# qubicreviewdapp.pages.dev — SUSPICIOUS

> qubicreviewdapp.pages.dev is a crypto drainer impersonating Qubic review sites. 0/95 VirusTotal detections. Block this domain immediately.

## Summary
This domain poses an active threat under investigation with a medium risk level. PhishDestroy identifies qubicreviewdapp.pages.dev as a crypto drainer impersonating Qubic review platforms. The site is hosted on Cloudflare IP 188.114.97.3 and remains undetected by VirusTotal with 0/95 security engines flagging it as malicious. Registered through Cloudflare, Inc., the domain utilizes a Google Trust Services SSL certificate, yet its association with a crypto drainer scheme demands heightened scrutiny.  The domain demonstrates several indicators of compromise and evasion tactics. Analysis shows zero detections on VirusTotal (0/95 engines), no inclusion on public threat intelligence blocklists, and a reliance on Cloudflare’s infrastructure to obscure its origin. The use of a Google-issued SSL certificate adds a veneer of legitimacy, while the Pages.dev subdomain points to a free, low-friction hosting service commonly exploited by threat actors. Despite its clean reputation in automated scans, behavioral indicators suggest a focus on cryptocurrency theft, likely targeting users searching for Qubic project reviews or related services. Its recent registration and lack of historical data further increase risk.  Mitigation for users and network defenders is critical. Block access to qubicreviewdapp.pages.dev at the DNS and network levels using threat intelligence feeds or firewall rules. Alert users to avoid clicking links from untrusted sources, especially those promising reviews or incentives related to Qubic or similar blockchain projects. Report this domain to Cloudflare Abuse and threat intelligence platforms to accelerate takedown. Implement browser-based protections like uBlock Origin or Netcraft Extension to block known crypto drainers. Monitor outbound traffic for connections to 188.114.97.3 or related IPs. Due to the high specificity of the threat—crypto drainer impersonation—proactive blocking and user education remain the most effective defenses against credential and asset theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b842a594-7b58-40ec-b0f4-2bee8513bd4f
- PhishDestroy: https://phishdestroy.io/domain/qubicreviewdapp.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/qubicreviewdapp.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/qubicreviewdapp.pages.dev/
Last updated: 2026-04-13