Security Scan Report: qrco.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 3 domains to perform 11 HTTP transactions. The main domain is qrco.de and was registered 4 weeks ago.

Submitted URL: https://qrco.de/bey9Hj?https://itau.com.br

The Cisco Umbrella rank of the primary domain is #81,860 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 75%

2
Risk Score

Legitimate QR code service showing an 'unavailable code' error page. No forms, no malware, no Indicators of Compromise. Only a harmless unused itau.com.br query parameter; no redirect occurred.

Risk Factors (1)
URL query string embeds an unrelated banking domain (itau.com.br), a pattern sometimes seen in QR/redirect abuse, though no redirect fired here
Safety Factors (4)
Established, well-ranked QR code generator domain
No forms or data collection of any kind on the page
No threat-intelligence, hunting rule, IDS-malware or Safe Browsing hits against the content
The only IDS alert is a generic 'QR Code Generator Domain in DNS Lookup' informational signature, not a malware/phishing alert
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'qrco.de' uses the German country-code top-level domain (.de) with no subdomain. The core label 'qrco' covers 4 characters with 1 vowel and 3 consonants. Word splitting yields two words: qr, co. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qrco.de/bey9Hj?https://itau.com.br

Page Load Overview

1.36s
Total Load Time
345 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

technology software27% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43.174.46.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.31.17Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.58Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D531922B6C4655011922C9A6FAF2B8059FB1F027D600D9827CEE50AD9FEA7D081036B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:qxLWh8mkOBbSs2EbdjCRtB66t29/N4Hf4AuNVvPLwZTNV4NsVkEkAOtE4BVKj:qhOVbS+bdWwzhNkgAYUZcNM/Mu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1613:iAAAEQAAAAABAQAAAQQAEAAIAAAAAAAAEAAAAAMAABABAAEBgBAAQAAAAACAQigAAAAAAIAAgBAAAAIAAAAAAgIgAAIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:b333cccccc666c64
Difference Hash:00080c0c0c0c0800
Wavelet Hash:fce4c0c0c0c0e4fc
Color Hash:#40bf57

Other Hashes

Crop Resistant:00080c0c0c0c0800

Scan History

Scan history not available

Unable to load historical scan data