Free security tools. Check before you click.

Yes — every scanner on this site is free to use and requires no account. Sign-in unlocks higher rate limits and an ad-free member experience, and lets you comment under your forum name. Guest pages may include clearly separated advertising that helps fund the service, and we don't sell your scan data.

For a website, we combine the 90+ antivirus and blocklist engines VirusTotal runs on a URL with browser threat feeds, domain, SSL, and infrastructure evidence, a saved page capture, and an AI analyst that explains the result in plain English. Reports are permanent, shareable, and designed to be read without decoding a dense dashboard.

The IP address that submits a scan counts toward the hourly rate limit and is kept with that scan's record for abuse prevention and moderation, then deleted automatically after 90 days. It is never shown in public reports; MalwareTips staff see it in the admin area, masked unless they are administrators. Email and SMS reports are addressed by a SHA-256 hash, so the same submission from anyone lands on the same report; they keep the derived evidence (for SMS, a message snippet of up to 500 characters), not the raw upload. Passwords never leave your browser — the generator runs entirely client-side.

A fast, phishing-tuned URL checker that answers whether a link shows phishing signals. It runs Safe Browsing checks, typosquat detection against a brand list, homoglyph detection, and URL pattern heuristics. Use it for a quick check; use the full URL scanner when you need the forensic deep-dive.

Quick phishing and message checks usually return first. Full URL and file scans can take longer because they wait for multiple live checks and AI analysis. Reports already present in the cache return much faster.

The AI is one of several signals — never the only one. If antivirus engines and the AI disagree, the report surfaces that disagreement instead of blindly following the model. The AI explains why signals differ and categorises the suspected threat; it does not replace the underlying evidence.

Press “Verdict looks wrong?” on the report: MalwareTips staff read those reports and can correct the rating, and a staff decision is shown on the report. Every report page also has a comment thread. For urgent cases, use the forum's Malware Analysis section, where staff can research the claim and contact the relevant vendor.

Bulk scanning is on the roadmap. Today the scanners are designed for one-at-a-time interactive use with rate limits that respect shared infrastructure. If you need bulk access for research or a SOC workflow, open a forum thread so the team can review the use case.

MalwareTips has been a malware-research forum since December 2010. Members trade analysis, investigate suspicious files, and report scams. The tools turn that practical security workflow into permanent reports and let visitors contribute first-hand experience back to the shared corpus.