quantumtrustfin[.]com

The domain quantumtrustfin.com was registered on March 11, 2026 through TuringSign Inc. d/b/a Cosmotown and is currently listed as offline. Infrastructure analysis shows the domain resolves to IP address 213.111.152.217, which is hosted in Ukraine under ASN AS6698 owned by Virtual Systems LLC. The active SSL certificate is issued by Let’s Encrypt (R13), indicating a recently‑issued TLS layer. DNS configuration lists ns5.hostcreed.com and ns6.hostcreed.com as authoritative name servers, and the MX record points to the domain itself with priority 0, suggesting potential use of the domain for email spoofing. Web‑technology fingerprinting detected a LiteSpeed web server delivering content built with Bootstrap, jQuery, GSAP, OWL Carousel, and supporting HTTP/3, a stack commonly observed in fraudulent sites.

The page title returned by the server reads “Quantum Trust Fin - Dedicated to innovating, simplifying, and humanizing digital banking.” This title aligns with a brand‑impersonation campaign targeting the financial sector and is categorized as a Crypto Scam. VirusTotal scans recorded six positive detections out of ninety‑five participating security vendors, reinforcing the malicious assessment. The domain appears on one external blocklist and has been actively blocked by the PhishDestroy mitigation service.

Although the site is offline, the combination of a recent registration, Ukrainian hosting, a self‑signed email MX, modern web stack, and multiple vendor detections indicates a high likelihood of malicious intent. Defenders should continue to block the domain at perimeter defenses, monitor for any re‑activation attempts, and enforce email filtering rules to reject messages originating from its MX record. Threat intelligence feeds should be updated to include the domain’s indicators of compromise, and any inbound traffic to the associated IP address should be inspected for anomalous activity related to cryptocurrency fraud.