quaticvkb[.]com

This domain, quaticvkb.com, is flagged as a brand_impersonation threat targeting the financial services brand 'across.' Analysis indicates the site was designed to mimic Quantic Finance Bank, as evidenced by its page title and structured content. No drainer kit signatures were identified in the available intelligence, but the domain's intent aligns with credential harvesting or fraudulent financial transactions. Infrastructure analysis reveals the domain was registered through OwnRegistrar, Inc., and resolves to the IP address 192.3.190.186, hosted on AS36352 (HostPapa) in the United States. Created on April 24, 2025, the domain appears on one security blocklist and is flagged by 12 out of 95 security vendors on VirusTotal. No SSL certificate was detected, increasing the likelihood of interception of unencrypted traffic. Google Safe Browsing (GSB) does not currently list the domain, but it has been blocked by PhishDestroy. The domain is currently offline, likely due to takedown actions or suspension by the registrar. While no active threat is present, the infrastructure remains a residual risk. Users who interacted with the domain should assume credential exposure and monitor financial accounts for unauthorized activity. Organizations are advised to update blocklists with the domain and IP address to prevent future access attempts. The elevated risk classification stems from the domain's recent creation, lack of encryption, and confirmed impersonation of a financial institution.