Threat intelligence firms reported a surge in typosquatted domains designed to impersonate Nexus Market during May 2025. The domains used common misspellings and character substitutions to deceive users.

Many of these domains hosted convincing phishing pages that could capture credentials and cryptocurrency wallet information. Users searching for information about Nexus Market should exercise extreme caution with any links.