← whack.sh News

Free URL scanner: check a link before you open it

2026-10-28 · Announcements

The whack.sh URL scanner is free to use, with no account needed. Paste a suspicious link, and our browser opens it once in a fresh, isolated Chromium browser on our datacenter network. You get a report on the page without ever opening it yourself.

A quick human check (Cloudflare Turnstile) runs before each scan. Scan a link now, or open the example report to see what you get back.

What the report shows

Every report includes:

  • A verdict
  • A risk score from 0 to 100
  • The top 3 signals behind the verdict
  • Every redirect from the link to the final page

Without an account, you can run 5 scans per hour from one browser and network, on pages up to 25 MB. These scans come without a screenshot. Each scan gets a private report link that works for 7 days, and anyone with the link can open it.

More with a free account

A free account raises the limit to 10 datacenter scans per hour, with any page size. It adds a screenshot of every page and the full report: every signal, the request log, and HAR and IOC export. Captures are kept for 30 days, and the account includes API access.

Paid plans add residential and mobile vantage points, with a side-by-side comparison of what each one received. They are billed in credits.

What a clean result means

Some malicious sites show scanners and datacenter visitors a harmless page, then send home and mobile visitors to the attack. This is called cloaking. A clean result means our datacenter browser saw nothing harmful. A visitor on a home or mobile connection can still receive a different page.

The multi-source scanner loads the same link through datacenter, residential and mobile connections and compares the results.

The site also sees the visit. Our browser loads the page once from a datacenter IP address. If the link is a tracking link from an email, the scan tells the sender the email was opened.

Privacy and fair use

Scans run without an account are never contributed or sold. After 7 days the report is deleted, unless the scan is under an abuse or legal hold. Our privacy policy has the details.

Scan links you received or plan to visit. Do not use the scanner to test or attack sites. The free scanner may pause during heavy use, and it is not available in a few regions.

Check a link before you open it.