Protection Tools

Instantly check if any URL is safe, phishing, or malicious using 30+ threat intelligence sources.

Check any file's MD5 or SHA-256 hash against global malware databases. No file upload required — fully private.

Paste any email header and get full SPF/DKIM/DMARC analysis, routing visualization, and a phishing risk score.

Scan any domain against 80+ global blacklists. Get malware status, reputation score, and full threat history.

Check if your password or email was exposed in known data breaches. Zero-knowledge — your data is never stored.

Paste any SMS or text message and get an instant 0-100 scam-likelihood score with every red flag explained in plain English.

Paste a manifest.json or a plain permission list and get a plain-English risk breakdown for every permission an extension requests.

An interactive 15-item checklist that computes a live 0-100 public Wi-Fi safety score as you check off what you’ve actually done.

Paste a filename or a list of filenames to flag ransomware-associated extensions, known ransom-note names, and disguised double-extension executables.

A local encrypted vault for two-factor backup codes, protected by AES-GCM encryption with a passphrase-derived key — only ciphertext ever touches storage.

Upload a QR code image or paste a decoded link to instantly check it for phishing red flags before you visit it.

Paste suspicious verification instructions and get an instant score for the ClickFix / fake-CAPTCHA malware pattern.

Paste a delivery/tracking notification and get an instant scam score, plus a basic tracking-number format sanity check.

Answer a quick checklist and analyze a domain to see how exposed you are to malicious browser notification spam.

Paste a scary browser pop-up or alert message and get an instant score for known tech support scam tactics.

An interactive weighted checklist that scores how exposed you are to a SIM swap attack, based on your 2FA setup, carrier protections, and phone number visibility.

Paste a donation appeal or charity solicitation and get an instant heuristic scam score covering urgency, payment red flags, and verifiability.

Paste the text of an 'update required' browser or system popup and get an instant risk score covering urgency, download prompts, and antivirus-disable requests.

Paste a local site + password list and instantly see exact and near-duplicate password reuse across your accounts, processed 100% in your browser and never stored.

Combines a filename risk analyzer (double extensions, risky executables, macro-enabled Office files) with a quick judgment checklist to score any email attachment before you open it.

Paste what an in-person or phone-based "delivery driver" said or asked for and get a heuristic risk score before you pay or hand over information.

Answer five quick questions about your browser's behavior to get a live weighted risk score and a step-by-step cleanup plan.

Paste a summary of what a phone caller claiming to be tech support said and get a heuristic risk score before you follow any instructions.

Answer four quick questions about how you charged your device in public to get a risk score and practical safe-charging habits.

Check off what's already in place on your home router to get a live weighted security score and a prioritized list of gaps to fix.

A weighted, 14-point checklist of real-time deepfake tells — face-edge shimmer, blink timing, unscripted-request lag — scored live as you watch a video call.

Fill in your team or family details and generate a ready-to-distribute callback and rotating code-word protocol — the control that actually stops voice-clone fraud.

Paste a genuine email you've received before next to a suspicious one. Get an instant comparison of sender domain, link destinations, urgency language, and structure.

A weighted 12-point checklist to run before approving any wire transfer or bank-detail change — covering domain verification, callback confirmation, and dual approval.

A weighted checklist for voicemails asking for money, credentials, or urgent action — built around the specific signals of AI voice-clone scams, from manufactured panic to callback avoidance.

A weighted 14-point checklist covering fake storefronts, fake delivery-fee texts, and lookalike brand ads — the three scam patterns that spike hardest during peak shopping seasons.

A weighted 12-point checklist for verifying identity before approving any account recovery, password reset, or recovery-contact change — built for help desks, support teams, and anyone who handles these requests.

An 11-point field checklist for QR codes on parking meters, menus, and public signage — QR phishing (quishing) more than doubled as an attack vector in 2026.

A weighted 10-point checklist to run before depositing at a crypto ATM — because in nearly every legitimate transaction, no one instructs you to use one in the first place.

An 11-point weighted checklist for any inbound contact claiming to be IT support — built around the two riskiest requests: reading out an MFA code and installing remote-access software.

A weighted 11-point checklist for any 'we can recover your lost money' offer — recovery scams specifically target people who've already been defrauded once.

A weighted 11-point checklist for any inbound call claiming to be your bank or a business — impersonation scams surged 148% year over year, and caller ID spoofing defeats the 'I recognized the number' instinct entirely.

Paste a 'paid task' or 'part-time job' recruitment message and get a real, pattern-based analysis for the specific mechanics of task scams — vague recruitment language, a push to Telegram/WhatsApp, and the deposit request that's the actual scam.

A weighted 11-point checklist for VR/AR virtual real estate, NFTs, and other digital asset purchases — fraudulent listings, copycat smart contracts, and wallet-drain schemes are a documented, growing pattern.

A weighted 12-point checklist for any recruiting interaction — AI-generated recruiter personas and automated fake interviews are being used to harvest personal data and push fraudulent job offers at scale.