Scan a link or file

After a breach disclosure, lookalike claim sites and phishing pages appear within days. Check any URL or file against VirusTotal — the aggregate verdict of 60+ security engines — before you trust it with a claim code, an SSN, or a download.

Check a URL

Check a file

The file is hashed in your browser first; only the fingerprint is looked up. If the file is already known to VirusTotal you get the full report and the file never leaves your device. Only if it is unknown do we offer an upload — and say so plainly before anything is sent.

What this tool is and is not

Not a verdict on guilt. A clean scan means no engine currently flags the item — not that the site is legitimate or the email is honest. A flagged scan means engines see something. Judgment stays yours.
Community quota. This tool runs on VirusTotal's free public API (4 requests/minute, 500/day, non-commercial), shared across this site. Per-visitor limits keep it fair; if you hit one, try later.
Privacy. URL checks send the URL to VirusTotal for analysis. File checks hash locally; an unknown file is uploaded only if you click through.
Already breached? This tool does not look up exposed email addresses — see what to do instead.