xmr-qrcode-generator[.]com
“XMR QR Code Generator”
Ringkasan bukti
This domain, xmr-qrcode-generator.com, was observed to resolve to the Cloudflare‑hosted address 104.21.3.144, which is announced by AS13335 and geolocated to the United States. The domain was created on 7 March 2026 and registered through NiceNIC International Group Co., Limited. Its authoritative name servers are meera.ns.cloudflare.com and owen.ns.cloudflare.com, indicating that the site leveraged Cloudflare’s DNS and CDN services. The only visible page title is “XMR QR Code Generator”, suggesting an attempt to attract users interested in Monero (XMR) QR code creation.
No TLS certificate was presented; despite the presence of HTTP Strict Transport Security (HSTS) and HTTP/3 support, the lack of a valid certificate would cause browsers to display security warnings. The site is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis shows that one of ninety‑four scanning engines flagged the domain, providing a minimal but non‑zero detection signal. The overall trust score from Gridinsoft is 0 out of 100, reinforcing the malicious assessment.
The domain is currently offline, which limits real‑time interaction but does not eliminate the risk of future re‑use of the same infrastructure. Defenders should add the domain to network deny lists, monitor the associated IP address for any resurgence, and consider extending blocklist coverage to other domains registered by the same registrar within the same timeframe. Continuous observation of Cloudflare‑hosted assets linked to this IP is advised, as the infrastructure could be repurposed for additional phishing campaigns targeting cryptocurrency users.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260306-97CA8D- Judul halaman yang direkam
- XMR QR Code Generator
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | xmr-qrcode-generator.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
Cloudflare Radar
Pemindaian Cloudflare Radar tersimpan · Buka pemindaian
-
VirusTotal
1 → 2
-
Status domain
Dapat dijangkau → Tidak dapat dijangkau
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of xmr-qrcode-generator.com · checked Mar 8, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive