@anghenfil It seems to me that a quick improvement would be a standard text copy of the domain name immediately on top of the QR code, so that a phone could compare the URL and someone would be suspicious of a QR code labelled "scam_me.ru".