quantumtradevest[.]com[.]tr

Analysis of quantumtradevest.com.tr shows a domain registered on October 11, 2023 that is currently taken offline. The site presented the page title "Quantumtradevest – Safe investment with Quantumtradevest" and was flagged as a brand‑impersonation campaign targeting Google. DNS resolution points to IP address 104.21.16.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The domain is served by the authoritative nameservers itzel.ns.cloudflare.com and thaddeus.ns.cloudflare.com, indicating use of Cloudflare’s DNS services.

No SSL certificate was observed for the domain, meaning traffic would be unencrypted if the site were active. Reputation data includes a Gridinsoft trust score of 32 out of 100, suggesting a low trust rating. The domain appears on two security blocklists and has been actively blocked by PhishDestroy and Enkrypt. VirusTotal scanned the domain with 95 antivirus engines and reported no detections, but the lack of detections does not constitute proof of safety.

The combination of brand impersonation targeting Google, the investment‑oriented page title, and the low trust score aligns with typical phishing infrastructure. Uncertainty remains regarding the exact content of the site, any credential‑harvesting forms, and the presence of malicious payloads, as no page content beyond the title has been publicly disclosed. Defenders should continue to block the domain at the network perimeter, incorporate the observed IP and domain into threat‑intel feeds, and monitor for any re‑appearance or related infrastructure. Email and web filtering solutions should be tuned to detect Google‑related impersonation attempts, and incident response teams should treat any traffic from this domain as potentially malicious until further analysis confirms otherwise.