app[.]hubdates[.]icu

Analysis of the domain app.hubdates.icu indicates it was involved in a tech support scam impersonating Microsoft. The domain was registered on February 21, 2026, and resolved to the IP address 185.176.220.7, hosted by 2 Cloud Ltd. (AS39845) in Latvia. The SSL certificate used was classified as R13, a type often associated with low-cost or automated certificate issuance common in phishing infrastructure. At the time of assessment, the domain was offline, with a page title of 'Connecting...', which may suggest an incomplete or transitional state prior to takedown.

Fifteen of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on at least one security blocklist, specifically PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, further supporting its classification as high-risk. No evidence of widespread Safe Browsing or OTX coverage was provided, but the combination of vendor detections and blocklist presence indicates a coordinated response to the threat. The exact content and functionality of the site remain unconfirmed, as no forensic capture or behavioural analysis was supplied.

However, the available data—including the 'tech support scam' classification and Microsoft impersonation—align with known patterns of fraudulent call-center or pop-up scams designed to deceive users into contacting fake support agents. Defenders should treat this domain as confirmed malicious infrastructure and ensure it is blocked at the DNS and network layers. Monitoring for re-registration or changes in hosting is recommended, given the domain's recent creation and the persistent nature of such campaigns.