Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 16. Exercise extreme caution — do not enter credentials or personal information.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 9 days has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
9 days
Reports sent
1
Current status
HTTP 200 at latest stored check
Domain security and threat intelligence

nexushub[.]info

“Not Acceptable!”

Threat verdict Critical 100/100 evidence score
Availability Last known active Latest stored reachability observation
VirusTotal detections: 16/91 URLQuery threat systems: 1 alert Brand impersonation: Google Last known active
Aug 2, 2026 Google 1 Report Sent

Stored observation

Observed title contrast

Scanner-facing titleNexus HUB – End-To-End Live IPTV & VOD Streaming Solution
Visitor-facing titleNot Acceptable!

Evidence Summary

CRITICAL
Evidence score
100/100

The domain nexushub.info is currently active and resolves to the IPv4 address 162.215.121.139. Registration data shows the domain was created on 08 April 2022 through GoDaddy.com, LLC. Google Safe Browsing classifies the URL as social engineering, indicating it is used to harvest credentials or otherwise deceive users. Malware scanning on VirusTotal reports that four out of ninety‑one security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, which specializes in phishing mitigation. DNS resolution is provided by ns1.site5.com and ns2.site5.com, pointing to infrastructure commonly associated with low‑cost hosting providers.

No SSL certificate details, HTTP status codes, or page title information are publicly available, leaving the exact content of the landing page unverified. This lack of content‑based indicators forces defenders to rely on network‑level signals such as the IP address and DNS configuration. Uncertainties remain regarding the specific phishing campaign, targeted brand, or credential‑stealing mechanism, as the landing page has not been captured. Consequently, automated URL filtering should treat the domain as high risk, and manual analysis should be prioritized if the URL appears in logs.

Recommended mitigations include blocking the domain at perimeter firewalls and DNS resolvers, adding 162.215.121.139 to deny lists, and ensuring that Google Safe Browsing and PhishDestroy feeds are enabled. Continuous monitoring of the nameservers ns1.site5.com and ns2.site5.com for changes is advised, as the infrastructure may be repurposed for other malicious domains. Organizations should educate users about the social‑engineering nature of the threat and encourage verification of unsolicited communications.

Submitted Evidence Snapshot

Sent
Ledger records
1
Case ID
PD-20260802-8A8681
Captured page title
Sign In to Get Started
PDF artifact
PDF evidence
Full evidence text
Registrar: GoDaddy.com LLC (United States)
Policy Violations: Universal TOS + Abuse Policy prohibit fraudulent, abusive, malicious, phishing and illegal activity; grants right to terminate or suspend services
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
VirusTotal
VirusTotal
16 det.
URLQuery
URLQuery
1 threat alert
TLS Certificate
Sectigo Limited
Age
4.3 yr
Observed status
Last known active HTTP 200
PhishDestroy
DestroyList
Listed
Reports Sent
1

Data Coverage

VirusTotal 16 / 91 URLQuery 1 threat-system alert PhishStats not checked OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict malicious DNS blocks not checked TLS valid certificate, 209d WHOIS 53 mo old Screenshot 5 captures · 4 sources Redirect chain not probed
Network Security Intelligence
Threat Detection Systems 1 alert
Detection System Indicator Verdict Alert
DNS4EU nexushub.info malicious Sinkholed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
12/13

Blocklist coverage

10 monitored external feeds · stored snapshot Aug 11, 2026

10 monitored external feeds No match

Detection timeline

  1. First recorded

    First stored value: Reachable

  2. Google Safe Browsing

    0 → 1

Stored Capture

Page Title
Not Acceptable!
TLS Certificate
Valid transport encryption · Issued by Sectigo Limited · valid for 209 days

Domain Intelligence

Domain
URLScan Verdict Malicious score 100 Phishing brand: Spectrum report ↗
Google Safe Browsing Flagged Social engineering checked Aug 2, 2026
Server / ASN Apache · AS46606 Unified Layer
IP Reputation IP abuse confidence 0/100 0 reports checked Aug 2, 2026
IP Address 162.215.121.139 US
GeoUS Provo, US
NetworkAS46606 · Unified Layer
RegistrationCreated Apr 8, 2022 Expires Apr 8, 2027
HTTP Status200
Technical detailsDNS, TLS names and timestamps
First DetectedAug 2, 2026
DOM Analysisanalyzed Aug 2, 2026DOM analysis score 81/100
Submitted URLhttp://nexushub.info/spectru
Nameserversns1.site5.comns2.site5.com
MX Records0 mail.nexushub.info
TLS fingerprint
TLS observationvalid from Feb 27, 2026scanned Aug 2, 2026
TLS subject alternative nameswww.nexushub.info
Favicon Hash
ICANN OVERSIGHT

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.

Technologies

10 high-confidence technologies identified

WordPress MySQL PHP YouTube UIKit Nginx GSAP Apache HTTP Server jQuery Migrate jQuery
Cloudflare Radar
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

16 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 13 detections
alphaMountain.ai
BitDefender
Cluster25
CRDF
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Google Safe Browsing
Gridinsoft
LevelBlue
Lionic
MalwareURL
SOCRadar
Sophos
VIPRE

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of nexushub.info · checked Aug 2, 2026

41
Poor
Performance
FCP
3s
First Contentful Paint
LCP
24.01s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
834ms
Total Blocking Time
SI
9.72s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing

External tools

HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/nexushub.info"
  title="PhishDestroy threat report for nexushub.info"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.