Is freebuff.com safe?
http://freebuff.com/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (60 of 93 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Freebuff is a real, long-registered domain offering a free ad-funded coding agent, but its hosting IP carries a moderate abuse history and one stale antivirus detection.
Freebuff presents itself as a '100% free coding agent' that costs '$0 forever, funded by ads', operated by Freebuff, Inc. according to its own Terms of Service. The registrable domain is over 26 years old, the site offers a support email on its own domain and links to GitHub and Discord, and the browser threat feed reports no threat. Against that, the hosting IP has a moderate abuse confidence score of 41/100 across 41 saved reports, and one independent antivirus family returned an adverse result that is flagged as stale. No fake-shop, phishing, or payment-fraud mechanics were confirmed. The score reflects a legitimate-looking but not fully verified service with a mixed technical reputation.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 74/100
Low Risk covers scores 70–84. 2 findings pulled the score down; 5 pushed it up.
What pulled the score down
- Strong1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- ModerateThe hosting IP has an abuse confidence score of 41/100 across 41 saved reports.
What pushed the score up
- SupportsThe registrable domain is 9,713 days old, indicating long-term registration.
- SupportsThe site lists a support email on its own domain (support@freebuff.com).
- SupportsThe site links to two social profiles, GitHub and Discord.
- SupportsThe browser threat feed returned no threat warning for the domain.
- SupportsThe saved TLS check found a valid encrypted connection.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
Freebuff presents itself as a '100% free coding agent' that costs '$0 forever, funded by ads', operated by Freebuff, Inc. according to its own Terms of Service. The registrable domain is over 26 years old, the site offers a support email on its own domain and links to GitHub and Discord, and the browser threat feed reports no threat. Against that, the hosting IP has a moderate abuse confidence score of 41/100 across 41 saved reports, and one independent antivirus family returned an adverse result that is flagged as stale. No fake-shop, phishing, or payment-fraud mechanics were confirmed. The score reflects a legitimate-looking but not fully verified service with a mixed technical reputation.
What Freebuff actually offers
Freebuff markets itself as a '100% free coding agent' with the tagline '$0 forever, funded by ads'. The primary call to action is a download for desktop applications, with a visible 'Download for Windows' button. The Terms of Service state that the service is operated by Freebuff, Inc. and covers Freebuff and Codebuff, including websites, apps, and other services.
The site provides a support email on its own domain (support@freebuff.com) and links to two social profiles, GitHub and Discord. These are normal contact and community channels for a software product, not evidence of a scam.
Technical reputation versus operator transparency
The domain is 9,713 days old (registered around 2000), which is a supportive signal of longevity, though the current service appears to be a recent deployment. The browser threat feed returned no threat warning, and the saved TLS check found a valid encrypted connection. These are baseline technical positives, not proof of operator safety.
The hosting IP has an abuse confidence score of 41/100 across 41 saved reports, which is a moderate adverse signal. One independent antivirus family reported an adverse result, but the detection is marked as stale, so its current relevance is uncertain. No confirmed phishing, malware distribution, or payment-fraud mechanics were found on the site itself.
The Terms of Service include a standard liability cap limiting total aggregate liability to the greater of $100 or the amount paid in the last 12 months, and the service is provided 'as is'. This is a common commercial disclaimer, not a scam indicator, but it does mean users have limited recourse if something goes wrong.
What a visitor experiences
A visitor arriving at freebuff.com sees a pitch for a free coding agent funded by ads, with a prominent download button for Windows (and presumably other platforms). Clicking it initiates a desktop application download.
The site also links to Codebuff, a related service, and to GitHub and Discord for community and support. No cross-domain commercial checkout, affiliate funnel, or forced redirect was observed.
Why the score is 74
The saved checks found no material threat, but the evidence was not strong enough for the highest Safe tier. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 93
detectionsSaved analysis from October 22, 2026 - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 1
- Total
- 93
| Engine | Finding |
|---|---|
| Chong Lua DaoMalicious | malicious |
| SOCRadarSuspicious | suspicious |
All 93 engine results
- Chong Lua Dao - Malicious
- SOCRadar - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- Orcapot - Unrated
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
How security vendors categorise this site
- alphaMountain.aiInformation Technology
- BitDefenderonlinedating
- Dr.Webadult content
- Forcepoint ThreatSeekerinformation technology
- Googletechnology
- Sophosinformation technology
Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The 100% free coding agent $0 forever, funded by ads.
What the captured page showed
1 observation- 01
The 100% free coding agent $0 forever, funded by ads.
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Freebuff: The free coding agent
- Meta description
Code, build and deploy apps, and chat with AI for free. Work in your browser, desktop or terminal with Freebuff.
Pages we read
- Main page/Read
- Terms/terms-of-serviceRead
03 · Investigation Story
Investigation story
What the site claims
Freebuff: The free coding agent
What we observed
The page content was captured and checked alongside 60 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Saas
Observed behavior
Evidence behind this classification
- 01The registrable domain is 9,713 days old, indicating long-term registration.
- 02The hosting IP has an abuse confidence score of 41/100 across 41 saved reports.
- 03The browser threat feed returned no threat warning for the domain.
Web research findings
Independent findings for freebuff.com, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for freebuff.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainfreebuff.com
- Redirects tofreebuff.com
- Hosted byRender
- Referencesdiscord.gg · github.com
Domain Timeline
- Mar 20, 2000Domain registered
First appeared in WHOIS records — 26 years old when this review was saved.
- Oct 24, 2026Saved security review — Rated Low Risk
This saved scan found no material threat, but the evidence was not strong enough for the highest Safe tier.
freebuff.com has operated for years and this review found no material threat — a long track record, though it is never a guarantee on its own.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (support@freebuff.com).
- Links to 2 social profiles.
Domain & Encryption
Certificate issued for freebuff.com.
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://freebuff.com/
- 2200https://freebuff.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. · The hosting IP has an abuse confidence score of 41/100 across 41 saved reports.
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 93 engines flagged | Limited | Adverse | stale fallback · analysed Oct 22, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 24, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 24, 2026 |
- Antivirus
- Result2 of 93 engines flagged
- CompletionLimitedFindingAdverse
- Freshnessstale fallback · analysed Oct 22, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 24, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is freebuff.com a scam or is it safe?
Is freebuff.com safe to use?
Has freebuff.com been flagged by antivirus engines?
Is freebuff.com on any phishing or malware blacklists?
How old is the freebuff.com domain?
Does freebuff.com have a valid SSL certificate?
Where is freebuff.com hosted?
Is freebuff.com a well-known website?
How often is the freebuff.com report updated?
08 · Final Verdict
Final verdict
Freebuff is a real, long-registered domain offering a free ad-funded coding agent, but its hosting IP carries a moderate abuse history and one stale antivirus detection.
Freebuff presents itself as a '100% free coding agent' that costs '$0 forever, funded by ads', operated by Freebuff, Inc. according to its own Terms of Service. The registrable domain is over 26 years old, the site offers a support email on its own domain and links to GitHub and Discord, and the browser threat feed reports no threat. Against that, the hosting IP has a moderate abuse confidence score of 41/100 across 41 saved reports, and one independent antivirus family returned an adverse result that is flagged as stale. No fake-shop, phishing, or payment-fraud mechanics were confirmed. The score reflects a legitimate-looking but not fully verified service with a mixed technical reputation.
09 · Community
Community
Are you the owner of freebuff.com?Verify and reply