Trust score
95 / 100
The trust score combines technical checks, reputation signals where available, website history cues, scam intelligence, and AI-assisted analysis.
Signals behind your score
Limited verification
Availability: limited_inspection · Website responded, but some page details could not be fully inspected during this scan. (HTTP 403)
Inspection: blocked · dns=true · tls=true · botProtection=true · parserFailure=false · contentLength=5763
Matches from scam intelligence
Serious matches from known phishing, malware, or public scam-warning sources. Provider names appear below each row.
No known phishing, malware, or police-aligned scam warnings were found in this scan.
Detected risk patterns
Additional patterns worth a closer look before you pay or sign in—not proof on their own.
No additional prioritized risk rows were raised beyond curated list matches.
Helpful signals & observations
Supporting checks in plain language. “Not found” means we did not see a report in that source during this scan.
Subdomain submitted; root registration also checked
The submitted host support.qr-code-generator.com is a subdomain. Fraudly checks RDAP/domain-age on qr-code-generator.com because ownership and registration belong to the registrable root domain.
Source: Fraudly hostname analysisSource reliability: high
No police list match found
No direct domain match was found on the public police trader-warning list checked in this scan.
Source: Dutch Police (public pages)Source reliability: low
Domain age from prior successful lookup
Approximate domain age: 5730 days (from cache). Domain registration age could not be verified during this scan. Some registries temporarily limit or omit registration data. This does not mean the website is suspicious, and it was not treated as a risk signal. Last successful lookup: 2026-06-26T19:34:37.892Z.
Source: RDAP (rdap.org)Source reliability: medium
No known phishing report found
This website was not found in known phishing threat lists during this scan. New scam sites can appear quickly, so this is one signal among several.
Source: OpenPhishSource reliability: medium
URLhaus unavailable
HTTP 401
Source: URLhausSource reliability: low
HTTPS is available
HTTPS is available. This protects the connection, but does not verify that the site is legitimate. Issuer: Let's Encrypt. Expiry: 2026-08-04T23:46:47.000Z.
Source: TLS certificate checkSource reliability: high
Domain & registration
The submitted address is a subdomain. Fraudly also checked the registered domain because domain age and ownership belong to the root domain.
- Checked URL/hostname: support.qr-code-generator.com
- Registered domain: qr-code-generator.com
- Registration date: 2010-10-18T03:33:02.000Z
- Domain age: 15 years, 8 months, 15 days — last verified earlier
- Registrar: Amazon Registrar, Inc.
- Country: unknown
- Expiration date: unknown
- Privacy / redacted ownership hints: no / unknown
- Subdomain analysis: Potentially risky wording found (support).
Source: RDAP (rdap.org) (cached)
Redirect analysis
- Original URL: https://q-r.to/
- Final URL: https://support.qr-code-generator.com/hc/en-us/articles/7664232533133-Why-are-there-different-short-URLs-domains-
- Final domain: support.qr-code-generator.com
- Redirect count: 1
- Crossed registrable domain: yes
- https://support.qr-code-generator.com/hc/en-us/articles/7664232533133-Why-are-there-different-short-URLs-domains-
Security checks (HTTPS / certificates)
- HTTPS/TLS reachable: yes
- Certificate trusted in probe: yes
- Possibly self-signed / untrusted: no / unknown
- Issuer: Let's Encrypt
- Expiry: 2026-08-04T23:46:47.000Z
Source: TLS certificate check
Technical source details
Raw provider names (OpenPhish, URLhaus, Google Web Risk, RDAP, etc.) for this scan. “Matched” means that source reported something relevant.
Subdomain submitted; root registration also checkeddomainno match
The submitted host support.qr-code-generator.com is a subdomain. Fraudly checks RDAP/domain-age on qr-code-generator.com because ownership and registration belong to the registrable root domain.
Source: Fraudly hostname analysis · severity: info · reliability: high
No Police page string matchgovernmentno match
No direct domain string overlap was detected in lightly cached excerpts of the referenced politie.nl pages. Missing a hit is not proof a shop is trustworthy.
Source: Dutch Police (public pages) · severity: info · reliability: low
Domain age from prior successful lookupdomainno match
Approximate domain age: 5730 days (from cache). Domain registration age could not be verified during this scan. Some registries temporarily limit or omit registration data. This does not mean the website is suspicious, and it was not treated as a risk signal. Last successful lookup: 2026-06-26T19:34:37.892Z.
Source: RDAP (rdap.org) · severity: info · reliability: medium
No OpenPhish match found in this snapshotphishingno match
No overlapping entry was found in the fetched OpenPhish feed for this check window. This does not prove the site is safe.
Source: OpenPhish · severity: info · reliability: medium
URLhaus unavailablemalwareno match
HTTP 401
Source: URLhaus · severity: info · reliability: low
HTTPS is availablesslno match
HTTPS is available. This protects the connection, but does not verify that the site is legitimate. Issuer: Let's Encrypt. Expiry: 2026-08-04T23:46:47.000Z.
Source: TLS certificate check · severity: info · reliability: high
Redirect chain detecteddomainmatched
The entered website forwards visitors to a different registrable domain. Fraudly included the final destination in this scan.
Source: Fraudly redirect analysis · severity: warning · reliability: high
Redirects to another domaindomainmatched
The entered website forwards visitors to a different domain. The final destination was included in this scan.
Source: Fraudly redirect analysis · severity: warning · reliability: high
Reputation enrichment
Optional broader reputation pass when available—beyond the quick baseline probes.
No enriched reputation profile surfaced. That limits context; it does not prove the site is unsafe.
Quick review probes (baseline scan)
Lightweight directory checks powering part of the model—hiccups here describe our snapshot, not the shop’s honesty.
Trustpilot · Unavailable
UnavailableTrustpilot
No public reviews found
Checked, no public reviews found
Google Reviews · Not confidently linked
Limited dataGoogle Reviews
We found possible review data, but could not confidently link it to this domain.
Not confidently linked
We found possible review data, but could not confidently link it to this domain.
- No reliable public review data found
No public review profile was found. This limits confidence but does not prove the site is unsafe.
- Public review data unavailable for this check.
Source availability (neutral)
- Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
- Indexed review snippets probe: snapshot unavailable in this crawl (limits confidence only).
Raw review snapshots
Trustpilot raw snapshot: not available in current payload.
Google reviews raw snapshot: not available in current payload.
Fulfillment signals
Dropshipping: unlikely · China-linked fulfillment: unlikely · Local stock/production: unlikely · Confidence low · Score nudge: 0
- Marketplace terms detected: unlikely
- Third-party seller language detected: unlikely
- Cross-border shipping detected: unlikely
- Supplier fulfillment detected: unlikely
- Separate shipment language detected: unlikely
- International shipping detected: unlikely
- Fulfillment confidence: low · Fulfillment score nudge: 0
- Corpus: 1 segments / 16 chars · version: fulfillment-v2-marketplace · matched: none
- No strong supply-chain signals detected in snippet.
Scoring detail (advanced)
Composite model uses raw impacts × confidence weights on the server. Positive numbers push the risk score up; negative numbers pull it down. Neutral rows are explanatory only — they must not be read as endorsement.
Applied trust-score cap after identity guardrails: 100/100 displayed trust.
Combined scoring signals (reviews, reputation, feeds, fulfillment…)
Trust-positive signals
- Business name presence (-3 raw · medium confidence) — References Qr Code Generator.
- Long-established domain registration (-16 raw · high confidence) — Domain has been registered for roughly 16 years—a strong legitimacy signal.
- Valid HTTPS baseline (-3 raw · low confidence) — HTTPS and certificate checks looked healthy in this run. This is supportive context, not proof of legitimacy.
- Mail exchangers with SPF or DMARC (-3 raw · low confidence) — MX exists and at least SPF or DMARC is published—common for serious domains and slightly reassuring when intel is incomplete.
Website & technical observations
- No matched Google listing (+0 raw · high confidence) — No Google Places listing matched this domain; review impact is neutral (not a penalty).
- No bait keywords in domain (-5 raw · medium confidence) — The domain does not contain common bait-style sales keywords.
Detected risk patterns
- Unusually long domain (+10 raw · medium confidence) — The hostname is unusually long, which is common in phishing or throwaway shops.
- Suspicious subdomain wording (+5 raw · medium confidence) — Subdomain labels include risky wording (support).
- Business legitimacy caution (+5 raw · low confidence) — No clear contact or support channel was found in the captured content.
- Suspicious subdomain wording (+4 raw · medium confidence) — Subdomain terms like support are often used in impersonation/login lures.
- Redirects to another domain (+8 raw · high confidence) — The entered website forwards visitors to a different domain. The final destination was included in this scan.
Incomplete or unavailable data
- Domain age from prior successful lookup (+0 raw · low confidence) — RDAP was unavailable this scan, but Fraudly reused a recent successful registration snapshot so scores stay stable.
Scam intelligence weighting (model)
Detected risk patterns
- Suspicious subdomain wording (+4 raw · medium confidence) — Subdomain terms like support are often used in impersonation/login lures. · RDAP (rdap.org) (cached)
Review collector notes (neutral)
Buckets distinguish provider errors, source outages, review-derived signals, and (rare) website crawler transparency—never merged with fraud intel.
- trustpilot_public · source_unavailable: Third-party Trustpilot snapshot: snapshot unavailable in this crawl (limits confidence only).
- google_indexed_snippets · source_unavailable: Indexed review snippets probe: snapshot unavailable in this crawl (limits confidence only).
Key factors explained
Blended notes from patterns we detected, scam intelligence scoring, and optional AI assistance—not legal or financial advice.
- No common bait keywords were found in the domain.
- The domain name is unusually long, a common phishing pattern.
- Subdomain labels include high-risk wording: support.
AI model used in this run: no
