cubashp[.]vip

Analysis indicates that cubashp.vip is an active phishing domain, with a page title identified as 'Cuba Shop'. The domain was created on June 23, 2026, and is currently registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. This domain has been flagged on two security blocklists, indicating a recognized association with malicious activities. Infrastructure analysis reveals that it resolves to the IP address 172.67.132.35 and employs technologies such as Vue.js, Cloudflare Browser Insights, Cloudflare, and HTTP/3. The domain has been detected in 14 threat intelligence pulses on AlienVault OTX, further substantiating its malicious nature. The Gridinsoft trust score for this domain is alarmingly low at 0/100, suggesting a high likelihood of fraudulent intent. Furthermore, 5 out of 95 security vendors on VirusTotal have flagged this domain. It is currently blocked by PhishDestroy and BLP-Malware, which adds to the evidence of its phishing activities. Given the high-risk classification, organizations should implement measures to block access to this domain and educate users about the risks associated with phishing attacks.