treasury-quantnetwork[.]xyz

Analysis of treasury-quantnetwork.xyz shows a newly registered domain created on February 21, 2026 that was used to host a page titled "Quant Treasury Pool — Rewards Distribution". The site lacks an SSL certificate, indicating that traffic was unencrypted. Registration was completed through NiceNIC International Group Co., Limited and the domain resolves to the IP address 172.67.155.56, which is owned by Cloudflare, Inc. (AS13335) and geolocated in the United States. Nameserver records point to laura.ns.cloudflare.com and sullivan.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

The domain appears on five security blocklists and is actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. Gridinsoft assigns a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal analysis reports that four of ninety‑three security vendors flagged the domain, reinforcing the threat assessment.

Current monitoring indicates the site has been taken offline, but the underlying infrastructure remains under Cloudflare control. Defenders should immediately block the domain and its associated IP at perimeter defenses, update internal blocklists with the observed indicators, and monitor for any re‑registration attempts or similar domain patterns that reference "Quant Treasury" or related financial terminology. Continuous observation of Cloudflare‑hosted assets linked to this IP is recommended to detect potential resurrection of the phishing campaign.