quicktent[.]org

This domain, quicktent.org, is flagged for brand_impersonation targeting Trust Wallet, a cryptocurrency wallet service. Analysis indicates the site presents a fraudulent interface titled 'Transfer Trust Wallet,' designed to deceive users into entering sensitive credentials or transferring assets to attacker-controlled addresses. The threat aligns with known cryptocurrency drainer kit tactics, where victims unknowingly authorize transactions via malicious smart contracts or phishing prompts. Infrastructure analysis reveals the domain was registered on May 26, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolves to the IP address 91.229.239.28 and uses a Let's Encrypt SSL certificate, which, while providing HTTPS encryption, does not validate legitimacy. VirusTotal reports 1 out of 95 security vendors flagging the domain as malicious. Google Safe Browsing (GSB) status is not explicitly provided, but the single detection on VirusTotal suggests limited visibility or evasion techniques. No blocklist data is currently available, though the domain remains active and unresolved by major threat intelligence platforms. The domain remains operational as of the latest verification, posing an ongoing high-risk threat to users. Response actions should include immediate blacklisting of the domain and IP across security controls, alongside monitoring for related infrastructure (e.g., subdomains, associated IPs). Users are advised to verify wallet addresses via official channels and avoid interacting with unsolicited transfer prompts. The low detection rate (1/95) underscores the need for proactive hunting using indicators such as the domain, IP, and SSL certificate thumbprint to identify potential compromises.