whackFree URL threat scanner
Paste a link to check it for malware, phishing signs and risky redirects before you open it. A clean browser in our datacenter loads the page and returns a verdict, a 0-100 risk score and the redirect chain. Scans are free without an account, up to 5 per hour.
What the free scan checks
Each scan opens the link once in a fresh Chromium browser on our datacenter network. The report shows:
- A verdict and a 0-100 risk score.
- The top signals behind the verdict.
- Every redirect from the link to the final page.
- With a free account, a screenshot of the final page.
What one datacenter browser can miss
Some malicious sites show scanners and datacenter visitors a harmless page and send home and mobile visitors to the attack. This is called cloaking. A clean result means our datacenter browser saw nothing harmful.
A multi-source scan loads the same link through datacenter, residential and mobile connections and compares what each one received.
Free scan, free account and paid plans
| Without an account | Free account | Paid | |
|---|---|---|---|
| Datacenter scans | 5 per hour, up to 25 MB each | 10 per hour, any page size | No hourly limit on subscription plans |
| Residential and mobile vantage points | No | No | Yes, billed in credits |
| Report | Verdict, score, top 3 signals, redirect chain | Every signal, request log, HAR and IOC export | Same, plus a side-by-side comparison of every vantage point |
| Screenshot | No | Yes | Yes |
| Captures kept | 24 hours (the report link works 7 days) | 30 days | 30 days |
| API access | No | Yes | Yes |
See pricing · See an example report
How long reports are kept
Each scan creates a private report link that works for 7 days. Anyone with the link can open the report. Scans without an account do not include screenshots.
After 7 days we delete the report, unless the scan is under an abuse or legal hold. We keep a reduced scan record as threat-intelligence data: the link's query string is removed, and so is its path unless the scan flagged the link as malicious or deceptive. Scans run without an account are never contributed or sold. See the Privacy Policy and how we handle community contributions.
Limits and fair use
Without an account you can run 5 scans per hour from one browser and one network. We may pause the free scanner during heavy use.
Scan links you received or plan to visit. The Acceptable Use Policy applies: do not use the scanner to test or attack sites.
Frequently asked questions
Is the URL scanner free?
Yes. Scans without an account are free, up to 5 per hour. A free account raises the limit to 10 datacenter scans per hour and keeps captures for 30 days.
Does the scan visit the site?
Yes. Our browser loads the page once from a datacenter IP address, and the site can see that visit. A tracking link from an email tells the sender the link was opened.
Can I share a report?
Yes. Anyone with the report link can see the verdict and the redirect chain until the link expires.
Do you keep the URLs I scan?
We keep a reduced scan record as threat-intelligence data. After 7 days the link's query string is removed, and so is its path unless the scan flagged the link as malicious or deceptive. Anonymous scans are never contributed or sold.
What if a result is wrong?
Use Report a result on the report page and we will review it.