quantix-finance[.]site

Analysis indicates that the domain quantix-finance.site is currently resolving to the IPv4 address 186.2.175.35. The authoritative name servers for the zone are launch1.spaceship.net and launch2.spaceship.net, which are consistent with other infrastructure observed in recent phishing campaigns. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy filtering service. VirusTotal records show that the domain was examined by 91 scanning engines, none of which raised a detection at the time of analysis; this absence of alerts does not constitute evidence of benign intent.

The site is flagged as a generic phishing operation and remains active as of the report date, July 29, 2026, with its risk status marked as under investigation. No public SSL certificate details, HTTP response codes, or page title information are available in the current intelligence set, limiting the ability to assess the surface‑level presentation of the site. Likewise, no Safe Browsing, OTX, registrar reputation, or additional trust‑score metrics have been disclosed, leaving those vectors unverified.

Defenders should continue to block traffic to quantix-finance.site at the network perimeter, update intrusion‑prevention signatures to include the observed IP address and name‑server pair, and monitor for any new indicators that may emerge from future scans or community reports. Given the active blocklist entry and the presence of the domain on PhishDestroy, organizations using email filtering or web‑gateway solutions should ensure that the domain is explicitly denied. Ongoing collection of HTTP headers, certificate chains, and page content is recommended to enrich the intelligence profile and to confirm whether the site is being used to harvest credentials or to deliver additional payloads.