nhavtv[.]com

The domain nhavtv.com was registered on November 19, 2023 through Gname.com Pte. Ltd. and currently resolves to the IP address 172.65.235.97. Its authoritative name servers are a.share-dns.com, b.share-dns.net, ns1.gname-dns.com, and ns2.gname-dns.com. As of the report date, July 21, 2026, the domain appears on a single external security blocklist and is actively listed by PhishDestroy, indicating that at least one reputable anti‑phishing service has observed malicious activity tied to this host. VirusTotal scans show that five out of ninety‑five security vendors have flagged the domain, providing additional corroboration of its malicious reputation. No public page title, SSL certificate details, HTTP response codes, or brand‑specific lure information have been disclosed, leaving the exact phishing payload or targeted victim profile undefined. The limited detection footprint—five vendor detections and presence on one blocklist—suggests that the infrastructure may be relatively new or operated with low visibility, but the active blocklist entries confirm it is not a benign resource. Defenders should treat nhavtv.com as high‑risk: block the domain at perimeter firewalls and DNS filtering solutions, monitor outbound connections to its IP address, and consider adding the address to threat‑intel feeds used by intrusion detection systems. Continuous re‑evaluation is advised, as additional detections or blocklist listings may emerge, providing further insight into the campaign’s tactics, techniques, and procedures.