forthub[.]icu

Analysis of the domain forthub.icu shows a recent registration on February 26, 2026 through Global Domain Group LLC. The domain resolves to the IP address 188.114.97.3, which is owned by AS13335 Cloudflare, Inc. and geolocated in the United States. DNS configuration lists the Cloudflare nameservers chance.ns.cloudflare.com and galilea.ns.cloudflare.com. The site currently returns an HTTP 404 status with the page title "404 — Page not found" and is reported as taken offline. Security telemetry indicates the domain appears on one external blocklist and is actively blocked by the PhishDestroy service.

A Gridinsoft trust score of 1 out of 100 further underscores its low reputation. VirusTotal scans have recorded 20 detections out of 91 security vendors, confirming that multiple anti‑malware engines flag the domain as malicious. The TLS certificate is issued by Let’s Encrypt (profile E7), which is common for short‑lived malicious infrastructure. Collectively, the registration age, low trust score, blocklist presence, multiple vendor detections, and the use of a Cloudflare front end are consistent with a generic phishing operation.

Defenders should continue to block the domain at perimeter firewalls, update URL filtering lists, and monitor the associated IP 188.114.97.3 for any resurgence. Threat hunting can include queries for recent traffic to the domain or its IP, and any correlation with credential‑stealing campaigns. Continuous re‑evaluation is advised in case the domain is re‑activated or repurposed.