ltc-qr[.]to

The domain ltc-qr.to is identified as a high-risk generic phishing site. It poses as a Litecoin QR Code Generator, potentially targeting users looking to generate QR codes for cryptocurrency transactions. The domain does not use a legitimate drainer kit but is designed to deceive users into providing sensitive information.

Analysis indicates that ltc-qr.to has a VirusTotal score of 16/95, with 16 out of 95 security vendors flagging it as malicious. The domain is registered through the Government of the Kingdom of Tonga and resolves to the IP address 45.12.2.86, located in Ukraine and operated by AS6698 Virtual Systems LLC. It was created on January 08, 2024. The domain appears on 5 security blocklists, including PhishDestroy, Polkadot, Enkrypt, Codeesura, and PhishingDB. No SSL certificate is associated with the domain, further increasing the risk.

The domain is currently offline, and infrastructure analysis reveals that it has been taken down. Despite this, residual risk remains as the domain could be reactivated or repurposed. Security teams are advised to monitor for any signs of the domain coming back online and to ensure that it remains blocked in firewalls, DNS filters, and security appliances. Users are warned to avoid visiting ltc-qr.to and to report any suspicious activity related to this domain.