qubicreviewdapp[.]pages[.]dev

This domain poses an active threat under investigation with a medium risk level. PhishDestroy identifies qubicreviewdapp.pages.dev as a crypto drainer impersonating Qubic review platforms. The site is hosted on Cloudflare IP 188.114.97.3 and remains undetected by VirusTotal with 1/95 security engines flagging it as malicious. Registered through Cloudflare, Inc., the domain utilizes a Google Trust Services SSL certificate, yet its association with a crypto drainer scheme demands heightened scrutiny. The domain demonstrates several indicators of compromise and evasion tactics. Analysis shows zero detections on VirusTotal (1/95 engines), no inclusion on public threat intelligence blocklists, and a reliance on Cloudflare’s infrastructure to obscure its origin. The use of a Google-issued SSL certificate adds a veneer of legitimacy, while the Pages.dev subdomain points to a free, low-friction hosting service commonly exploited by threat actors. Despite its clean reputation in automated scans, behavioral indicators suggest a focus on cryptocurrency theft, likely targeting users searching for Qubic project reviews or related services. Its recent registration and lack of historical data further increase risk. Mitigation for users and network defenders is critical. Block access to qubicreviewdapp.pages.dev at the DNS and network levels using threat intelligence feeds or firewall rules. Alert users to avoid clicking links from untrusted sources, especially those promising reviews or incentives related to Qubic or similar blockchain projects. Report this domain to Cloudflare Abuse and threat intelligence platforms to accelerate takedown. Implement browser-based protections like uBlock Origin or Netcraft Extension to block known crypto drainers. Monitor outbound traffic for connections to 188.114.97.3 or related IPs. Due to the high specificity of the threat—crypto drainer impersonation—proactive blocking and user education remain the most effective defenses against credential and asset theft.