qfsbackup[.]pro

The domain qfsbackup.pro is a confirmed phishing site engaged in brand impersonation targeting Discord users. It presents itself as a legitimate service under the name 'QFS Backup' but is designed to deceive victims into disclosing login credentials or other sensitive information. No crypto drainer kit was identified in this campaign. As of the latest verification, qfsbackup.pro has been taken offline.

Technical indicators show qfsbackup.pro was registered on 2025-01-03 19:09:19 through NameCheap, Inc. The domain resolves to the IP address 104.21.64.1, hosted on Cloudflare's network (AS13335) in the United States. No SSL certificate was observed. VirusTotal reports 0 of 95 vendors flagging the domain, and Google Safe Browsing has not issued any warnings. However, qfsbackup.pro appears on 4 security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura. The Gridinsoft trust score for the domain is 0 out of 100.

Individuals who interacted with qfsbackup.pro should immediately change their Discord passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent on your behalf. Report the phishing domain to Discord’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.