U+URLClinic
Decode a QR image locally

QR to URL Decoder

Upload a QR image and decode it locally in your browser. If it contains a URL, send it straight to URLClinic for analysis.

Choose a QR image

Decoding happens locally in your browser; the image itself is not uploaded to URLClinic.

Decode locally, then diagnose

The QR image is processed in your browser and is not uploaded to URLClinic. If the decoded value is a web URL, you can send that text to URL Checkup.

How it helps

This makes QR to URL useful as a first step before deciding whether to open an unfamiliar code.

How URLClinic approaches the check

URLClinic uses a Cloudflare Worker to request only public HTTP or HTTPS destinations. Redirects are followed manually so each hop can be validated and shown. Response content is size-limited, private network targets are blocked, and the tool avoids forwarding browser cookies or authentication headers to the destination.

The result is designed for practical decisions. It combines raw technical details with plain-language findings and links to related actions such as cleaning, recovery, Rescue Links, monitoring and QR generation.

Limitations you should know

Some websites block automated requests or serve different content to automated clients. A timeout or 403 therefore does not always mean a link is broken. URLClinic also does not execute a full browser session for every analysis, so JavaScript-only content may expose less metadata than a normal browser view.

FAQ

Common questions

Does URLClinic guarantee that a URL is safe?

No. URLClinic reports technical URL and response-level signals. A low-risk result is not proof that a website is trustworthy, malware-free or controlled by the person you expect.

Can URLClinic scan private networks?

No. Local, loopback, link-local and common private IP ranges are blocked, and only standard web ports 80 and 443 are supported.

Does URLClinic store every URL I check?

Ordinary one-off analyses are not intentionally stored in the application database. In the Direct Upload edition, ordinary analyses are not stored in an application database. Signed Rescue Links and shared reports carry only the minimum data required to work, and watchlist items are saved in your browser. See the Privacy Policy for details.