qprchs[.]pro

qprchs.pro was registered on 2026-04-07 through NameMart Pte. Ltd. The domain resolves to the Cloudflare address 104.21.83.243, which is geolocated to California, United States, and uses the Cloudflare nameservers duke.ns.cloudflare.com and kristin.ns.cloudflare.com. The TLS certificate presented by the host is a Let's Encrypt E8 certificate, indicating a valid HTTPS service at the time of observation. VirusTotal analysis shows that 15 of 94 scanning engines flagged the domain as malicious, demonstrating a consensus among security vendors that the site hosted phishing content. AlienVault OTX recorded the domain in a single threat‑intel pulse, reinforcing its association with malicious campaigns.

Independent blocklist providers, including PhishDestroy, MetaMask, and SEAL, have added qprchs.pro to their deny lists, and the domain appears on three additional security blocklists. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating. As of the report date, the domain has been taken offline, and no HTTP response or page title is currently available for further content analysis.

The combination of recent registration, Cloudflare hosting, a low trust score, multiple vendor detections, and presence on blocklists suggests that qprchs.pro was actively used for generic phishing operations before being shut down. Defenders should continue to block the domain and its associated IP address at network perimeter devices, update URL filtering and threat‑intelligence feeds, and monitor for any re‑registration attempts or similar domains that reuse the same registrar or hosting infrastructure. Ongoing vigilance is recommended because the underlying Cloudflare infrastructure can be leveraged for future phishing campaigns.