Is quant-proposal.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at quant-proposal.xyz presents itself as the corporate site of Quant Network Limited, a business-to-business fintech infrastructure vendor. It markets "programmable money" to banks, financial institutions and capital markets through the Overledger, Quant Flow, PayScript and Quant Fusion products. It also carries a $QNT token "Rewards Proposal" panel inviting visitors to vote on a reward distribution date, with a "Vote Now" button. Its apparent purpose is to promote enterprise infrastructure while steering token holders toward a governance and rewards interaction.

Scam/Impersonation Risk

The assessment shows an active contradiction. External threat-intelligence detections currently flag this domain, and one major security vendor and several further engines register it. This is a confirmed blacklist-level reputational hit that infrastructure quality cannot offset. The page borrows the full vocabulary of an established corporate brand: named products, sector targeting, a copyright line naming the legal entity, and claims such as "world leader in next-generation payments", "pioneers in programmability" and "patented technology". None of these claims is supported by cited evidence, and the site cannot be independently tied to the entity it names. The domain is a hyphenated, "proposal"-themed name on an uncommon, low-cost top-level domain, registered weeks ago. That is a pattern consistent with a lookalike property built around a token-governance lure, although automated page analysis did not formally confirm brand impersonation. The most sensitive element is the "Vote Now" prompt, which offers "a 5x boost to their claiming power" to "active participants". This is an incentive-driven token-claim hook, the kind of mechanic commonly abused to induce wallet connections or signature approvals. The sandbox did not observe a wallet connection, drainer behaviour, clipboard manipulation, hidden forms, login forms or cloaking, so no active theft mechanism was captured. The sandbox did record heavy third-party request activity, including some unclassified external destinations, and a high volume of console errors, which point to an unpolished or hastily assembled front end. No contradictory legal identities were found, and no confirmed phishing classification appears in the page-level analysis. Evidence:

• Domain registered 2026-09-27 (~0.06 years, about 23 days old), a registration far too recent for the established corporate history the page claims.
• 3 archive snapshots spanning 2026-09-28 to 2026-09-29 (1 year tracked), so no long-standing history exists for this domain.
• Homepage: the "Rewards Proposal" panel promises a 5x boost to claiming power for active participants, and the "Vote Now" button is unaccompanied by any verifiable governance documentation.
• Behavioural sandbox: 37 console errors and 42 external XHR requests, 6 of them to non-whitelisted destinations, across 3 successful runs. No login, payment or wallet-connect surface was captured.

Regulatory Verification Notes

The site discloses no regulatory licence, registration number or physical address, although it positions itself toward banks and capital markets, which are regulated counterparties. Only a copyright line naming the legal entity appears, and nothing ties that entity to this domain. Governance and ownership opacity are both present: the registration data does not reveal an accountable operator, and the page offers no governance documentation for the token vote. These are verification gaps, and they weigh more heavily here because the confirmed external detections sit alongside them. No third-party broker or regulator profile matched this site, so there is no reputational context to weigh either way. Evidence:

• Homepage and footer: a copyright line names Quant Network Limited, but no licence, regulator, company number or street address is shown.
• Registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, with a registration term running to 2027-09-27.
• Hosted on AS13335 (CLOUDFLARENET, US); TLS certificate issued by YE2 (DV level), valid to 2026-12-26.
• Page analysis found a generic page title and missing meta description and structured data, which is unusual for a genuine corporate property.

What to Verify Next

Before any engagement, the relationship between this domain and Quant Network Limited must be established through channels not supplied by this site. The official corporate website should be reached through an independently sourced address, and its published token-governance and rewards announcements checked for any mention of this domain. If the official channels do not reference this domain, the "Rewards Proposal" should be treated as unsanctioned. Any institutional counterparty should confirm the claimed entity's status and contact details through an independent, offline route. Pending that confirmation, no wallet should be connected and no transaction signed on this domain. Any official support channel should also be confirmed from the genuine company's own materials. Evidence:

• Homepage: the vote prompt directs users to act on a reward schedule that cannot be cross-checked against any announcement on the page.
• Footer and contact links: the contact routes shown cannot be tied to the named entity without independent confirmation.
• The domain's weeks-old registration offers no historical record that could corroborate the claimed corporate lineage.

Summary Verdict

Available evidence points to an elevated-risk site. Confirmed external threat detections, a very young domain and an unverified link to the brand it presents converge into a clearly cautionary posture. The professional corporate presentation does not outweigh these contradictions.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF, and all observed addresses are edge nodes, so the origin server is not visible. This shows that the operator uses mainstream, reputable infrastructure, and the transport encryption is valid. It also means the actual hosting cannot be independently inspected, and content could be swapped behind the edge without notice. These protections are a mitigating factor only and do not offset the confirmed reputational detections.

Closing Assessment

This site should be treated as read-only at most. No credentials should be entered, no wallet connected, and no funds or tokens committed on it, and any message that points to it should be treated as unverified until the genuine company confirms otherwise.