qubeticsverification[.]web[.]app

This domain is flagged as a high-risk brand impersonation threat, specifically targeting users of the Across protocol and broader cryptocurrency communities. Analysis indicates the domain is designed to deceive victims by masquerading as a legitimate Layer 1 blockchain presale, a common tactic in cryptocurrency-related fraud schemes. Infrastructure analysis reveals the domain qubeticsverification.web.app is hosted on IP address 199.36.158.100 (AS54113 Fastly, Inc., US) and is registered through Google LLC. The SSL certificate is issued by Google Trust Services (WR4). VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. The page title, 'Qubetics | Layer 1 Blockchain | Best Crypto Presale of 2025 | Qubetics,' explicitly targets users seeking cryptocurrency investment opportunities, further confirming its fraudulent intent. No creation date is available, but the domain remains active and operational. Mitigation steps for this threat type include immediate blocking of the domain and associated IP address (199.36.158.100) at the network perimeter. Security teams should monitor for any internal traffic to this domain or related infrastructure, particularly within environments where cryptocurrency transactions or discussions occur. End-user education should emphasize the risks of interacting with unsolicited presale or investment opportunities, especially those advertised through unofficial channels. Additionally, organizations should review and enforce policies restricting access to newly registered or low-reputation domains, particularly those hosted on content delivery networks or cloud providers.