telsquntum[.]com[.]luxowallets[.]com

This domain, telsquntum.com.luxowallets.com, operates as a crypto drainer, a specialized form of phishing infrastructure designed to siphon cryptocurrency assets from victims' wallets. The threat targets users through deceptive wallet connection prompts, exploiting smart contract interactions to execute unauthorized transactions. Once a user approves a malicious signature or transaction, the drainer automatically transfers funds to attacker-controlled addresses without further consent, often emptying wallets within seconds of interaction. The attack vector typically involves fake airdrop claims, token swaps, or liquidity mining scams, leveraging social engineering to trick users into engaging with the malicious interface. Analysis indicates this domain was registered on April 06, 2026, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. Infrastructure review shows the domain resolves to IP address 198.251.89.144 and uses a Let's Encrypt SSL certificate, providing a false sense of legitimacy. The domain appears on three security blocklists and is flagged by 15 out of 95 security vendors on VirusTotal, including confirmed detections from wallet security providers. The unique seed fec426 suggests a targeted campaign, potentially linked to a broader network of crypto drainers sharing similar naming conventions and hosting patterns. Users who visited telsquntum.com.luxowallets.com or interacted with its interface should immediately revoke all active wallet connections and approvals via their wallet's security settings. All connected wallets should be considered compromised, necessitating the transfer of remaining assets to new, secure wallets with fresh seed phrases. Review transaction histories for unauthorized transfers, particularly those involving token approvals or contract interactions. Monitor for follow-up phishing attempts via email or social media, as attackers may attempt to exploit compromised data for secondary attacks. Report the domain to relevant security platforms to assist in broader threat mitigation efforts.