miningwalletactivation[.]com[.]quonticfinance[.]org

PhishDestroy identifies the domain miningwalletactivation.com.quonticfinance.org as an active cryptocurrency-draining phishing campaign impersonating Quontic Finance, a known financial institution offering digital asset services. The domain is currently operational and disseminating fraudulent withdrawal or wallet-activation lures to deceive users into connecting malicious wallets or divulging private keys. This threat poses a high risk to individuals and organizations interacting with cryptocurrency platforms, as drained assets are typically irrecoverable once transferred to attacker-controlled wallets.

This domain was flagged by 7 of 95 VirusTotal vendors as of the latest scan, indicating that detection signatures have not yet been widely updated. It resolves to IP address 217.182.199.96 and was registered through NameSilo, LLC on August 6, 2025. The infrastructure is newly established and currently unlisted on major threat intelligence blocklists. Domain trust scores remain neutral due to the absence of prior reputation data and minimal sandbox detections. The unique seed identifier f9799b has been assigned to correlate related infrastructure and campaigns.

The threat remains active as of the latest assessment, with no comprehensive blocklisting in place. Users are urged to avoid interacting with this domain and any subdomains under quonticfinance.org unless verified through official documentation. Security teams should implement network-level blocking for the IP 217.182.199.96 and the full domain string. Monitoring for similar typosquatting patterns involving "miningwalletactivation" or "quonticfinance" is recommended. Report any related incidents to PhishDestroy or relevant financial cybercrime units with the seed f9799b for correlation and takedown support.