nexus-track[.]com

This domain, nexus-track.com, is confirmed to be a brand impersonation scam targeting Telegram. The site's page title, 'Nexus Track - Rastreamento Avançado de Leads e Campanhas,' suggests an attempt to deceive users into believing they are interacting with a legitimate Telegram service. The primary threat is the potential for users to divulge sensitive information, such as login credentials, which could be used for further malicious activities.

Analysis indicates that the domain was created on October 28, 2025, and is registered through HOSTINGER operations, UAB. The domain currently appears on 1 security blocklist and has a Gridinsoft trust score of 0/100, indicating a high level of suspicion. VirusTotal has flagged the domain with 0/95 detections, suggesting that it may not have been widely recognized by security engines at the time of analysis. The site resolves to the IP address 2a02:4780:13:1677:0:16fe:c078:10 and uses a Google Trust Services SSL certificate, which could provide a false sense of security to unsuspecting users. The presence of technologies such as React, LiteSpeed, and HTTP/3 further complicates the detection and assessment of the domain's legitimacy.

If users have visited nexus-track.com, they should immediately change their Telegram account passwords and enable two-factor authentication (2FA) to secure their accounts. Additionally, users should monitor their accounts for any unusual activity and report any suspicious incidents to Telegram's support team. It is recommended to avoid clicking on any links or entering personal information on any unfamiliar or untrusted websites, especially those that impersonate well-known brands.