# darkhub.biz — SUSPICIOUS

> darkhub.biz shows low-risk phishing activity. Exercise caution and avoid sharing personal info on this active domain.

## Summary
PhishDestroy identifies darkhub.biz as a low-risk generic phishing domain. The domain is actively used but assessed to pose minimal immediate threat based on current intelligence. Users should remain cautious when interacting with sites linked to this address.

The domain was registered recently on June 15, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with less regulated registrations. It resolves to the IP address 188.114.96.3. VirusTotal flagged the domain by only one out of 95 security vendors, suggesting limited but existent suspicion. This limited detection combined with the domain’s new registration and affiliation with a less reputable registrar supports the phishing classification.

Mitigation includes avoiding any input of sensitive or personal data on darkhub.biz and monitoring for suspicious emails or links referencing this domain. PhishDestroy currently marks this domain as active with low-level risk but advises ongoing monitoring due to the potential for escalation. Users and network defenders should keep this domain under watch and apply standard phishing defenses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: DarkHub

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["cruz.ns.cloudflare.com", "jerome.ns.cloudflare.com"]
- SSL Issuer: SSL Corporation / Cloudflare TLS Issuing ECC CA 3

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["alphaMountain.ai", "Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Link aggregator
## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf62-5d5a-718e-aef3-52a266b20a16.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/8cfdae18-126e-4597-ac8b-34fe56c07037
- Wayback Machine: https://web.archive.org/web/https://darkhub.biz
- PhishDestroy: https://phishdestroy.io/domain/darkhub.biz/
- LLM endpoint: https://phishdestroy.io/domain/darkhub.biz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/darkhub.biz/
Last updated: 2026-03-16