me-qr[.]com

Analysis of the domain me-qr.com shows a live HTTP endpoint returning status code 200, indicating the site is reachable and serving content. The domain is registered through GoDaddy.com, LLC and resolves to Cloudflare nameservers (simone.ns.cloudflare.com and sri.ns.cloudflare.com), suggesting the hosting infrastructure is protected by Cloudflare’s CDN and DDoS mitigation services. The site has been flagged by the PhishDestroy blocklist and appears on a single external security blocklist, confirming that at least one trusted anti‑phishing feed has identified it as malicious.

VirusTotal has processed the domain with 91 vendor engines and reported no detections; however, the absence of detections does not imply safety, especially given the explicit classification of the domain as a generic phishing site. The current risk status is marked as "under investigation" and the domain remains active. Concrete evidence therefore consists of the reachable HTTP service, registrar information, Cloudflare DNS configuration, inclusion in the PhishDestroy feed, presence on one additional blocklist, and the VirusTotal scan result.

Missing data includes any Safe Browsing verdicts, Open Threat Exchange (OTX) references, SSL certificate details, IP address geolocation, page title, or concrete payload samples. Defenders should treat me-qr.com as a confirmed phishing indicator: block the domain at the DNS or proxy level, incorporate it into URL filtering policies, monitor for any new detections from additional threat feeds, and consider active scanning of the host for payload changes. Continuous observation is advised until the investigation concludes, and any incidents involving credential capture or credential‑related traffic should be correlated with this indicator.