Before it catches you,
we catch it.

Yes — every scanner on this site is free to use and requires no account. Sign-in only unlocks higher rate limits and the ability to comment on reports. We don't sell data, we don't run ads, and the community has funded the forum since 2011.

We cross-check URLs and files against 70+ AV engines plus URLScan's sandbox, Google Safe Browsing, AbuseIPDB, PhishTank, URLhaus, and an AI analyst that reads engine output in plain English. Reports are permanent, shareable, and optimised for reading rather than dashboards to decode.

IPs are used only for anti-abuse rate limiting — never linked to a scan result. Emails and SMS bodies are SHA-256 hashed before persistence so the same submission from anyone lands on the same cached report. Passwords never leave your browser — the generator runs entirely client-side.

A fast, phishing-tuned URL checker that answers 'is this a phishing page, yes or no' in under 3 seconds. It runs Google Safe Browsing, typosquat detection against a brand list, homoglyph (Cyrillic/Greek lookalike) detection, and 9 URL pattern heuristics. Use it when you need an instant call; use the full URL scanner when you need the forensic deep-dive.

Phishing Link Analyzer: sub-3s. SMS scanner: under 10s. URL scanner: 20–45s (it waits for URLScan sandbox + AI verdict). File scanner: 30–60s for fresh uploads, instant for files we've seen before. Every scan is cached by content hash so repeat submissions are immediate.

The AI is one of several signals — never the only one. If 50 AV engines clear a file and the AI disagrees, we flag the disagreement rather than blindly following the model. The AI's job is to explain WHY the signals disagree and categorise the threat (credential harvest, smishing, brand impersonation, etc.), not to override the engines.

Every report page has a comment thread — leave a note there. Moderators triage comments and can apply overrides when warranted. For urgent cases, use the forum's 'Malware Analysis' section where staff research false-positive claims and contact the relevant AV vendor.

Bulk scanning is on the roadmap. Today the scanners are designed for one-at-a-time interactive use with rate limits that respect shared infrastructure. If you need bulk access for research or a SOC workflow, open a thread on the forum — we work directly with members who have legitimate need.

MalwareTips has been a malware-research forum since 2011 with over 100,000 members trading samples, running manual analysis, and reporting scams. These tools surface the signal the community already produces — every scan is a contribution back to a shared corpus.