trxqrcodegenerator[.]com

This domain is flagged as a generic phishing infrastructure targeting users of TRON cryptocurrency services. Analysis indicates the site mimics legitimate TRX QR code generators to harvest wallet credentials or distribute malicious payloads under the guise of utility tools. The risk level remains under investigation due to emerging indicators but warrants caution given the domain's active status and impersonation tactics. Infrastructure analysis reveals the domain trxqrcodegenerator.com was registered on March 28, 2026, through SOLLUTIUM LLC. It resolves to IP address 172.67.208.178, hosted on AS13335 Cloudflare, Inc. in the United States. The SSL certificate is issued by Let's Encrypt (serial E8), and VirusTotal reports zero detections across 95 engines. Despite this, the domain appears on one security blocklist, specifically PhishDestroy, suggesting early-stage detection by specialized feeds. The page title, 'TRX QR Code Generator — Free TRON QR Codes with TRX Logo,' reinforces the impersonation of TRON-related services. Mitigation steps for this threat type include blocking the domain and associated IP at network perimeter defenses. Cryptocurrency users should verify QR code generators exclusively through official TRON channels or trusted third-party platforms. Organizations should monitor for outbound connections to 172.67.208.178 and alert on any interaction with trxqrcodegenerator.com. Given the domain's recent creation and lack of widespread detection, security teams are advised to treat it as a high-priority watchlist item for credential theft or malware distribution vectors.