Is quant-network.lol a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page presence on the recently registered domain quant-network.lol. Its homepage is titled "AMLSECURE", which pairs compliance-security wording with a "quant network" domain name. The captured page content is brief, and the evidence does not establish a specific product, service, or business model.

Scam/Impersonation Risk

The evidence shows a confirmed blacklisting and an elevated risk of malicious activity. Multiple major security vendors independently classify the domain as malicious, and a further vendor rates it suspicious. The detections are broad enough to trigger an external-reputation safeguard that overrides any positive technical signals. The available evidence does not say which specific threat category the vendors assigned, so the report does not claim phishing or brand impersonation. No conflicting legal identities were observed, and no on-page impersonation indicators were captured. The risk rests on external threat detections, compounded by a very young domain with almost no independent history. The behavioural sandbox found no wallet-drainer activity, clipboard hijacking, hidden forms, cloaking, or credential posts to external destinations. These clean results do not offset the vendor detections. Sessions on the homepage did generate heavy third-party traffic, with a large share of requests going to external hosts. The domain's rapid-change profile and edge-only visibility also leave room for content to be swapped without notice. Evidence:

• Homepage and external reputation: 16 malicious and 1 suspicious vendor verdicts, including three tier-one security vendors, and an active blacklist listing.
• Domain provenance: registered 2026-08-30 (~0.15 years old).
• Archive depth: 1 archive snapshot, first and last seen 2026-09-09, so no meaningful historical continuity exists.
• Homepage behaviour across 3 sandbox runs: 63 external XHR requests and 6 external POSTs, all to whitelisted destinations, with external traffic reaching about 60% on the heaviest page load.

Regulatory Verification Notes

The captured pages contain no clear licence, registration number, or named legal entity, so on-page disclosure is unclear and the operator's real-world identity cannot be tied to the site. This is a verification gap, not proof of wrongdoing, and it matters here only because it coincides with the external detections. The domain's ownership details are incomplete, which adds to the ownership opacity. No third-party broker or regulatory-database match was found. That absence is neutral, and it does not substitute for any form of authorisation. The transport-layer encryption is valid but is a basic domain-validated certificate, which proves control of the domain and says nothing about who operates it. Evidence:

• Registration: Registrar is Global Domain Group LLC; registration runs to 2027-08-30.
• TLS: certificate issued by WE1 (DV), valid to 2026-11-28, with 33 days remaining.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage identity: titled "AMLSECURE" with no named operating company or licence reference in the captured content.

What to Verify Next

Any prospective interaction should first be tested against the independent threat-detection record, since the vendor detections are the decisive concern. Before any engagement, the claimed operator should be identified through an independent route, such as a corporate registry search, and any licence claims confirmed with the relevant regulator. Communication should come only from contact channels confirmed through an offline or separately verified route. The relationship between the "AMLSECURE" branding and the "quant network" domain name should also be established, because the evidence does not explain it. If this domain is linked from an email, advertisement, or message, the sender should be treated as unverified until the above checks are done. Evidence:

• Reputation: the domain has an active blacklist listing and malicious classifications from several security vendors.
• Branding: the homepage title says "AMLSECURE" while the domain says "quant-network", and no page explains the link.
• Disclosure: the captured pages name no operating entity.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, together with a very young domain and no independent track record, outweigh the valid encryption and the clean behavioural testing. Legitimacy cannot be inferred, and the operator's identity remains unestablished.

Infrastructure Integrity

The site is served entirely through Cloudflare, a mainstream CDN and WAF provider, and every observed address is a CDN edge node. The true origin host was not observable, so hosting cannot be independently verified. The CDN is a mitigating factor only. It gives no assurance about the operator and cannot offset the external threat detections. The edge-only visibility also means content can change without any visible change to the hosting footprint.

Closing Assessment

The site should not be used for login, credential entry, or any financial interaction, and no files should be downloaded from it. Any contact should be limited to non-interactive, read-only viewing from an isolated environment until the detections are cleared.