usaprimehub[.]com

The domain usaprimehub.com was registered on 7 December 2025 through the HOSTINGER operations, UAB registrar. Its authoritative DNS resolves to the IP address 188.114.96.3, which is owned by CloudFlare, Inc. and located in Canada. As of 12 July 2026 the web server returns HTTP 403 responses, indicating that direct content retrieval is blocked, yet the domain remains active in DNS. The TLS certificate presented by the host is issued by Google Trust Services under the WE1 designation, confirming the use of a valid, publicly trusted certificate chain. The hosting infrastructure is consistent with a typical CloudFlare front‑end, which can obscure the true backend server location. No additional IP addresses have been observed for the domain, and no alternative A or CNAME records appear in public DNS data. Threat intelligence sources have flagged the domain as a generic phishing site. VirusTotal analysis shows that 3 of 95 scanned security vendors have marked the domain as malicious, and the Gridinsoft trust score is 0 out of 100, reflecting a unanimous low reputation. The domain appears on three independent blocklists and has been actively blocked by multiple security‑focused filters, including PhishDestroy, MetaMask, and SEAL. While the limited number of VirusTotal detections suggests a low level of automated detection, the combination of a zero trust score, blocklist presence, and a valid TLS certificate used in conjunction with a 403 response pattern is typical of credential‑harvesting infrastructure. Defenders should continue to monitor DNS queries for 188.114.96.3, enforce URL filtering for usaprimehub.com, and consider adding the domain to internal blocklists. Additional analysis of any payloads or URLs linked from the domain, as well as network traffic to the associated CloudFlare edge, is recommended to confirm the phishing intent and to mitigate potential credential theft.