usdt-qr-code-generator[.]to

The domain usdt-qr-code-generator.to has been identified as a brand impersonation threat, specifically a crypto drainer designed to mimic legitimate Tether (USDT) services. It is currently offline, but while active it targeted users of the cryptocurrency platform across by presenting a fraudulent page titled "USDT QR Code Generator — Create Tether (USDT) Wallet QR with Official Logo." This domain was created on June 30, 2025, and resolves to IP address 172.67.166.64. It is registered through the Government of Kingdom of Tonga and uses an SSL certificate from Google Trust Services (WE1).

Threat intelligence sources reveal significant malicious indicators: the domain appears on 5 security blocklists, is flagged by 17 of 95 VirusTotal vendors, and is listed in 15 AlienVault OTX threat intelligence pulses. These data points underscore the high risk associated with this domain. The combination of a recently created domain, registration through an obscure authority, and widespread blocklisting strongly suggests it was purpose-built for fraudulent activity.

Although the domain is now offline, users should remain vigilant as similar domains may appear. Any unsolicited links or ads promoting QR code generators for USDT should be treated with extreme caution. PhishDestroy recommends verifying all crypto-related URLs through official channels, enabling browser-based phishing protection, and reporting suspicious domains to relevant cybersecurity platforms. If you have previously interacted with this site, monitor your crypto wallet for unauthorized transactions and consider revoking any permissions granted.