Every QR code is a wrapped treat. CandyWrapper checks what's inside before you taste it.
Point your camera at any QR code. CandyWrapper reads it, runs instant checks on your phone, then sends the link to an isolated sandbox that loads the page so you don't have to. You get a report — sweet or spoiled — with a screenshot of what's behind the code and the results of eleven security checks. Then you decide.
WHAT IT CHECKS
• Lookalike and typo'd domains (paypa1, gооgle)
• Dangerous link types that should never open
• Redirect chains and URL shorteners
• Google Safe Browsing and VirusTotal reputation
• TLS certificates and domain age
• Phishing patterns in the page itself
• A sandbox screenshot, so you see the destination without visiting it
MORE THAN LINKS
QR codes carry phone numbers, Wi-Fi networks, contact cards, text messages and app links. CandyWrapper explains each one — what it opens, what it can do, what to watch for — and never blocks you from continuing.
YOUR HISTORY, YOUR CHOICE
Everything you check stays on your phone. Sign in and it follows you to a new device. No account is needed to scan.
MAKE YOUR OWN
Create QR codes with a tracked link: see how often they're scanned, have the destination re-checked over time, and revoke a code if it's misused.
No ads. No tracking. The camera reads codes and nothing else.
Unwrap it before you tap it: every QR code checked on-device and in a sandbox.