qantasmoney-reward[.]icu

The domain qantasmoney-reward.icu is classified as an active generic phishing threat as of July 29, 2026. This assessment is based on several technical indicators present in available intelligence. The domain was registered on March 26, 2026, using the registrar NAMEMART PTE. LTD. It resolves to the IP address 137.220.221.138. The nameservers associated with this domain are ns1.domainnamedns.com, ns2.domainnamedns.com, ns3.domainnamedns.com, and ns4.domainname, which are commonly observed in the setup of ephemeral or suspicious domains.

This domain is currently listed on one security blocklist, specifically PhishDestroy, confirming at least one external threat intelligence provider has identified malicious activity or intent. Furthermore, 11 out of 91 security vendors on VirusTotal have flagged this domain, indicating that multiple detection engines consider the domain unsafe or associated with phishing behavior. The exact content hosted on the site has not been analyzed, so the specific tactics, techniques, or procedures in use are not documented in the current data set.

Given the elevated risk level, defenders should block this domain at the network perimeter and monitor for any attempted access to or from the associated IP address. Continued monitoring for related domains registered through the same registrar or using similar DNS infrastructure is recommended, as threat actors often utilize domain name and hosting patterns. Security teams should update phishing blocklists and user awareness resources to include this domain. If the domain is observed in inbound communications or web traffic, treat as a security event and initiate incident response procedures as per organizational protocols. Further investigation is warranted to determine if this domain is part of a wider phishing campaign or infrastructure cluster.