thetradinghubs[.]net

Analysis of thetradinghubs.net shows a live web service returning HTTP 200 and presenting the title “TheTradingHubs - Forex, Stocks, ETFs and Options - Online Trading Platform”. The site is hosted on IP 213.252.232.127, which resolves to Lithuania (AS61272 Informacines sistemos ir technologijos, UAB). The certificate is a Let’s Encrypt R12 certificate, indicating recent TLS provisioning. Infrastructure fingerprints include LiteSpeed web server, delivery of assets via Unpkg, jsDelivr, and the Smartsupp chat widget, and support for HTTP/3. The domain was registered on 21 February 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and uses four nameservers (dns1.bacloud.com, dns2.bacloud.com, dns1.laisvas.lt, dns2.laisvas.lt). Reputation data show a Gridinsoft trust score of 0/100, placement on a single blocklist, and a detection by one of ninety‑three VirusTotal scanners. PhishDestroy has already listed the domain as blocked, yet the site remains reachable, confirming active status. The combination of a financial‑oriented page title, a “Fake Exchange” classification, and the observed infrastructure aligns with a high‑risk phishing operation targeting traders. Defenders should block the domain at network perimeter, monitor DNS queries for the listed nameservers, and add the IP address to threat‑intel feeds. Continuous re‑scanning is advised to capture any additional detections.