sent[.]quicktent[.]org

PhishDestroy identifies sent.quicktent.org as an active phishing domain targeting users searching for tent rental services. This site is designed to mimic legitimate rental platforms, tricking victims into submitting payment details or personal information under false pretenses. The threat may involve fake invoices, bogus booking confirmations, or fraudulent payment portals that drain funds or harvest credentials for later exploitation. This domain was flagged based on multiple technical indicators. As of the latest scan, VirusTotal shows 4 out of 95 security engines detecting malicious activity, indicating the site has not yet been widely flagged. The domain resolves to the IP address 91.229.239.28 and uses a Let's Encrypt SSL certificate (serial number E7), which provides a false sense of security. It was registered through Fewmoretaps OU, operating under the name Trustname.com, a registrar often associated with newly created phishing domains. The lack of detections combined with its recent registration suggests this is a fresh campaign still evading detection. If you visited sent.quicktent.org or entered any information on the site, take immediate action. First, disconnect the device you used from the internet to prevent potential data exfiltration. Run a full antivirus scan using updated security software to detect any malware or spyware that may have been installed. Change passwords for any accounts accessed on the same device, especially financial or email accounts, using a different device for added security. Monitor bank statements and credit reports for unauthorized transactions, and consider placing a fraud alert with credit bureaus. Report the incident to PhishDestroy and local cybercrime authorities to help track and mitigate the campaign. Never re-enter credentials or payment details on suspicious sites, even if they appear legitimate.