qprches[.]top
“AXENDRA”
qprches.top — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Cryptoscam; Jenis penipuan: Generic Phishing. Ringkasan bukti: VirusTotal 17/92 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 4 alerts; URLScan malicious verdict; Google Safe Browsing flagged; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrar: NameMart.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
PhishDestroy identifies qprches.top (seed 1ef23e) as an active generic phishing domain operating a crypto drainer kit designed to steal cryptocurrency wallet credentials and drain digital assets. The domain does not impersonate a specific brand but leverages generic lures to deceive users into connecting malicious wallet addresses or entering seed phrases. The campaign targets individuals active in crypto communities, distributing links via social media, messaging platforms, and spoofed airdrop announcements. This domain is part of a broader infrastructure aimed at harvesting private keys and initiating unauthorized transactions.
Technical analysis reveals qprches.top was registered on March 05, 2026 through NameMart Pte. Ltd. and resolves to IP address 188.114.97.3. The domain holds a valid Let's Encrypt SSL certificate, likely to enhance credibility and bypass browser warnings. According to VirusTotal, the domain is flagged by 10 out of 95 security vendors as malicious, indicating moderate but concerning detection. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, confirming intent to deceive users through fraudulent interfaces. The registration date suggests a recently deployed campaign with minimal operational history, potentially reducing historical blocklist presence but increasing the need for immediate scrutiny.
This domain remains ACTIVE and poses a HIGH risk to visitors engaging with its content. PhishDestroy has flagged this domain as part of an ongoing crypto drainer operation. Users are strongly advised to avoid accessing qprches.top or any associated subdomains. Recommended actions include blocking the domain at the network level, updating browser and DNS filters, and alerting users within affected communities. While current detection is present, the campaign may evolve to evade blocklists. Remaining risk is high due to active propagation methods and the irreversible nature of cryptocurrency theft. Immediate containment and public awareness are critical to mitigate potential victimization.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | h5-api.qprches.top |
malicious | Sinkholed |
| DNS4EU | qprches.top |
malicious | Sinkholed |
| DNS4EU | admin-api.qprchs.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | admin-api.qprchs.vip |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 4 identified
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org Keyakinan 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of qprches.top · checked May 11, 2026
Bukti & Laporan Eksternal
PD-20260511-D243CB Recipient: abuse@namemart.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive