nameserverhub[.]com

Analysis indicates that nameserverhub.com is an active generic phishing infrastructure observed since its registration on 13 March 2026. The domain resolves to the IPv4 address 69.5.189.54, which is assigned to AS42624 (Global-Data System IT Corporation) located in Switzerland. Four authoritative name servers (ns1‑ns4.nameserverhub.com) respond for the zone, and the site presents an HTTP 301 redirect without an SSL certificate, returning the page title “nameserverhub.com”. Registration was performed through NiceNIC International Group Co., Limited, and the domain received a Gridinsoft trust score of 0 / 100. It appears on one public blocklist and is currently blocked by PhishDestroy. VirusTotal scans report that 2 of 94 security vendors flagged the domain, reinforcing its malicious classification. No further content analysis is available, thus the specific brand or service being spoofed remains unknown. Defenders should immediately add 69.5.189.54 and the full domain name to network‑level deny lists, monitor DNS queries for the associated name servers, and enforce TLS inspection policies to detect the unencrypted redirect. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to this infrastructure.