quant-resilient[.]com

Analysis of quant-resilient.com indicates a phishing domain targeting users of Polkadot-compatible wallet-to-dapp connection protocols. The domain, registered on February 21, 2026, through Tucows Domains Inc., resolves to 173.214.163.18, an IP address hosted by Interserver, Inc. (AS19318) in the United States. Infrastructure analysis reveals the use of LiteSpeed web server technology, SweetAlert2 for interactive pop-ups, jsDelivr for content delivery, and HTTP/3 protocol support. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The page title, 'Open protocol for connecting Wallets to Dapps,' directly references functionality associated with Polkadot and other blockchain ecosystems, suggesting an intent to deceive users seeking wallet integration tools.

The domain is actively blocked by multiple security vendors, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which classify it as malicious. It appears on four security blocklists, and one of ninety-three security vendors on VirusTotal flags it as suspicious. Gridinsoft assigns a trust score of 0/100, further supporting its classification as high-risk. Nameservers point to webhosting3008a.trouble-free.net and webhosting3008b.trouble-free.net, a configuration consistent with low-cost or bulletproof hosting environments.

As of July 24, 2026, the domain has been taken offline, though historical DNS records and detection data remain relevant for threat correlation. Defenders should treat this domain as part of a broader campaign targeting cryptocurrency users, particularly those interacting with Polkadot-based dapps. Blocking the domain at DNS and network levels, as well as monitoring for related infrastructure (e.g., shared IPs, nameservers, or SSL certificates), is recommended.