English

csm-hit

session-id-time

session-id

Domain 'qr-codes.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and has no subdomain. The second-level label 'qr-codes' is 8 characters long containing two vowels alongside 5 consonants, notching 1 hyphen. Tokenizing the label suggests 2 words: qr, codes. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

html/19/b4/19b4601a-6007-40ee-91d9-0dd5474fc961_fallback.html.gz

ue_back

ue_backdetect

html/19/b4/19b4601a-6007-40ee-91d9-0dd5474fc961.html.gz

default-src 'self' blob: *;script-src 'nonce-RSPhKYlg' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

8a1ca9608771693d06b0109e1e442d495da603f32182a6527f9f1026c84780e9

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


window.ue_ihb = (window.ue_ihb || window.ueinit || 0) + 1;
if (window.ue_ihb === 1) {

var ue_csm = window,
    ue_hob = +new Date();
(function(d){var e=d.ue=d.ue||{},f=Date.now||function(){return+ne

window.ue && ue.count && ue.count('CSMLibrarySize', 10175)


window.ue_ihe = (window.ue_ihe || 0) + 1;
if (window.ue_ihe === 1) {
(function(c){c&&1===c.ue_jsmtf&&"object"===typeof c.P&&"function"===typeof c.P.when&&c.P.when("mshop-interactions").execute(functi

window.ue && ue.count && ue.count('CSMLibrarySize', 3172)

window.ue && ue.count && ue.count('CSMLibrarySize', 18818)


window.ue_ibe = (window.ue_ibe || 0) + 1;
if (window.ue_ibe === 1) {
(function(e,c){function h(b,a){f.push([b,a])}function g(b,a){if(b){var c=e.head||e.getElementsByTagName("head")[0]||e.documentElem

window.ue && ue.count && ue.count('CSMLibrarySize', 49411)

✅ Low Risk - https://qr-codes.io/Pru3fC

Requests	IP Address	Location	AS Autonomous System
29	34.237.135.182	Unknown	Unknown
0	44.212.213.97	Unknown	Unknown
0	44.216.132.245	Unknown	Unknown
0	3.174.55.35	Unknown	Unknown
0	142.250.186.104	Unknown	Unknown
0	216.58.206.68	Unknown	Unknown
0	20.15.105.116	Unknown	Unknown
0	142.250.184.200	Unknown	Unknown
0	18.210.138.193	Unknown	Unknown
0	108.138.26.70	Unknown	Unknown
29	85	-	-

Security Scan Report: qr-codes.io

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History