ZERO-TRUST DESTINATION INSPECTIONSTAGE 2 LIVE

Inspect before you interact.

Never open an unverified QR destination directly on your personal device. QR Kavach spins up a disposable cloud sandbox to inspect threats, credential stealers, and phishing redirects in real time.

REAL QR DECODER

Tap to Start Live Camera Scanner

Live Test Scenarios (Auto-decodes with jsQR):

STAGE 5 DEMO TARGETSScannable QR Test Harness

Scan these QR codes using your device camera, upload the image, or trigger 1-click detonation.

Dual Comparison

PHISHING SIMULATIONDANGER · 87/100

Fake Banking QR

Spoofs Secure Bank login with Customer ID, Password, OTP, and 302 redirect.

Generating QR...

http://localhost:3000/demo/fake-bank-login

AUTHENTIC DESTINATIONSAFE · 8/100

Safe Merchant QR

Genuine Sharma Kirana Store. NPCI verified gateway, zero credential forms.

Generating QR...

http://localhost:3000/demo/safe-merchant

Isolated Sandbox Detonation

Never routes through your local IP or exposes auth cookies

PLAYWRIGHT_SANDBOX

PROJECT ARCHITECTURE & FEATURES

Interactive Feature Radar

Hover or tap any circular node below to explore the core subsystems powering QR Kavach.

Live Camera

File Upload

Quarantine

Playwright

Form Sniffer

Redirects

Risk Engine

Screenshot

Auto Purge

Disposable Sandbox

BACKEND

Tech: FastAPI • Playwright Async • Docker

ACTIVE SUBSYSTEM

Spins up an ephemeral, containerized Chromium browser worker per scan to detonate and navigate untrusted links in full isolation.

STEP 1 • ISOLATION

Disposable Sandbox

Target URLs render strictly inside headless container workers completely segregated from your mobile device.

Ephemeral Container

STEP 2 • EVIDENCE

Behavioral Sniffer

Detects password forms, credential traps, look-alike domains, and stealth multi-hop redirects before you click.

DOM Inspection

STEP 3 • VERDICT

Risk Score & Preview

Review a transparent 0-100 risk rating, threat checklist, and safe sandbox screenshot before opening any link.

Visual Proof