Have you ever used the ITS app?Ok.
The pharma and serials are just embedded in the url as is the trigger to launch the app. If you have a code that works it's no problem to duplicate it.
There's nothing special or counterfeit proof about QR codes.
Regarding the 1000s combinations, they don't need unique ids on every box. The forgers can just get a sample of legit codes from official product and use those. They just need to make sure they don't send any doubles.
I'm not saying the posted pens are fake, I'm saying that qr codes aren't bulletproof and copying legit codes would he one of the easiest parts of making a counterfeit.
What you're saying is exactly what the dude above with the fake pens had happen to him. Sure they can duplicate it once maybe even a handful of times. But it's extremely unlikely for them to keep it up. Look at the above QR code label on the fake pen. If it was the easiest part, then the scammers that guy bought from sure did an absolute piss poor job. No one is saying that the QR code is impossible to duplicate. Not even once. But what you're saying is just extremely unlikely to be done successfully. You want to scam a dozen people. Maybe. But you're not going to be able to keep it up.
When verifying GH you can't check just one box. ALL boxes need to be checked. I've yet to see a perfect fake. Any fakes I've seen have been painfully obvious where simple common sense would come into play. The QR code is just one piece of the puzzle. And it is still one of the best ways to verify. Even if you think it's easily faked.