cubes-capital[.]com

This domain, cubes-capital.com, is flagged as a generic phishing site targeting cryptocurrency users through brand impersonation. Analysis indicates the site masquerades as CUBE Ventures, a Web3 investment platform, to deploy a crypto drainer kit designed to siphon digital assets from victims' wallets. The page title, 'CUBE Ventures | Driving the future of Web3,' reinforces the deception, while the underlying infrastructure exhibits characteristics typical of phishing campaigns, including the use of Cloudflare services to obscure malicious activity. Infrastructure analysis reveals multiple technical indicators of compromise. The domain resolves to IP address 188.114.97.3 and was registered on February 21, 2026, through Hello Internet Corp, a registrar frequently associated with high-risk domains. VirusTotal reports 2 out of 95 security vendors flagging the domain as malicious, while it appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. The domain's trust score is 0/100, and it employs Cloudflare Browser Insights and HTTP/3, common in phishing sites to evade detection. The SSL certificate is issued by Google Trust Services, which, while legitimate, is often exploited to lend false credibility to fraudulent sites. As of the latest assessment, cubes-capital.com has been taken offline, reducing immediate exposure to potential victims. However, the domain's infrastructure remains a residual risk, as threat actors may reactivate it or repurpose the underlying components for future campaigns. Users who interacted with the site are advised to revoke any wallet permissions, monitor for unauthorized transactions, and verify the legitimacy of any Web3-related communications. Organizations should update blocklists to include this domain and its associated IP address to prevent future access attempts. The elevated risk level persists due to the domain's history and the likelihood of re-emergence under similar infrastructure.