quent0nest[.]sbs
“Ledger Wallet (ex. Ledger Live) - Crypto App | Ledger”
quent0nest.sbs — 内容不可用. 品牌冒充:Ledger; 诈骗类型:Generic Phishing. 证据摘要: VirusTotal 16/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 2 alerts; URLScan malicious verdict; 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 95/100. 注册商: NameSilo.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, quent0nest.sbs, operates as a crypto drainer, specifically designed to target cryptocurrency wallet users with malicious scripts that automatically siphon digital assets upon interaction. Analysis indicates the domain employs deceptive tactics, such as fake token airdrops or wallet verification prompts, to trick users into connecting their wallets. Once connected, the embedded malicious code executes unauthorized transactions, draining funds without the victim's explicit consent. The threat primarily affects users of decentralized finance platforms and non-custodial wallets, where transaction signing is required for execution. Infrastructure analysis reveals concrete evidence of malicious intent. The domain was registered on April 08, 2026, through NameSilo, LLC, a registrar frequently associated with high-risk domains due to its lenient registration policies. It resolves to the IP address 188.114.97.3, which has been linked to multiple phishing campaigns. Security vendors have flagged quent0nest.sbs on VirusTotal, with 16 out of 95 engines detecting malicious activity. Additionally, the domain appears on four security blocklists, including those maintained by MetaMask and ScamSniffer, further corroborating its classification as a high-risk threat. The Gridinsoft trust score of 0/100 underscores the domain's complete lack of credibility. Users who have visited quent0nest.sbs or interacted with its content should take immediate action to mitigate potential damage. First, disconnect any wallets that may have been linked to the domain by revoking permissions via wallet management tools or blockchain explorers. Next, transfer remaining assets to a new, secure wallet to prevent further unauthorized access. Monitor transaction histories for any suspicious activity and report the domain to relevant security platforms to aid in broader threat mitigation efforts. If funds have already been lost, file a report with local cybercrime authorities and provide all available transaction details for investigation.
网络安全情报 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | quent0nest.sbs |
malicious | Sinkholed |
| Hagezi Threat Feed | quent0nest.sbs |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
SHORTDOT 域名区 · 公开证据
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of quent0nest.sbs · checked Jun 26, 2026
证据与外部报告
PD-20260408-947DDF Recipient: abuse@namesilo.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。