hub-dappradar[.]biz

hub-dappradar.biz is currently active and has been identified as an investment‑type scam that targets the Facebook brand. The site appears on two security blocklists, PhishDestroy and ScamSniffer, and 6 of 95 VirusTotal scanners have flagged it as malicious. Infrastructure analysis shows the domain resolves to IP 142.250.186.164, which belongs to AS15169 (Google LLC) in the United States. The domain uses Cloudflare DNS with nameservers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, and Cloudflare services including HTTP/3 are detected. The TLS certificate is issued by Google Trust Services under the WE1 label, indicating a valid certificate chain, while the HTTP response code is 502, suggesting the backend service is unavailable or misconfigured. Registration data indicates the domain was created on 22 September 2025 through Dynadot LLC, and the page title returned by the server is "Google," a mismatch with the asserted Facebook impersonation. Gridinsoft assigns a trust score of 0/100, reinforcing the high‑risk assessment. Defenders should add hub-dappradar.biz to blocklists, enforce outbound filtering for connections to the associated IP address, and monitor DNS queries for the domain. Because the site is still live, ongoing surveillance is recommended to detect any changes in content or additional infrastructure that could be leveraged for further credential‑harvesting or financial fraud campaigns.