qfs-assetbackup[.]com

The domain qfs-assetbackup.com is a generic phishing site that impersonates no specific brand but was observed hosting an NFT mint scam. It poses an elevated risk by attempting to deceive users into connecting wallets or submitting credentials under the pretense of a 'Qfs Security Backup' service. As of the latest verification, qfs-assetbackup.com has been taken offline, though prior activity indicates it was actively used for fraudulent purposes.

Technical indicators confirm the domain's malicious intent. qfs-assetbackup.com was flagged by 1 of 95 security vendors on VirusTotal, including Gridinsoft, which assigned a trust score of 0/100. It appears on four security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. The domain was registered on January 17, 2025, through Global Domain Group LLC and resolved to the IP address 172.67.196.235, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued, and the observed page title was 'Qfs Security Backup'. Nameservers were limited to one, a common trait in disposable phishing infrastructure.

Users who interacted with qfs-assetbackup.com should assume their credentials or wallet connections may be compromised. For crypto-related exposure, revoke all token approvals via a blockchain explorer and transfer funds to a new wallet. For credential phishing, change passwords immediately, enable two-factor authentication, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.