quantuminvex-pt[.]live

The domain quantuminvex-pt.live was observed on July 12, 2026 and classified as a high‑risk generic phishing site. The landing page returns HTTP 200 and presents a title reading “Quantum Invex | Plataforma oficial de negociação com inteligência artificial,” which mimics a legitimate AI‑driven trading platform. The site is secured with a Let’s Encrypt certificate (E8) and resolves to the Cloudflare‑owned address 172.67.169.22.

Infrastructure analysis shows the domain was created on May 15, 2026 and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Authoritative name servers are todd.ns.cloudflare.com and karsyn.ns.cloudflare.com, both belonging to Cloudflare’s network. The IP resolves to a location in Canada (Cloudflare, Inc.) and the SSL certificate is valid, indicating the use of a reputable CDN to obscure the true hosting environment. The page’s Gridinsoft trust score is 0 out of 100, and the domain appears on a single security blocklist, confirming its malicious reputation.

Threat intelligence sources corroborate the malicious intent. AlienVault OTX lists the domain in one threat‑intel pulse, and VirusTotal reports that 3 of 95 security vendors have flagged the domain as malicious. PhishDestroy has already blocked the domain, demonstrating that at least one anti‑phishing feed has identified it as a phishing vector. The low vendor detection rate suggests the campaign may be in an early stage or employing evasion techniques, but the presence on blocklists and the zero trust score underline its high risk.

Defenders should immediately block quantuminvex-pt.live at perimeter defenses and DNS filters. Monitoring for outbound connections to 172.67.169.22 is advised, as the IP may be shared with other malicious actors under the same CDN. Continuous re‑evaluation of the domain’s reputation should be performed, given the evolving detection landscape, and any associated user credentials or session data should be considered compromised.