Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
qubitapp.wiki shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 4 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website, served from the domain qubitapp.wiki, presents itself under the page title "Qubit Inu | Airdrop". It appears to be a token-promotion landing page built around a cryptocurrency airdrop, aimed at visitors looking for free or early token allocations. Its apparent purpose is to attract participants to a crypto-asset campaign, and visitors are likely to be asked to take follow-on actions.
Scam/Impersonation Risk
This assessment is clearly cautionary. Contradictory signals are present: multiple independent threat-intelligence sources currently flag the domain as malicious or suspicious, and the site is treated as blacklisted on that basis. It also matches a known phishing pattern. This is a hard contradiction, and it is decisive. Protective hosting and a valid certificate do not offset it. The combination of an airdrop-themed homepage, a very recently registered domain, and these reputation hits is a well-known profile for token-giveaway lures that steer visitors toward credential or asset-handling steps. No conflicting legal identities or explicit brand impersonation were observed, but this does not reduce the weight of the reputation findings. During automated interaction, the homepage generated heavy third-party request traffic, with roughly half of its page activity going to external destinations. It also sent a data submission to an external destination that is not on the recognized-service list. No wallet-connection prompts, clipboard tampering, or hidden forms were detected during these runs, so the concern rests on the reputation findings and external data flows rather than a demonstrated wallet drainer.
- Homepage, as titled "Qubit Inu | Airdrop": the airdrop framing matches a high-risk token-promotion archetype, and the site's content is sparse.
- Threat intelligence: two sources rate the domain malicious and one rates it suspicious. A further external blacklist listing corroborates this, and a known-phishing indicator is also present.
- Homepage behavior: 70 external data requests were recorded across three runs, and one data submission went to a non-whitelisted external destination.
- Domain provenance: registered 2026-06-24, about 0.36 years (~4 months) old, so the domain has no long-term track record.
Regulatory Verification Notes
The site presents no verifiable licensing or registration information on the pages analysed, and the on-page disclosure position is unclear. For a site inviting participation in a crypto-asset campaign, that is a verification gap. By itself it would not indicate wrongdoing, but here it sits alongside confirmed reputation hits. The identity of the real-world operator is not independently established, so no legitimacy conclusion can be drawn. The domain registration is privacy-protected, which is treated here as an administrative matter rather than a finding in itself. No third-party broker or regulator listing matched this site, so there is no external reputational context in either direction. The domain was also not recognized in the DeFi protocol directory consulted, which means no independent footprint supports any protocol claim.
- Registration: domain registered through NameSilo, LLC, expiring 2027-06-24, with registrant details masked by a privacy service.
- Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
- Transport security: TLS certificate issued by WE1 (domain-validated only, DV), valid to 2027-01-19. DV validation confirms control of the domain, not the identity of the operator.
- DeFi directory: no DeFi protocol listing, so no TVL or market-cap figure is available for corroboration.
What to Verify Next
Before any interaction beyond viewing, independently confirm whether a project called Qubit Inu exists and whether this domain is its official address. Use the project's announcements on channels reached independently of this site, not links from it. Check whether any regulator or registry lists an operator for the airdrop. Treat any claim of token allocations, eligibility checks, or claim fees as unconfirmed until the official source is established. Also confirm the official support and contact channels through an independent route, and re-check the domain's threat-intelligence status for any delisting before reconsidering engagement.
- Homepage airdrop framing: eligibility and claim mechanics should be validated against an independent source.
- Domain reputation: current listings across multiple sources should be re-checked for any change before engagement.
- Domain age: the roughly four-month history means no established operator track record can be relied on.
Summary Verdict
The available evidence supports an elevated-risk posture. Confirmed threat-intelligence detections, together with a phishing-pattern match, outweigh the basic technical hygiene the site shows. The site cannot be treated as legitimate or its operator as trustworthy on current evidence.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The real origin server was not observable. This is a mitigating factor only: the edge protection does not vouch for the site's content or operator. It also limits independent hosting verification and can mask rapid content changes. The edge-only visibility therefore adds no assurance against the reputation findings above.
Closing Assessment
Read-only viewing is the only use consistent with this assessment. Logging in, entering credentials, connecting a wallet, or making any payment or transfer through this site should be avoided until the threat listings are resolved and the operator is independently established.
Written analysis generated 2026-11-01 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, registration and ownership, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered between three and six months ago.Hosting and network
rule:DNS_YOUNG_6M
03 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
04 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 15% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of qubitapp.wiki.
- The request stayed on qubitapp.wiki. It was not redirected to another domain. Clear
- Registration is published under NameSilo, LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-24. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NameSilo, LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3037::6815:56ae |
| Name servers | pam.ns.cloudflare.com, michael.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-19 |
| Domain age | 0.36 years (continuous registration) |
| Domain expiry | 2027-06-24 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about qubitapp.wiki at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.