qprchs[.]info

This domain, qprchs.info, is identified as a fraudulent cryptocurrency wallet phishing site impersonating AXENDRA. The page is designed to deceive users into entering sensitive wallet credentials or seed phrases, enabling attackers to drain funds from connected crypto wallets. Analysis of the site’s infrastructure reveals it employs social engineering tactics, specifically targeting users through fake login interfaces to harvest private keys or execute unauthorized transactions. The domain’s design mimics legitimate wallet services, increasing the likelihood of successful credential theft or financial loss for unsuspecting victims. Evidence supporting this assessment includes detection by 15 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly flagging it for SOCIAL_ENGINEERING. The domain was registered on April 06, 2026, through NameMart Pte. Ltd., a registrar frequently associated with high-risk domains. It appears on four security blocklists and is linked to a single threat intelligence pulse in AlienVault OTX. Additionally, the domain resolves to the IP address 188.114.96.3 and is actively blocked by MetaMask, PhishDestroy, SEAL, and InversionDNS, further confirming its malicious nature. The use of Cloudflare and HTTP/3 suggests attempts to obfuscate traffic and evade detection. Users who visited qprchs.info should immediately disconnect any connected wallets and cease all interactions with the site. If credentials or seed phrases were entered, affected wallets must be treated as compromised; funds should be transferred to a new, secure wallet, and all associated private keys should be considered exposed. Monitor transaction histories for unauthorized activity and report the incident to relevant blockchain security platforms. Given the domain’s high-risk status and offline status, users are advised to remain vigilant for similar phishing attempts targeting cryptocurrency services.