Is quicktent.org a scam? TrustSniffer's high-risk assessment: 3/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a bare developer placeholder for a multi-tenant QR and custom-domain mapping application. Its homepage is a "tenant shell" of about two hundred characters, with a page title reading only "Amount", an "Opening…" status string, and setup notes written in mixed English and Hinglish. The notes explain how to point custom domains at the app through Netlify or a VPS, using routes for domain mapping, domain assignment, a tenant-specific QR path and an admin area. It presents no product offer, pricing, company identity, contact details or monetization model, so its apparent purpose is an unfinished or default-state utility deployment.

Scam/Impersonation Risk

The principal concern is external reputation. The domain is blacklisted: several independent security engines flag it as malicious or suspicious, including two tier-one vendors, and it is listed on a blacklist source. This is a confirmed contradiction and the decisive negative. The observable page content gives no explanation for it. The homepage has no forms, login prompts, wallet-connection behaviour, clipboard manipulation or outbound data submission, and in repeated sandbox runs it made no external network calls. No brand impersonation and no conflicting legal identities were found. The detections therefore cannot be attributed to a specific abusive mechanism on the visible page. A clean-looking placeholder can still be staged, repurposed or later activated, so a minimal page does not offset listings by multiple vendors. The provenance picture is also unsettled. The current domain registration is only months old, while archive captures reach back to 2001, which is consistent with a lapsed domain being re-registered by a new party. Continuity of control with the earlier history should not be assumed. Evidence:

• Homepage: a roughly 200-character developer placeholder with no forms, login fields or external network activity across three sandbox runs.
• Reputation: multiple engines classify the domain as malicious or suspicious, and it appears on an external blacklist.
• Registration: domain created 2026-05-26 (~0.4 years old), expiring 2027-05-26.
• Archive: 3 archive snapshots spanning 2001–2026 (26 years tracked), with very sparse coverage between captures.

Regulatory Verification Notes

The site makes no licensing, registration or regulated-activity claims and shows no legal, terms, privacy or about pages. It also lists no operator name, address or contact channel, so the real-world operator cannot be linked to the domain. The site's only content is a technical setup note. The registration record shows incomplete ownership information, which is an administrative limitation rather than an identity contradiction. No third-party broker or regulator profile matches the domain. Because the site offers no regulated service, the absence of a licence is a verification gap and not evidence of wrongdoing in itself. The adverse conclusion rests on the external detections, not on this gap. Evidence:

• Homepage: no company name, legal entity, licence number or jurisdiction is stated anywhere in the captured content.
• Registration: registrar is Atak Domain Bilgi Teknolojileri, and ownership details are incomplete.
• Transport security: TLS certificate issued by YE2 (domain-validated only), valid to 2026-12-22. This confirms encryption but not operator identity.
• Hosting: served from AS200019 (AlexHost, Moldova-registered, resolving to Russia).

What to Verify Next

The only meaningful next step is for the site operator, or the party that commissioned the application, to explain the security detections and identify themselves. An independent party can check whether current threat-intelligence listings are still active, and whether the vendors have reviewed or delisted the domain. The domain's ownership history should be checked for a lapse or re-registration around the 2026 creation date. Any contact channel or official support route should be confirmed through an independent, offline source, not through anything on this site. If a tenant onboarding or QR link was received from this domain, it should be confirmed with the sender through a separate channel before it is opened or used. Evidence:

• Homepage: the page lists no operator, contact route or terms, so no on-site channel is available to test.
• Reputation: the adverse listings are current, so a delisting or an owner statement would be new, material information.
• Registration: the recent creation date alongside much older archive captures is the specific discrepancy that ownership history should resolve.

Summary Verdict

The assessment is cautionary and security-forward. Confirmed adverse reputation from multiple independent sources outweighs the benign technical hygiene, such as working encryption and a quiet, non-interactive page. The identity of the operator is unverified, and the domain's provenance is unsettled. Overall the site carries elevated risk and is not a suitable basis for trust.

Infrastructure Integrity

The domain resolves to a single IP address on a shared data-centre and web-hosting network operated by AlexHost, with no CDN or WAF in front of it. The server is directly exposed, so protective infrastructure provides no mitigation. Standard DNS and network attributes (a named network, an RIR registry and a normal record lifetime) are present but only show that the host resolves normally.

Closing Assessment

Treat the site as read-only at most. Avoid entering credentials, connecting wallets, submitting personal data, making payments, or downloading or running anything from it until the external security listings are cleared and the operator is independently identified.