Served from qr.marriott.com, the tenant's own domain. No third-party redirect, no subscription kill-switch, anti-quishing by construction. The code above is this page's own, shown small because you already scanned one to get here. The full-size version lives on the printed card.