bitcoin-qr-code-generator[.]to

This domain, bitcoin-qr-code-generator.to, is identified as a high-risk brand impersonation scam targeting cryptocurrency users. Analysis indicates it mimics the legitimate service 'across' by presenting itself as a 'BTC QR Code Generator' with no KYC requirements, a common tactic to lure victims into exposing wallet addresses or interacting with malicious smart contracts. The page title, 'BTC QR Code Generator — Create Bitcoin Address QR with Bitcoin Logo (No KYC),' directly aligns with known crypto drainer distribution patterns, suggesting intent to harvest wallet credentials or deploy malicious payloads. Infrastructure analysis reveals the domain was registered on June 28, 2025, through the Government of Kingdom of Tonga registrar and resolves to IP address 188.114.97.3, hosted on Cloudflare's network (AS13335). VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious, while it appears on five distinct security blocklists, including PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as threat actors frequently abuse legitimate certificate authorities to lend false credibility to fraudulent sites. As of the latest assessment, bitcoin-qr-code-generator.to has been taken offline, likely due to enforcement actions by hosting providers or domain registrars. However, the infrastructure remains a residual risk, as threat actors may re-deploy the domain or migrate to newly registered lookalikes. Users are advised to verify wallet addresses independently, avoid interacting with unsolicited QR code generators, and cross-reference domain reputation via threat intelligence feeds. Persistent monitoring of related indicators, such as the resolving IP and registrar patterns, is recommended to preemptively block emerging variants.