Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 9 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
nexushub[.]info
“Not Acceptable!”
Stored observation
Observed title contrast
Evidence Summary
The domain nexushub.info is currently active and resolves to the IPv4 address 162.215.121.139. Registration data shows the domain was created on 08 April 2022 through GoDaddy.com, LLC. Google Safe Browsing classifies the URL as social engineering, indicating it is used to harvest credentials or otherwise deceive users. Malware scanning on VirusTotal reports that four out of ninety‑one security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, which specializes in phishing mitigation. DNS resolution is provided by ns1.site5.com and ns2.site5.com, pointing to infrastructure commonly associated with low‑cost hosting providers.
No SSL certificate details, HTTP status codes, or page title information are publicly available, leaving the exact content of the landing page unverified. This lack of content‑based indicators forces defenders to rely on network‑level signals such as the IP address and DNS configuration. Uncertainties remain regarding the specific phishing campaign, targeted brand, or credential‑stealing mechanism, as the landing page has not been captured. Consequently, automated URL filtering should treat the domain as high risk, and manual analysis should be prioritized if the URL appears in logs.
Recommended mitigations include blocking the domain at perimeter firewalls and DNS resolvers, adding 162.215.121.139 to deny lists, and ensuring that Google Safe Browsing and PhishDestroy feeds are enabled. Continuous monitoring of the nameservers ns1.site5.com and ns2.site5.com for changes is advised, as the infrastructure may be repurposed for other malicious domains. Organizations should educate users about the social‑engineering nature of the threat and encourage verification of unsolicited communications.
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260802-8A8681- Captured page title
- Sign In to Get Started
- PDF artifact
- PDF evidence
Full evidence text
Policy Violations: Universal TOS + Abuse Policy prohibit fraudulent, abusive, malicious, phishing and illegal activity; grants right to terminate or suspend services
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | nexushub.info |
malicious | Sinkholed |
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
First recorded
First stored value: Reachable
-
Google Safe Browsing
0 → 1
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies
10 high-confidence technologies identified
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of nexushub.info · checked Aug 2, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive