check[.]quicktent[.]org

This domain, check.quicktent.org, is identified as a phishing site impersonating TrustWallet, a cryptocurrency wallet service. The site is designed to deceive users into entering sensitive credentials or wallet recovery phrases, likely leading to unauthorized access and theft of digital assets. The page title, 'Transfer Trust Wallet,' suggests an attempt to mimic legitimate wallet transfer processes, increasing the likelihood of successful social engineering attacks targeting cryptocurrency holders. Analysis indicates the domain was registered on May 26, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with a history of hosting suspicious domains. It resolves to the IP address 91.229.239.28 and is flagged by 2 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, and has a Gridinsoft trust score of 0/100. Technical indicators reveal the use of Cloudflare for hosting, Let's Encrypt SSL certificates, and technologies such as Render, Caddy, jsDelivr, and HTTP/3, which are often leveraged to evade detection and enhance phishing site performance. Users who visited check.quicktent.org should assume their credentials or wallet recovery phrases may have been compromised. Immediate actions include revoking access to any connected wallets or accounts, transferring remaining assets to a new, secure wallet, and monitoring for unauthorized transactions. Enable multi-factor authentication on all accounts and report the incident to the impersonated service for further investigation. If sensitive information was entered, consider the affected wallet or account permanently compromised and avoid reusing passwords or recovery phrases across platforms.