About
A free security toolkit built by the MalwareTips community — the same people who've been helping strangers on the internet spot scams since 2008.
MalwareTips Tools is the technical arm of the MalwareTips community — a volunteer-run forum where security enthusiasts, analysts, and everyday people share what they know about online threats. The tools on this site take the knowledge our community has accumulated over nearly two decades and automate it: if you've ever wanted a friend who could glance at a suspicious URL and tell you whether it's a scam, this is that friend, at scale.
What we do
The flagship product is our Scam URL Scanner — it cross-references every URL against 90+ antivirus engines, major browser blocklists, WHOIS and SSL certificate data, hosting reputation, Cloudflare popularity rank, third-party review scores, and an AI security analyst that reads the page the way a human would. All the signals are combined into a single trust score and a plain-English verdict. More tools are on the way — a breach-lookup service, a fake review detector, a phishing link tracer, and a bulk IOC checker for analysts. See the full arsenal for what's live and what's coming.
What makes us different
No logs tied to your identity
We keep the bare minimum needed to run the service — rate-limit counters, cached scan results, and your account if you're signed in. We don't sell behavioural data, we don't run ad or remarketing trackers, and we don't serve ads. We do use Google Analytics (with IP anonymisation) for aggregate traffic stats. See our privacy policy for the specifics.
Free, forever
There's no paywall. No "unlock more scans" upsell. No premium tier. If you want to support the project, the best way is to contribute on the forum — answer a stranger's question, report a scam you've seen, or just tell us when something's broken.
Community-driven verdicts
Every scan report supports comments, ratings, and tags. If you've been scammed by a site — or if you run a legitimate business that's been unfairly flagged — leave a comment. Staff reviewers read every report and can override the automated verdict when it gets things wrong.
Built in the open
The tools are built with modern web standards (Next.js, TypeScript, Supabase) and designed to be transparent. When we tell you a site is risky, we show you exactly which signals fired — you're never asked to trust the verdict on faith.
Who's behind it
The project is maintained by a small core team of MalwareTips forum veterans, with help from community contributors and volunteer moderators. If you'd like to get involved — as a contributor, a tester, or a translator — drop by the forum and say hi.
Stay in touch
Follow us on Facebook, X, TikTok, or YouTube for scam alerts and security news. Want to report a bug or request a feature? Post on the forum.