hubia[.]cfd

hubia.cfd entered the PhishDestroy evidence set on Aug 7, 2026. Evidence score: 58/100 (elevated).

Positive source (1): ScamSniffer. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Other stored checks: On Aug 7, 2026 at 08:51 UTC, VirusTotal recorded 0 detections among 91 engines; Google Safe Browsing returned no flag. A URLScan capture is available, but no capture timestamp was recorded. The 0/91 VirusTotal result therefore records detection disagreement at that collection time, not the absence of the later source findings.

HTTP 200 was recorded on Aug 7, 2026 at 10:00 UTC. Registration records for the domain list DYNADOT LLC as the registrar and Jul 17, 2026 as the creation date. Registration preceded first observation by 20 days. At collection time, the hostname resolved to 172.67.132.60 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The evidence archive retains 2 visual captures from PhishDestroy and Cloudflare Radar; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Google Trust Services as the certificate issuer.

ScamSniffer is the only positive source family in the stored checks; the other recorded checks did not corroborate it at their collection times. Stored content fields do not identify a target brand or exact victim interaction.