QRensic — QR Code Digital Forensics

Field notes

The homepage describes a desktop workflow that preserves the source QR image, decoded payload, timestamps, and analysis identifiers before examining the destination. Its stated checks include redirect chains, DNS resolution, TLS certificates, page behavior, and phishing or credential-harvesting indicators. The site also names JSON evidence records and Professional PDF reports, with a sample panel showing a four-hop redirect chain, a low risk score, and SHA-256-sealed evidence. The extracted page does not verify the downloaded application's behavior.