qrandpashagiris[.]com

The domain qrandpashagiris.com was registered on February 27, 2026 through NiceNIC International Group Co., Limited and is currently taken offline. Infrastructure analysis shows it resolves to 104.21.18.157, an IP owned by Cloudflare, Inc. (AS13335) located in the United States. The domain is delegated to the Cloudflare nameservers evelyn.ns.cloudflare.com and peyton.ns.cloudflare.com, and the site served a TLS certificate issued by Let’s Encrypt (E7). HTTP traffic was observed over HTTP/3 and Cloudflare Browser Insights was detected, indicating the use of Cloudflare’s performance and security services.

The page title returned was the generic directory listing "Index of /," providing no functional content but confirming the site was reachable before being withdrawn. Threat intelligence flags the domain on one security blocklist and records a block by PhishDestroy. VirusTotal analysis shows two of ninety-three scanning engines flagged the domain, reinforcing suspicion of malicious intent. Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating.

Although the site is no longer active, the combination of a recent registration, Cloudflare‑hosted infrastructure, low trust scoring, and detection by multiple security products suggests the domain was used for a generic phishing campaign. Defenders should continue to block the domain and its associated IP address, monitor for any resurgence of activity, and consider adding the domain to internal deny lists. Ongoing vigilance is advised, as the offline status does not preclude future reuse of the same registration or hosting configuration for additional phishing attempts.