English

csm-hit

session-id-time

session-id

The domain 'qr-codes.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with no subdomain. Count 8 characters in 'qr-codes' containing 2 vowels alongside 5 consonants; bonus characters include one hyphen. Splitting it apart reveals two words: qr, codes. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

html/0c/0f/0c0fcdc2-ef65-4ad1-a718-11fbcf5d3e4b_fallback.html.gz

ue_back

ue_backdetect

html/0c/0f/0c0fcdc2-ef65-4ad1-a718-11fbcf5d3e4b.html.gz

default-src 'self' blob: *;script-src 'nonce-g31ickcG' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0

8a1ca9608771693d06b0109e1e442d495da603f32182a6527f9f1026c84780e9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

qr-codes.io


window.ue_ihb = (window.ue_ihb || window.ueinit || 0) + 1;
if (window.ue_ihb === 1) {

var ue_csm = window,
    ue_hob = +new Date();
(function(d){var e=d.ue=d.ue||{},f=Date.now||function(){return+ne

window.ue && ue.count && ue.count('CSMLibrarySize', 10151)


window.ue_ihe = (window.ue_ihe || 0) + 1;
if (window.ue_ihe === 1) {
(function(c){c&&1===c.ue_jsmtf&&"object"===typeof c.P&&"function"===typeof c.P.when&&c.P.when("mshop-interactions").execute(functi

window.ue && ue.count && ue.count('CSMLibrarySize', 3172)

window.ue && ue.count && ue.count('CSMLibrarySize', 18818)


window.ue_ibe = (window.ue_ibe || 0) + 1;
if (window.ue_ibe === 1) {
(function(e,c){function h(b,a){f.push([b,a])}function g(b,a){if(b){var c=e.head||e.getElementsByTagName("head")[0]||e.documentElem

window.ue && ue.count && ue.count('CSMLibrarySize', 49411)

✅ Low Risk - https://qr-codes.io/h8fVAk

Requests	IP Address	Location	AS Autonomous System
30	23.216.77.47	Unknown	Unknown
0	34.231.82.100	Unknown	Unknown
0	157.240.0.6	Unknown	Unknown
0	142.250.186.104	Unknown	Unknown
0	146.75.121.16	Unknown	Unknown
0	162.219.225.118	Unknown	Unknown
0	54.192.34.180	Unknown	Unknown
0	23.23.8.212	Unknown	Unknown
0	44.215.137.152	Unknown	Unknown
0	34.224.43.166	Unknown	Unknown
30	82	-	-

Security Scan Report: qr-codes.io

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History