The domain qubeticschain.live was registered on July 25 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. Its authoritative name servers are mckenzie.ns.cloudflare.com and seth.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. DNS resolution points to the IPv4 address 216.198.79.1, which is the sole host associated with the domain at the time of analysis. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, confirming prior detection of malicious activity.
VirusTotal scanned the domain with 91 antivirus and URL scanning engines; none reported a detection. While the lack of detections may suggest a low immediate payload presence, the zero‑count result does not imply the site is benign, as many phishing pages evade static signatures. No public Safe Browsing, OTX, SSL certificate, HTTP response code, or trust‑score data were observed for the domain, leaving those vectors unverified. The rapid creation date, use of a reputable DNS provider, and immediate blocklist inclusion are typical of short‑lived phishing infrastructure.
Defenders should add qubeticschain.live to outbound filtering rules, monitor DNS queries for the associated IP, and ensure that any user‑initiated connections to the domain are blocked or quarantined. Continuous re‑scanning with dynamic analysis tools is recommended to detect any evolving payloads. Incident response teams should treat any credential submission to the domain as compromised and initiate credential rotation and user awareness alerts.