Security Scan Report: qrco.de

Redirected to:
https://qrco.de/bey9Hj?https://bradesco.co.uk
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 3 domains to perform 12 HTTP transactions. The main domain is qrco.de and was registered 4 weeks ago.

Submitted URL: http://qrco.de/bey9Hj?https://bradesco.co.uk

Effective URL:
https://qrco.de/bey9Hj?https://bradesco.co.uk
Redirected

The Cisco Umbrella rank of the primary domain is #81,860 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Deactivated QR-code landing page on the legitimate qrco.de shortener; no forms, brand impersonation, malware or threat-intel hits. The embedded bank-domain parameter is a lingering phishing-style artifact, but nothing is served.

Risk Factors (1)
Dead QR-code landing URL contains an embedded external bank-like domain as a query parameter, indicating the underlying QR code was likely built as a redirect lure
Safety Factors (4)
No credential, login or payment form present (verified form facts: 0/0/0)
No impersonation of another entity's brand on the page itself
No Indicators of Compromise, hunting rule malware patterns, known-kit matches or phishing/malware IDS alerts
Host domain is a ranked, recognizable QR-code service rather than an unknown lookalike domain
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'qrco.de' uses the German country-code top-level domain (.de) without a subdomain. The core label 'qrco' covers 4 characters holding 1 vowel versus 3 consonants. It segments into 2 words: qr, co. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://qrco.de/bey9Hj?https://bradesco.co.uk

Page Load Overview

1.92s
Total Load Time
345 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

technology software27% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43.174.46.27Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.58Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.31.17Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.87Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.31.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
129--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D531922B6C4655011922C9A6FAF2B8059FB1F027D600D9827CEE50AD9FEA7D081036B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:qxLWh8mkOBbSs2EbdjCRtB66t29/N4Hf4AuNVvPLwZTNV4NsVkEkAOtE4BVKj:qhOVbS+bdWwzhNkgAYUZcNM/Mu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1613:iAAAEQAAAAABAQAAAQQAEAAIAAAAAAAAEAAAAAMAABABAAEBgBAAQAAAAACAQigAAAAAAIAAgBAAAAIAAAAAAgIgAAIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:b333cccccc666c64
Difference Hash:00080c0c0c0c0800
Wavelet Hash:fce4c0c0c0c0e4fc
Color Hash:#535dac

Other Hashes

Crop Resistant:00080c0c0c0c0800

Scan History

Scan history not available

Unable to load historical scan data