scanqrcode[.]live

Analysis of the domain scanqrcode.live indicates active malicious activity targeting users through a generic phishing scheme. The domain is currently blocked by three independent threat‑mitigation services—PhishDestroy, MetaMask, and SEAL—demonstrating that multiple security platforms have identified it as hostile. It also appears on three external blocklists, reinforcing the consensus that the site should be denied access at network perimeter points.

VirusTotal scans show three of ninety‑one security vendors flagging the domain, providing additional corroboration of its malicious nature. No public records detail the registrar, registration date, hosting IP, SSL certificate status, HTTP response codes, or page title, and those attributes have not been released in the available intelligence. Consequently, the exact infrastructure footprint remains uncertain, but the existing indicators are sufficient to warrant immediate defensive action.

Organizations should update web filtering rules to block scanqrcode.live, enforce safe‑browsing policies, and monitor for any outbound connections to the domain. Incident response teams should treat any traffic to or from this host as potentially compromised and investigate related user activity for credential exposure or credential‑reuse attempts.