hubia[.]cfd
Phishing and security check for hubia.cfd
hubia.cfd entered the PhishDestroy evidence set on Aug 7, 2026. The assembled evidence scores 58/100 (elevated).
One independent source is positive: ScamSniffer. ScamSniffer listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. On Aug 7, 2026 at 08:51 UTC, VirusTotal recorded 0 detections among 91 engines; Google Safe Browsing returned no flag. A URLScan capture is available, but no capture timestamp was recorded. The 0/91 VirusTotal result therefore records detection disagreement at that collection time, not the absence of the later source findings.
HTTP 200 was recorded on Aug 7, 2026 at 10:00 UTC. Registration records for the domain list DYNADOT LLC as the registrar and Jul 17, 2026 as the creation date. Registration preceded first observation by 20 days. At collection time, the hostname resolved to 172.67.132.60 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The evidence archive retains 2 visual captures from PhishDestroy and Cloudflare Radar. TLS metadata lists Google Trust Services as the certificate issuer.
No page title was retained; the visual captures, not a title string, preserve the landing-page appearance. No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
SHORTDOT ZONE · PUBLIC EVIDENCE
.cfd
Built for Abuse. Sold Back as Protection.
Built for Abuse. Sold Back as Protection.
Our evidence archive tracks every registered domain across all seven ShortDot zones. It estimates roughly $12.6 million a year in wholesale registry revenue and has found zero verified legitimate businesses to date. Our assessment: these zones function almost exclusively as disposable abuse infrastructure, while companies in the same commercial orbit sell brands protection from the resulting garbage. ShortDot gets the revenue; the internet gets the landfill.
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
ICANN Got Paid. Accountability Did Not Arrive.
For this gTLD, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
Accreditation: monetized. Accountability: please check back later.
Then the magic starts: ICANN writes RAA §3.18, the registrar investigates abuse inside its own customer base, and victims deliver the evidence for free while every layer waits for someone else to act. If that makes victims feel safer, excellent—the invoice worked.
Technologies · 3 identified
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% confidenceCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceArchived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of hubia.cfd · checked Aug 7, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive