Is nexa.mov safe?
http://nexa.mov/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (56 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Nexa is an anonymous 48-day-old piracy streaming portal that admits it hosts only links to copyrighted content and is flagged suspicious by two security vendors.
Nexa presents itself as a streaming site but states plainly that it 'holds none of our content, only publicly available links', meaning it is a link index for copyrighted material rather than a licensed service. The domain is only 48 days old, the operator discloses no company, address or registration, and the only contact is a generic DMCA address. Two antivirus engines have flagged the URL as suspicious, while the browser threat feed and the TLS check show no active threat. There is no evidence of a checkout, subscription, wallet connection or payment flow, so the risk here is the piracy ecosystem itself — anonymous operation, unvetted third-party links and the malvertising and redirect exposure that commonly surrounds such portals — rather than a confirmed fraud mechanism.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateThe site states it 'holds none of our content, only publicly available links', identifying it as a piracy streaming portal that indexes copyrighted material hosted elsewhere.-7 pts
- Moderate2 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- MinorThe registrable domain is only 48 days old, so there is no operating history or established reputation to rely on.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection.
Points come from the saved evidence ledger: it lowered the score from 59 to 52 and split those 7 points between the findings that show points; the others carry no points in the ledger. Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
Nexa presents itself as a streaming site but states plainly that it 'holds none of our content, only publicly available links', meaning it is a link index for copyrighted material rather than a licensed service. The domain is only 48 days old, the operator discloses no company, address or registration, and the only contact is a generic DMCA address. Two antivirus engines have flagged the URL as suspicious, while the browser threat feed and the TLS check show no active threat. There is no evidence of a checkout, subscription, wallet connection or payment flow, so the risk here is the piracy ecosystem itself — anonymous operation, unvetted third-party links and the malvertising and redirect exposure that commonly surrounds such portals — rather than a confirmed fraud mechanism.
An anonymous link index for copyrighted content
The site's own text says 'Nexa holds none of our content, only publicly available links', which is the standard framing of a piracy streaming portal: it does not host files but points visitors to third-party sources for copyrighted films and shows. The same page gives only a generic DMCA contact, nexa-dmca@proton.me, and no operator name, company registration or physical address is disclosed.
The registrable domain is 48 days old, so there is no long operating history to assess and no established reputation behind the service. A welcome popup invites visitors to 'Join our Discord', which moves part of the community interaction onto a third-party platform outside the site itself.
Clean connection checks, but a suspicious vendor flag and no accountable operator
The saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning, so there is no evidence of an active malware or phishing payload on the page as scanned. That is a point in the site's favour and it is why the score is not lower.
Against that, two antivirus results marked the URL as suspicious — alphaMountain.ai and Forcepoint ThreatSeeker — and this comes from a saved observation rather than a fresh submission, so the detection is real but its timing is uncertain. Combined with an operator who discloses nothing and a domain under two months old, the site cannot be treated as a trusted destination even though no specific malicious behaviour was captured.
Why the score is 52
The site states it 'holds none of our content, only publicly available links', identifying it as a piracy streaming portal that indexes copyrighted material hosted elsewhere. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsSaved analysis from October 16, 2026 - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 0
- Suspicious
- 2
- Total
- 93
| Engine | Finding |
|---|---|
| alphaMountain.aiSuspicious | suspicious |
| Forcepoint ThreatSeekerSuspicious | suspicious |
All 93 engine results
- alphaMountain.ai - Suspicious
- Forcepoint ThreatSeeker - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Unrated
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiSuspicious
- Forcepoint ThreatSeekerelevated exposure
- Googlemedia_and_entertainment
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Welcome to NEXA! We're officially live! Make sure to check out your settings to customize your experience, and enjoy exploring NEXA! Join our Discord Got it
What the captured page showed
1 observation- 01
Welcome to NEXA! We're officially live! Make sure to check out your settings to customize your experience, and enjoy exploring NEXA! Join our Discord Got it
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Nexa — Watch films, series and anime together
- Meta description
Next generation streaming. Films, series and anime in one place: keep a library, pick up where you left off, and watch together in a watch party.
Pages we read
- Main page/Read
03 · Investigation Story
Investigation story
What the site claims
Nexa — Watch films, series and anime together
What we observed
The page content was captured and checked alongside 56 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Streaming Piracy
Observed behavior
Evidence behind this classification
- 01The site states it 'holds none of our content, only publicly available links', identifying it as a piracy streaming portal that indexes copyrighted material hosted elsewhere.
- 02The registrable domain is only 48 days old, so there is no operating history or established reputation to rely on.
- 032 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
If this is a scam — what it means for you
What a visitor actually encounters
On arrival a popup greets the visitor with 'Welcome to NEXA! We're officially live!' and offers a 'Join our Discord' button alongside a 'Got it' dismissal, so the first interaction is a prompt to leave the site for a third-party chat platform rather than any account or payment step.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
From there the visitor is directed to 'publicly available links' for content the site explicitly does not host, meaning the actual media, and any risk attached to it, sits on destinations the site does not control or vouch for. No checkout, subscription or wallet prompt was observed, so the exposure is to unvetted third-party links and the anonymous operator behind them, not to a confirmed payment or credential trap.
Avoid using Nexa for streaming. It is a brand-new, anonymous portal that openly indexes links to copyrighted content it does not host, and two security vendors already flag it as suspicious. If you do visit, do not install anything it suggests, do not enter credentials or payment details, and treat any link it sends you to as untrusted. Use licensed streaming services instead.
Web research findings
Independent findings for nexa.mov, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for nexa.mov. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainnexa.mov
- Redirects tonexa.mov
- Hosted byCloudflare, Inc.
- Referencesimage.tmdb.org · discord.gg
Domain Timeline
- Aug 31, 2026Domain registered
First appeared in WHOIS records — 48 days old when this review was saved.
- Oct 18, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
nexa.mov was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for nexa.mov.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://nexa.mov/
- 2200https://nexa.mov/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
2 antivirus results marked the URL as suspicious. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The site states it 'holds none of our content, only publicly available links', identifying it as a piracy streaming portal that indexes copyrighted material hosted elsewhere. · The registrable domain is only 48 days old, so there is no operating history or established reputation to rely on.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 16, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 18, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 16, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is nexa.mov a scam or is it safe?
Is nexa.mov safe to use?
Has nexa.mov been flagged by antivirus engines?
Is nexa.mov on any phishing or malware blacklists?
How old is the nexa.mov domain?
Does nexa.mov have a valid SSL certificate?
Where is nexa.mov hosted?
How often is the nexa.mov report updated?
08 · Final Verdict
Final verdict
Nexa is an anonymous 48-day-old piracy streaming portal that admits it hosts only links to copyrighted content and is flagged suspicious by two security vendors.
Nexa presents itself as a streaming site but states plainly that it 'holds none of our content, only publicly available links', meaning it is a link index for copyrighted material rather than a licensed service. The domain is only 48 days old, the operator discloses no company, address or registration, and the only contact is a generic DMCA address. Two antivirus engines have flagged the URL as suspicious, while the browser threat feed and the TLS check show no active threat. There is no evidence of a checkout, subscription, wallet connection or payment flow, so the risk here is the piracy ecosystem itself — anonymous operation, unvetted third-party links and the malvertising and redirect exposure that commonly surrounds such portals — rather than a confirmed fraud mechanism.
09 · Community
Community
Are you the owner of nexa.mov?Verify and reply