orbitdatahub[.]org

orbitdatahub.org entered the PhishDestroy evidence set on Apr 3, 2026. Stored content metadata identifies ["across"] as the apparent target. Content analysis also recorded brand signals for Across. The stored content classification is generic phishing. The assembled evidence scores 71/100 (high).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and PhishStats. VirusTotal recorded 2 detections among 94 engines: Gridinsoft, SOCRadar on Apr 24, 2026 at 01:08 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. PhishStats matched the domain in 5579 feed records (source score 6.1) on Apr 3, 2026 at 13:33 UTC. The evidence is not unanimous. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Apr 3, 2026 at 13:33 UTC. URLScan completed without a malicious verdict (score 0).

HTTP 502 was recorded on Aug 7, 2026 at 01:23 UTC; content was unavailable. Registration records for the domain list HOSTINGER operations, UAB as the registrar and Apr 3, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 172.67.167.189 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is cloudflare. Captured page title: “OrbitDataHub | Global Decentralized Cloud Infrastructure”. DOM analysis completed on Jul 29, 2026 at 04:02 UTC; stored DOM score 63/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 1, 2026 at 04:18 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer; checked Apr 23, 2026 at 23:00 UTC.

Taken together, the page content and independent findings support classifying this hostname as ["across"]-themed generic phishing.