qouta-venice[.]com

This domain, qouta-venice.com, is identified as an active phishing site designed to function as a crypto wallet drainer. The site impersonates a legitimate quota or desk management platform under the guise of 'Venice — Quota Desk,' luring users into connecting their cryptocurrency wallets. Once connected, the site executes unauthorized transactions, siphoning digital assets from victims' wallets without consent. The threat primarily targets users familiar with decentralized finance (DeFi) or wallet management interfaces, exploiting trust in branded or seemingly official platforms. Analysis indicates the domain was registered on June 06, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious domain registrations. As of the latest assessment, the domain is flagged by 1 out of 95 security vendors on VirusTotal, a relatively low detection rate that may reflect evasion techniques or recent activation. Additionally, the domain appears on three independent security blocklists, including those maintained by cryptocurrency security and phishing detection communities. The page title, 'Venice — Quota Desk,' is consistent with tactics used to mimic legitimate service portals, further enhancing the deception. Users who have visited qouta-venice.com or interacted with its content should immediately disconnect any connected wallets and cease all engagement with the site. If wallet credentials or recovery phrases were entered, the affected wallet should be considered compromised, and all assets should be transferred to a new, secure wallet. It is also recommended to monitor transaction histories for unauthorized activity and report the domain to relevant security platforms for broader awareness. Given the high-risk classification and active status of this threat, vigilance and prompt action are critical to mitigating potential financial losses.