ScanMalware.com

Security Scan Report: qr-codes.io

Redirected to: https://www.amazon.com/ap/signin

Site favicon
Submitted: Oct 25, 2025, 6:16:14 AMCompleted: Oct 25, 2025, 6:17:43 AMpubliccompleted
Loading additional data...

Summary

This website contacted 69 IPs in 2 countries across 12 domains to perform 37 HTTP transactions. The main domain is amazon.com.

Submitted URL: https://qr-codes.io/yEg1Xt

Effective URL: https://www.amazon.com/ap/signinRedirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

High risk phishing attempt using Amazon branding on a suspicious domain

Risk Factors
Brand impersonation on a non‑official, unranked domain
Newly registered domain with unknown age
Suspicious redirect to a legitimate brand's login page
Lack of legitimate redirect service whitelist
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Language

🇺🇸

English

(59% confidence)

Category

unknown

(0%)

Domain Information

You're looking at domain 'qr-codes.io' on the British Indian Ocean Territory country-code top-level domain (.io). The core label 'qr-codes' covers 8 characters split between two vowels and 5 consonants, notching 1 hyphen. Tokenizing the label suggests 2 words: qr, codes. Expect 3.5 characters per word on average. Most frequently, 'codes' shows up in German. You will also see it in English and French contexts.

Screenshot

Security scan screenshot of https://qr-codes.io/yEg1Xt

Page Load Overview

54.12s
Total Load Time
37
HTTP Requests
12
Domains
432 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:59%
Script Type:Latin
Text Length:130 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3754.175.203.146Ashburn, Virginia, United States
AS14618AMAZON-AES
018.245.46.54United States
AS16509AMAZON-02
044.215.138.159Ashburn, Virginia, United States
AS14618AMAZON-AES
044.218.143.162Ashburn, Virginia, United States
AS14618AMAZON-AES
0108.138.26.34United States
AS16509AMAZON-02
018.173.205.121United States
AS16509AMAZON-02
018.245.46.111United States
AS16509AMAZON-02
0142.250.186.68United States
AS15169GOOGLE
054.158.104.47Ashburn, Virginia, United States
AS14618AMAZON-AES
020.15.105.116Boydton, Virginia, United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3769--

Detected Technologies3

Amazon Web Services
50%
HSTS
40%
Amazon CloudFront
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T197833AD9F650703365B321BDA0AF550B223B136378488891B81DE5E42F79AEE4363F6D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:dftIixYxEHjekhGTLveBsAADtQVWcSA4uTv:dftmxEDek0/v8sAAUXwuz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:83834:yipmCyABZQgnE+uQpMkEBRyQMIMAMgQOIBAQcESnUYS89KACSbUIRAAnRIANKuQAgKIoxHCtcJZ0fEhAApoQTibypVGCFAqx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3ffffffffffff
Perceptual Hash:b33333332286cece
Difference Hash:0e0c000000000000
Wavelet Hash:c3c3ffff00000000
Color Hash:#722dd2

Other Hashes

Crop Resistant:0e0c000000000000

Scan History

Scan history not available

Unable to load historical scan data