web3qr[.]app

This domain, web3qr.app, is flagged for generic phishing and poses a significant threat by impersonating a legitimate service that generates payment QR codes for USDC and ETH on EVM chains. The domain could be used to trick users into revealing sensitive information or making unauthorized cryptocurrency transactions, leading to financial loss.

Infrastructure analysis reveals that web3qr.app was created on April 21, 2026, and is registered through CloudFlare, Inc. The domain resolves to the IP address 104.21.50.112. As of the latest data, 10 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on 1 security blocklist. Additionally, the domain has been taken offline, indicating potential action by authorities or the hosting provider. The SSL certificate is issued by Google Trust Services, which might lend a false sense of security to potential victims.

If users have visited web3qr.app, they should immediately check their cryptocurrency wallets and accounts for any unauthorized transactions. It is recommended to change any passwords or access credentials associated with the affected services and to monitor account activity closely. Users should also report any suspicious activity to their cryptocurrency exchange or security provider and avoid clicking on links or entering personal information on any unverified websites.