qubetics-com-claim[.]pages[.]dev

qubetics-com-claim.pages.dev is currently active and distributing a crypto drainer malware, as identified by PhishDestroy. The domain leverages deceptive tactics to trick victims into connecting cryptocurrency wallets, enabling unauthorized fund transfers. No known brand impersonation has been observed at this stage, but the threat is classified as high-risk due to the active malware distribution and potential for financial harm.

This domain was flagged by 1 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security tools despite its malicious activity. Registered through Cloudflare, Inc., the domain resolves to IP 172.66.44.169 and utilizes a Google Trust Services SSL certificate to appear legitimate. The seed identifier 375f59 confirms this is a newly tracked threat with evolving indicators. While lacking a blocklist count at this time, the absence of VirusTotal detections suggests a stealthy operation actively evading traditional detection mechanisms.

PhishDestroy assesses the risk level as under investigation but actively dangerous due to confirmed crypto drainer activity. Users who have interacted with this domain should immediately revoke wallet connections, transfer assets to a secure wallet, and scan devices for malware. Avoid any further interaction with qubetics-com-claim.pages.dev and report the domain to security platforms. Monitor wallet activity closely for unauthorized transactions, as crypto drainers often operate with delayed extraction mechanisms to maximize theft. Exercise heightened caution when accessing domains hosted on pages.dev or Cloudflare services, as threat actors frequently exploit these platforms for malicious infrastructure.