ios[.]nexustops[.]com

ios.nexustops.com is a subdomain of nexustops.com. PhishDestroy first observed the hostname on Sep 16, 2025. Stored content metadata identifies Generic as the apparent target. Current evidence score: 95/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, URLQuery, and URLScan. VirusTotal recorded 5 detections among 95 engines: CRDF, CyRadar, ESET, Gridinsoft, SOCRadar on Jun 16, 2026 at 22:33 UTC. URLQuery recorded 100 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata assigned phishing as its category on Jul 29, 2026 at 03:40 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:17 UTC; content was unavailable. Registration records for the registrable domain nexustops.com list Squarespace Domains II LLC as the registrar and Jan 18, 2025 as the creation date. At collection time, the hostname resolved to 49.51.191.158 on AS132203 (TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue, CN). The IP and ASN identify shared CDN edge infrastructure; the origin server is not established by this address. The stored server header is nginx. DOM analysis on Apr 23, 2026 at 19:24 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.

The content indicators and 3 positive source findings support the current Generic impersonation and phishing classification. The target field identifies Generic, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.