IOC Radar
DomainLowSignal 41/100

monero-qr-code-generator.com

First Seen
Jan 24, 2026
Last Seen
Jun 9, 2026
Jan 24
First Seen
137d ago
Jun 9
Last Seen
yesterday
2
Reports
source reports
41%
Confidence
low
Found in 2 reports. Confidence: low. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
41%
Signal Score
41 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

3 techniques

Feed Intelligence Summary

2 reports41% confidence
2
Source reports
41%
Confidence score
Category tags
activeblocklistbrute forcecontentcredential harvestingcredential stuffingcryptocryptocurrencydestroylist_phishingdrainerfraudidentity & access exploitationindicatornetworkphishingphishing attackresearchedscamscams & fraudsocial engineeringt1566.001t1566.002t1566.003

Activity Timeline

1 total obs
Jun 9Jun 9

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **monero-qr-code-generator.com** has emerged as a significant indicator of compromise (IOC) in the realm of phishing attacks, first observed on January

Threat ScoreMedium Risk
41
SIGNAL
Signal Score
41%
Confidence
2
Reports
First seenJan 24, 2026
Last seenJun 9, 2026

VirusTotal

Not checked

WHOIS

description
Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

low
First detected 4 months ago · Last seen 1 day ago
Appeared in 2 threat reports