cbfihub[.]com

This domain, cbfihub.com, was registered on 16 April 2025 through the Atak Domain registrar and is currently hosted on the IP address 212.28.189.136, which belongs to AS40021 Contabo Inc. in the United States. The site was reachable via HTTPS using an SSL certificate rated R12, and the web stack reports Bootstrap, LiteSpeed, Font Awesome and HTTP/3 support. The public page title returned by the server reads “Welcome | Stalon Credits,” but the site has been taken offline at the time of analysis. VirusTotal reports that 16 of 94 security engines flag the domain as malicious, indicating a moderate level of consensus among scanners.

The domain also appears on three independent security blocklists and is explicitly blocked by PhishDestroy, MetaMask and SEAL, reinforcing its classification as a phishing resource. Nameservers ns1.smallestgee.com and ns2.smallestgee.com resolve the domain, a configuration commonly observed in other illicit hosting arrangements. Evidence confirms that the primary threat vector is generic phishing, although the specific lure or credential‑capture page has not been captured in the available data. The lack of a live page prevents verification of the exact content, and no additional intelligence such as OTX tags or Safe Browsing verdicts is available.

Defenders should add cbfihub.com to local deny lists, ensure that outbound traffic to its IP 212.28.189.136 is blocked, and monitor for any new DNS resolution changes that might point to alternative hosts. Continuous querying of VirusTotal and blocklist feeds is recommended to capture any future re‑activation. Given the domain’s recent creation date, reputable registrar involvement and multiple independent detections, it should be treated as high‑risk until proven otherwise.