Destination clarity
Raw IP hosts, misleading userinfo, URL shorteners, unusual ports, and missing HTTPS.
Offline by design · zero URL requests
See what the square
is hiding.
QuishScope decodes QR payloads and explains suspicious signals before a browser, mail client, or Wi-Fi dialog gets involved.
Payload microscope
Inspect without visiting
Choose a QR image or paste a decoded payload. Decoding and inspection stay in this browser tab; nothing is uploaded or opened.
Drop a QR image here
PNG, JPEG, WebP, or GIF · max 10 MB
Your image stays on this device.
or inspect a decoded payload
RISK SCORE—
WAITING
Enter a payload to reveal its static signals.
Explainable by default
Signals, not verdicts
Every point maps to something you can inspect. No opaque “AI says bad” label.
Identity tricks
Punycode labels and mixed writing systems that can imitate familiar domain names.
Payload concealment
Nested destinations, Base64 URLs, repeated percent encoding, and control characters.
Action awareness
Email prefill, Wi-Fi credentials, custom URI handlers, and active-content schemes.
Local pipeline
Image in. Evidence out.
1DecodeRead QR pixels locally
→
2ClassifyURL, email, Wi-Fi, text
→
3InspectBounded deterministic rules
→
4ExplainHuman or JSON report