Security Scan Report: qrco.de

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 3 domains to perform 11 HTTP transactions. The main domain is qrco.de and was registered 4 weeks ago.

Submitted URL: https://qrco.de/bey9Hj?https://santander.com.br

The Cisco Umbrella rank of the primary domain is #81,860 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Deactivated QR-code page on the legitimate qrco.de service; no forms, redirects, or threat-intel hits. The bank URL in the query string is worth noting, but the page serves no content or harvests nothing.

Risk Factors (1)
QR-code short link whose query string embeds a banking domain, a pattern sometimes used to disguise QR destinations, though this code is deactivated and serves no content
Safety Factors (3)
Established QR-code generator domain with Cisco Umbrella top-100K ranking
Dead-end error page with no forms, no downloads and no redirects
No Indicators of Compromise, malware patterns, or credential harvesting detected
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'qrco.de' uses the German country-code top-level domain (.de) and has no subdomain. Its registrable label 'qrco' stretches across 4 characters split between one vowel and three consonants. It segments into 2 words: qr, co. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://qrco.de/bey9Hj?https://santander.com.br

Page Load Overview

1.15s
Total Load Time
345 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

technology software27% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
43.174.46.6Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.31.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
13.174.46.58Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.31.114Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.17Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.245.31.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D531922B6C4655011922C9A6FAF2B8059FB1F027D600D9827CEE50AD9FEA7D081036B8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:qxLWh8mkOBbSs2EbdjCRtB66t29/N4Hf4AuNVvPLwZTNV4NsVkEkAOtE4BVKj:qhOVbS+bdWwzhNkgAYUZcNM/Mu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1613:iAAAEQAAAAABAQAAAQQAEAAIAAAAAAAAEAAAAAMAABABAAEBgBAAQAAAAACAQigAAAAAAIAAgBAAAAIAAAAAAgIgAAIAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:b333cccccc666c64
Difference Hash:00080c0c0c0c0800
Wavelet Hash:fce4c0c0c0c0e4fc
Color Hash:#7fe06c

Other Hashes

Crop Resistant:00080c0c0c0c0800

Scan History

Scan history not available

Unable to load historical scan data