☢ QR HAZMAT

Containment Protocol Active

☢ Containment Report

FORMAT
CONTENT TYPE
THREAT ASSESSMENT
RAW PAYLOAD

        

📋 Specimen Log

☢ About QR Hazmat

QR Hazmat is a sealed laboratory for QR codes and barcodes. It safely decodes what's inside without ever acting on the payload.

Think of it as a bomb disposal unit for those mysterious QR codes you find on stickers, posters, and suspicious emails. We open the package in a controlled environment so you don't have to.

🛡 Containment Guarantees

  • We NEVER follow links or connect to URLs
  • We NEVER execute any code found in scanned items
  • We NEVER send your scan data anywhere
  • All processing happens entirely on your device

🔎 What we detect

Our threat analysis engine checks for URL shorteners, IP-address URLs, unencrypted HTTP links, JavaScript injection, data URIs, punycode/homograph domains, suspicious TLDs, embedded credentials, excessive subdomains, phishing keywords, hidden characters, deceptive file extensions, and many other attack patterns.

⚠ Important Disclaimer

Only you can decide if a QR code is safe. We flag known risk patterns, but we cannot guarantee that any code is harmless. A "no known threats" result does not mean "safe" — it means we didn't find anything obviously suspicious.

Before acting on any scanned content, ask yourself: Do I recognize this URL? Does the domain look right, or has it been subtly altered to mimic a real site? Is there any reason someone would put this QR code here? When in doubt, don't click it.

🧪 Why "Hazmat"?

Because scanning unknown QR codes is the digital equivalent of sniffing an unmarked container. We provide the protective gear.

💡 Tips & Troubleshooting

📷 Live Scan vs. Upload

Live Scan opens your camera and continuously scans for codes in real time. Just point and it detects automatically — no need to take a photo first. It's faster and works better on curved surfaces like bottles or packaging, because it tries many frames per second.

Upload Image analyzes a single photo from your library or camera. Use this when you have a screenshot, a saved image, or when Live Scan isn't available.

⚠ Camera not working?

If the camera fails to start, your browser may be blocking access. To fix this:

  • iPhone Safari: Go to Settings → Safari → Camera → set to "Allow" or "Ask"
  • iPhone Chrome: Go to Settings → Chrome → Camera → enable
  • Android Chrome: Tap the lock icon in the address bar → Permissions → Camera → Allow

The camera also requires a secure connection (HTTPS). If you see a "not secure" warning in your address bar, Live Scan won't be available.

🏠 Add to Home Screen

You can install QR Hazmat as a standalone app on your phone. It will get its own icon, launch without the browser toolbar, and work offline.

  • iPhone: Tap the Share button (square with arrow) → "Add to Home Screen"
  • Android: Tap the menu (three dots) → "Add to Home Screen" or "Install app"

Note: The Home Screen version has its own separate scan history. It won't share history with the browser version.

📋 Scan tips

  • Hold the camera steady and close to the code
  • Make sure the code is well-lit and in focus
  • For small or distant codes, use Upload and crop the photo first
  • 1D barcodes (like on groceries) work best when held flat and straight
♥ Support the Containment Effort

Running a hazmat lab isn't cheap. Well, actually it is — this is a free web app. But the developer still enjoys coffee.

This is the ONE link we vouch for. Yes, we appreciate the irony of an anti-link app asking you to click a link.

⚖ Licenses

html5-qrcode

Author: Minhaz (mebjas)
License: Apache License 2.0
Source: github.com/mebjas/html5-qrcode

jsQR

Author: Cosmo Wolfe
License: Apache License 2.0
Source: github.com/cozmo/jsQR

QR Hazmat

© 2026 QR Hazmat. All rights reserved.