QR Code Decoder · quishing analysis
Upload a QR image to extract the embedded URL or text, inspect it for quishing, and scan the link on mlab. The image is decoded in your browser · nothing is uploaded.
QR image
Click to select, drag & drop, or paste a QR image
Decoded content
Drop a QR image to decode it.
Related tools
How to use
1
Upload the QR
Drop, select or paste a screenshot of the QR code.
2
Read the content
The URL or text is extracted without ever visiting the link.
3
Scan on mlab
Send a suspicious URL straight to a mlab scan.
Frequently Asked Questions
QR-code phishing · a malicious URL hidden in a QR code on a flyer, invoice or email. Users can't read it by eye, so they scan and land on a malicious page. Decoding first lets you inspect the destination safely.
No. The image is decoded on a canvas in your browser. Image data never leaves your device.
Text, URLs, Wi-Fi credentials, vCard/MeCard contacts, phone, email, SMS, geo coordinates and more. The tool recognizes the common structured formats.
Blurry, low-contrast, cropped or heavily rotated images may fail. Use a higher-resolution image with the full code visible.
A free tool from mlab, the intelligence platform for IOC, domain and file analysis. Rolling this out across a team? Talk to us.