English

csm-hit

session-id-time

session-id

The domain 'qr-codes.io' uses the British Indian Ocean Territory country-code top-level domain (.io) without a subdomain. Its registrable label 'qr-codes' stretches across 8 characters containing 2 vowels alongside 5 consonants, plus one hyphen. Tokenizing the label suggests 2 words: qr, codes. The median word length lands at 3.5 characters. The linguistic tilt is German for 'codes'. Usage also turns up in English and French contexts. Overall, 'qr-codes.io' reads as German with character flair.

ue_back

ue_backdetect

html/09/30/093067dc-42d1-4bd8-89e5-9151c98da1f1.html.gz

default-src 'self' blob: *;script-src 'nonce-0KddlAb0' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

8a1ca9608771693d06b0109e1e442d495da603f32182a6527f9f1026c84780e9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


window.ue_ihb = (window.ue_ihb || window.ueinit || 0) + 1;
if (window.ue_ihb === 1) {

var ue_csm = window,
    ue_hob = +new Date();
(function(d){var e=d.ue=d.ue||{},f=Date.now||function(){return+ne

window.ue && ue.count && ue.count('CSMLibrarySize', 10183)


window.ue_ihe = (window.ue_ihe || 0) + 1;
if (window.ue_ihe === 1) {
(function(c){c&&1===c.ue_jsmtf&&"object"===typeof c.P&&"function"===typeof c.P.when&&c.P.when("mshop-interactions").execute(functi

window.ue && ue.count && ue.count('CSMLibrarySize', 3172)

window.ue && ue.count && ue.count('CSMLibrarySize', 18818)


window.ue_ibe = (window.ue_ibe || 0) + 1;
if (window.ue_ibe === 1) {
(function(e,c){function h(b,a){f.push([b,a])}function g(b,a){if(b){var c=e.head||e.getElementsByTagName("head")[0]||e.documentElem

Requests	IP Address	Location	AS Autonomous System
29	18.245.46.111	United States	AS16509AMAZON-02
0	34.239.55.211	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	3.160.154.172	United States	AS16509AMAZON-02
0	3.94.38.93	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	142.250.186.104	United States	AS15169GOOGLE
0	54.158.204.67	Ashburn, Virginia, United States	AS14618AMAZON-AES
0	216.58.206.36	United States	AS15169GOOGLE
0	18.173.205.121	United States	AS16509AMAZON-02
0	146.75.121.16	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
0	23.21.248.223	Ashburn, Virginia, United States	AS14618AMAZON-AES
29	62	-	-

Security Scan Report: qr-codes.io

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History