Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://qubeticschain.live/
Detected Brand
Qubetics
Country
International
Confidence
95%
HTTP Status
200
Report ID
b02812f2-083…
Analyzed
2026-08-29 00:25
Final URL (after redirects)
https://www.qubeticschain.live/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D631EFF1B09B94231232C1C2A592FB6236D3044DC4C566E11BFE53E896E5C5BF95B419 |
|
CONTENT
ssdeep
|
24:hR/C/2N/+TN/0AKZh/7k5qliZZb+5RHI1HXfaXdC+ihdrOdky:TnNmTNMdpWqliZGxEHXCXdC+ihdrOdky |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cccc3331cece6c31 |
|
VISUAL
aHash
|
8008183c18180000 |
|
VISUAL
dHash
|
2a90706130322913 |
|
VISUAL
wHash
|
ff3c183c18191b1b |
|
VISUAL
colorHash
|
38000e00000 |
|
VISUAL
cropResistant
|
2a90706130322913 |
Code Analysis
Risk Score
9/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🔬 Threat Analysis Report
• Threat: Crypto Airdrop Scam
• Target: Qubetics Investors
• Method: Malicious Token Claim
• Exfil: Wallet Drainer Interaction
• Indicators: Obfuscated JS, Urgency tactics
• Risk: Critical
🔒 Obfuscation Detected
- eval
- unicode_escape
- base64_strings
📊 Risk Score Breakdown
Total Risk Score
95/100
Contributing Factors
JavaScript Obfuscation
Presence of eval/base64 suggests payload shielding
Social Engineering
Airdrop/Claim tactic
Domain Infrastructure
Suspicious TLD/Age
🔬 Comprehensive Threat Analysis
Threat Type
Qubetics Phishing Landing Page
Target
Qubetics users (International)
Attack Method
Brand impersonation + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- 71 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Qubetics
Official Website
Unknown
Fake Service
Crypto Token Claim/Airdrop
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Wallet Drainer
The site uses a malicious script to prompt users to connect a Web3 wallet (e.g., MetaMask), subsequently prompting for transactions that drain assets.
Secondary Method: Airdrop Phishing
Luring users with fake 'reborn' status to claim nonexistent tokens.
Target Blockchain
Multiple (Bitcoin/Ethereum/Solana)
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
qubeticschain.live
Registered
Unknown
Registrar
Unknown
Status
Unknown
🤖 AI-Extracted Threat Intelligence
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.