Not published to protect the integrity of ongoing takedown work.
Reported to the responsible providers and security services.
Encountered this domain?
Submit your own evidence in under a minute: no account required. Every report is analyst-reviewed and, when confirmed, escalated to the hoster or registrar for takedown.