Is wicar.org safe?
http://wicar.org/
Coveragestrong3 of 4 applicable core capabilities
WICAR.org is a legitimate security-testing utility operated by OSI Security.
The site supplies safe, non-infectious test files and simulated exploits so administrators can verify that anti-malware products and network filters are working correctly. It is over 13 years old, carries no the browser threat feed warnings, and shows no evidence of monetization beyond optional donations.
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
The site supplies safe, non-infectious test files and simulated exploits so administrators can verify that anti-malware products and network filters are working correctly. It is over 13 years old, carries no the browser threat feed warnings, and shows no evidence of monetization beyond optional donations.
Evidence supporting legitimacy
The domain is explicitly presented as a service of OSI Security, an Australian security firm, and the site’s own footer repeats this attribution.
The site links to the well-known EICAR anti-virus test file project and offers a demonstration video showing how corporate defenses should block simulated exploits.
Technical versus operator risk
One antivirus product flags the site because it intentionally hosts content that mimics malware; this is an expected detection for a testing utility and does not indicate malicious intent.
the browser threat feed returns no threat warning, the TLS certificate is valid, and the domain has been registered for more than 13 years.
Why the score is 92
1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
2/ 92
detectionsSaved result - stale
2 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 1
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| Chong Lua DaoMalicious | malicious |
| GridinsoftSuspicious | suspicious |
All 92 engine results
- Chong Lua Dao - malicious - Malicious
- Gridinsoft - suspicious - Suspicious
- 0xSI_f33d - unrated - Clean
- Abusix - clean - Clean
- Acronis - clean - Clean
- ADMINUSLabs - clean - Clean
- AILabs (MONITORAPP) - clean - Clean
- AlienVault - clean - Clean
- alphaMountain.ai - clean - Clean
- AlphaSOC - unrated - Clean
- Antiy-AVL - clean - Clean
- ArcSight Threat Intelligence - unrated - Clean
- AutoShun - unrated - Clean
- Bfore.Ai PreCrime - unrated - Clean
- BitDefender - clean - Clean
- Bkav - unrated - Clean
- BlockList - clean - Clean
- Blueliv - clean - Clean
- Certego - clean - Clean
- ChainPatrol - unrated - Clean
- CINS Army - clean - Clean
- CRDF - clean - Clean
- Criminal IP - unrated - Clean
- CSIS Security Group - unrated - Clean
- CTX AI - clean - Clean
- Cyan - unrated - Clean
- Cyble - clean - Clean
- CyRadar - clean - Clean
- desenmascara.me - clean - Clean
- DNS8 - unrated - Clean
- Dr.Web - clean - Clean
- EmergingThreats - clean - Clean
- Emsisoft - clean - Clean
- Ermes - unrated - Clean
- ESET - clean - Clean
- ESTsecurity - clean - Clean
- Forcepoint ThreatSeeker - clean - Clean
- Fortinet - clean - Clean
- Fortra - unrated - Clean
- G-Data - clean - Clean
- GCP Abuse Intelligence - unrated - Clean
- Google Safe Browsing - clean - Clean
- GreenSnow - clean - Clean
- GreyNoise - unrated - Clean
- Guardpot - unrated - Clean
- Heimdal Security - clean - Clean
- Hunt.io Intelligence - unrated - Clean
- IPsum - clean - Clean
- Juniper Networks - clean - Clean
- K7AntiVirus - unrated - Clean
- Kaspersky - clean - Clean
- LevelBlue - unrated - Clean
- Lionic - clean - Clean
- Lumu - unrated - Clean
- Malwared - clean - Clean
- MalwarePatrol - clean - Clean
- MalwareURL - unrated - Clean
- Mimecast - unrated - Clean
- Netcraft - unrated - Clean
- OpenPhish - clean - Clean
- PhishFort - unrated - Clean
- Phishing Database - clean - Clean
- Phishtank - clean - Clean
- PREBYTES - clean - Clean
- PrecisionSec - unrated - Clean
- Quick Heal - clean - Clean
- Quttera - clean - Clean
- Rising - clean - Clean
- SafeToOpen - unrated - Clean
- Sangfor - clean - Clean
- Sansec eComscan - unrated - Clean
- Scantitan - clean - Clean
- SCUMWARE.org - clean - Clean
- Seclookup - clean - Clean
- Snort IP sample list - unrated - Clean
- SOCRadar - unrated - Clean
- Sophos - clean - Clean
- StopForumSpam - clean - Clean
- Sucuri SiteCheck - clean - Clean
- Synthient - unrated - Clean
- ThreatHive - clean - Clean
- URLhaus - clean - Clean
- URLQuery - unrated - Clean
- Viettel Threat Intelligence - clean - Clean
- VIPRE - unrated - Clean
- ViriBack - clean - Clean
- VX Vault - clean - Clean
- Webroot - clean - Clean
- Xcitium Verdict Cloud - clean - Clean
- Yandex Safebrowsing - clean - Clean
- ZeroCERT - clean - Clean
- ZeroFox - unrated - Clean
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
WICAR.org - Test Your Anti-Malware Solution!
What the captured page showed
1 observation- 01
WICAR.org - Test Your Anti-Malware Solution!
03 · Investigation Story
Investigation story
What the site claims
WICAR.org - Test Your Anti-Malware Solution! - Home
What we observed
The page content was captured and checked alongside 92 antivirus results.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Content
Observed behavior
Evidence behind this classification
- 01OSI Security is pleased to announce the availability of the wicar.org website, which was designed to test the correct operation your anti-virus / anti-malware software. OSI Security https://www.osi.security/news-and-press-releases/new-service-announcement-wicarorg-test-your-anti-malware-defences
- 02WICAR service provided by OSI Security WICAR.org https://www.wicar.org/resources.html
- 03Domain is 5075 days old.
Web research findings
Independent findings for wicar.org, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainwicar.org
- Redirects towww.wicar.org
- Hosted byWeebly, Inc.
- Referencescdn2.editmysite.com · eicar.org
Domain Timeline
- Nov 7, 2012Domain registered
First appeared in WHOIS records — 14 years old when this review was saved.
- Sep 30, 2026Saved security review — Reviewed as safe
This saved scan found no active threat signals in the checks it completed.
wicar.org has operated for years with no threat signals in this review — a long, stable track record, though it is never a guarantee on its own.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Redirect Chain
- 1301http://wicar.org/
- 2301http://www.wicar.org/
- 3206https://www.wicar.org/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
Additional evidence review
Operator / customer risk
unknownComplaints, withdrawals, business conduct and commercial traps.
No confirmed evidence in this dimension.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 2 of 92 engines flagged | Limited | Adverse | stale fallback · Sep 30, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | Not available |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | Not available |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | Not available |
| Independent research | 2 independent findings were saved | Completed | No adverse finding | Not available |
- Antivirus
- Result2 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · Sep 30, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
- Independent research
- Result2 independent findings were saved
- CompletionCompleted
- FindingNo adverse finding
- FreshnessNot available
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is wicar.org legit and safe?
Is wicar.org safe to use?
Could a legitimate site like wicar.org still be used in a scam?
Has wicar.org been flagged by antivirus engines?
Is wicar.org on any phishing or malware blacklists?
How old is the wicar.org domain?
Does wicar.org have a valid SSL certificate?
Where is wicar.org hosted?
How often is the wicar.org report updated?
08 · Final Verdict
Final verdict
WICAR.org is a legitimate security-testing utility operated by OSI Security.
The site supplies safe, non-infectious test files and simulated exploits so administrators can verify that anti-malware products and network filters are working correctly. It is over 13 years old, carries no the browser threat feed warnings, and shows no evidence of monetization beyond optional donations.
09 · Community
