cuberex[.]com

On 24 July 2026, investigators observed that the domain cuberex.com is currently offline but retains a set of indicators consistent with a malicious cryptocurrency‑focused online casino operation. The domain was registered on 4 August 2025 through NiceNIC International Group Co., Limited and resolves to the IPv4 address 69.5.189.58, which is owned by AS42624 Global‑Data System IT Corporation and geolocated to Switzerland. No TLS certificate is presented, indicating that the site was served over HTTP only. The authoritative name servers listed are ns1.nameserverhub.com, ns2.nameserverhub.com, ns3.nameserverhub.com and ns4.nameserver, which are commonly observed in other abuse‑related infrastructure.

The page title returned from the site, “CUBEREX | Play at the best online casino based on Blockchain,” together with the classification of the scam as a Crypto Scam and the identification of a Gambler Scam phishing kit, point to an attempt to lure victims into a fraudulent blockchain‑based gambling platform. Tracking scripts from Twitter Ads, Facebook Pixel, and Cloudflare Browser Insights were detected, suggesting the operators used third‑party analytics to monitor traffic and possibly harvest credentials. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy. Reputation scoring from Gridinsoft assigns a zero‑point trust score out of 100, and VirusTotal reports that 11 of 95 scanned security vendors flagged the domain, reinforcing the malicious assessment.

While the site is no longer reachable, the residual infrastructure—particularly the IP address, name server configuration, and associated tracking services—remains viable for future campaigns. Defenders should add the IP 69.5.189.58 and the domain cuberex.com to network‑level blocklists, monitor for re‑registration attempts, and scrutinize outbound traffic to the listed name servers for anomalous connections.