monero-qr-code-generator[.]com

The domain monero-qr-code-generator.com is currently active and serves a page titled “Free Monero QR Code Generator”. The site was registered on February 21 2026 through NameCheap, Inc. and resolves to IP 107.170.21.7, an address owned by DigitalOcean, LLC (ASN 14061) located in the United States. Technical fingerprinting shows the server runs Ubuntu with Nginx, and the frontend uses Bootstrap and jQuery. The TLS certificate is issued by Let’s Encrypt (E8) and the HTTPS endpoint returns HTTP 200.

The domain appears on three phishing blocklists—PhishDestroy, MetaMask, and SEAL—and 11 of 93 VirusTotal scanners have flagged it as malicious. Reputation services rate the host poorly, with Gridinsoft assigning a trust score of 0 out of 100. Mail exchange is delegated to eforward1.registrar-servers.com with priority 10, confirming use of the registrar’s default MX infrastructure.

No additional intelligence such as payload samples, credential harvesting forms, or redirects has been published, so the exact malicious behavior remains unconfirmed beyond the classification as generic phishing. Defenders should treat the domain as high‑risk: block DNS resolution and HTTP(S) traffic at perimeter filters, add the IP address 107.170.21.7 to network‑level deny lists, and monitor for any outbound connections to the host. Continuous re‑scanning of the URL and periodic checks of blocklist status are advised, as the site could evolve to host more sophisticated crypto‑related scams.