speed-qrcodegenerator[.]com

Analysis of speed-qrcodegenerator.com indicates a high-risk phishing domain targeting cryptocurrency wallet users. The domain, registered on April 30, 2026, through Sollutium EU sp. z o.o., presents itself as an 'Advanced USDT QR Code Generator' supporting TRC20, ERC20, and wallet QR functionalities, as evidenced by its page title. This aligns with known phishing tactics designed to harvest wallet credentials or redirect users to fraudulent transaction pages. The domain resolves to IP address 104.21.27.76 and holds a Gridinsoft trust score of 0/100, reinforcing its malicious classification. Security vendors have flagged the domain, with 15 of 95 detections on VirusTotal and inclusion in 16 AlienVault OTX threat intelligence pulses. It is currently blocked by four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. The SSL certificate is issued by Let's Encrypt, a common practice among phishing domains to appear legitimate. While the exact content and functionality of the site remain unconfirmed due to lack of direct analysis, the combination of registration details, page title, and security vendor detections strongly suggests it is actively used for cryptocurrency-related phishing. Defenders should treat this domain as malicious and prioritize blocking it at the network and endpoint levels. Further investigation into associated infrastructure, such as hosting providers or linked domains, may reveal additional threats. No evidence currently links this domain to a specific phishing kit or broader campaign, but its active status and consistent detection across multiple sources warrant immediate mitigation.