nadenhancement[.]com

The domain nadenhancement.com was registered on March 11 2026 through DreamHost, LLC and is currently active. The site presents a page titled “How to Increase NAD+ Levels Naturally | Boost NAD+ for Anti-Aging,” a typical lure used in health‑related phishing campaigns. The page returns HTTP 200 and serves over a valid Let's Encrypt R13 certificate. Automated analysis by PhishDestroy has already placed the domain on a blocklist, and Gridinsoft assigns a trust score of 0 / 100, indicating a high confidence of malicious intent. Infrastructure observations show the domain resolves to IP 192.142.10.5, which is announced by AS214036 (Ultahost, Inc.) in the Netherlands. The web server runs PHP behind LiteSpeed and supports HTTP/3, a modern stack often employed to improve performance and evade simple signature‑based detection. MX records exist only for the same domain, suggesting no legitimate mail service. VirusTotal reports that 7 out of 95 security vendors flag the host, reinforcing the suspicion of abuse. Uncertainty remains around the exact payload delivered to victims; the current snapshot does not reveal malicious scripts or credential‑harvesting forms, possibly because they are injected dynamically after initial page load. Defenders should block both the domain and its resolving IP at perimeter defenses, monitor DNS queries for the associated nameservers (ns1.ultahost.com, ns2.ultahost.com), and enforce web‑filtering policies that flag health‑related phishing content. Continuous re‑assessment is advised, as the site may evolve its tactics while remaining under active observation.