The domain name 'qr-codes.io' uses the British Indian Ocean Territory country-code top-level domain (.io) while skipping any subdomain. The core label 'qr-codes' covers 8 characters holding two vowels versus 5 consonants, notching 1 hyphen. Splitting it apart reveals 2 words: qr, codes. Expect 3.5 characters per word on average. 'codes' most often appears in German. You will also see it in English and French contexts.

html/63/b9/63b95104-c82a-41ff-bb43-1195d34da421.html.gz

default-src 'self' blob: *;script-src 'nonce-eOW4HIN1' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
1	18.173.205.35	United States	AS16509AMAZON-02
1	108.138.26.105	United States	AS16509AMAZON-02
1	142.250.186.68	United States	AS15169GOOGLE
1	20.15.105.116	Boydton, Virginia, United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
1	104.75.90.57	Frankfurt am Main, Hesse, Germany	AS16625AKAMAI-AS
1	18.245.46.54	United States	AS16509AMAZON-02
1	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
1	142.250.185.72	United States	AS15169GOOGLE
9	8	-	-

Security Scan Report: qr-codes.io

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History