Browser Security Checker
Detect cryptojacking, WebRTC leaks, clipboard hijacking & browser malware
Detect malware, leaks & threats in your browser
Cryptojacking
WebRTC Leak
Clipboard Hijack
API Hooks
Fingerprint
Permissions
🔒 100% local analysis • No data sent anywhere
How to Use
- 1 Click "Start Security Scan" to begin the analysis
- 2 The scanner runs 13 browser-specific security checks
- 3 Review your Threat Score - lower is better (0 = clean)
- 4 Click on any finding for evidence and remediation steps
- 5 Re-scan after making changes to verify improvements
What You Get
Browser-specific security scanner with 13 checks: cryptojacking detection, WebRTC IP leak test, clipboard hijacking detection, API hook detection (fetch/XHR/WebSocket), automation/bot detection, storage malware scan, DOM injection detection, fingerprint spoofing check, and permission audit.
Input: Run security scan
Output: Threat Score: 0/100 (Safe) - No active threats detected
Input: WebRTC leak detected
Output: Your real IP 192.168.1.x is exposed, bypassing VPN
Input: API hooks found
Output: fetch() and JSON.parse() are overridden - possible malware
How do I check if my browser has malware?
Click "Start Security Scan" to check for cryptojacking, clipboard hijacking, keyloggers, API hooks, and DOM tampering. A Threat Score above 0 indicates potential issues.
What is cryptojacking and how do I detect it?
Cryptojacking uses your CPU to mine cryptocurrency without permission. Our scanner uses PerformanceObserver to detect unusual CPU activity patterns typical of mining scripts.
How do I test for WebRTC IP leaks?
Our scanner creates a WebRTC peer connection and checks if your real IP is exposed. If using a VPN and see your real IP, WebRTC is bypassing your VPN protection.
What is clipboard hijacking?
Malware replaces copied content with malicious data (like swapping crypto wallet addresses). We test by writing to clipboard and checking if content is modified.
How do I know if browser extensions are safe?
We detect extension script injection, suspicious DOM modifications, and extension-injected scripts. Many injected scripts may indicate problematic extensions.
Why is my browser showing as automated?
If navigator.webdriver is true or automation variables exist, your browser may be controlled by malware using Selenium/Puppeteer without your knowledge.
What is API hook detection?
We check if critical browser APIs (fetch, XMLHttpRequest, JSON.parse, addEventListener) have been overridden. Non-native functions may indicate malware intercepting your data.
Is this security scanner safe?
Yes, 100% safe. All scanning happens locally in your browser - no data is sent anywhere. We use standard browser APIs only.
How is this different from Website Security Scanner?
This tool checks YOUR BROWSER health (malware, leaks, hooks). Website Security Scanner checks a website's security headers (CSP, HTTPS, etc). Use both for complete security.
What browser APIs does this checker use?
PerformanceObserver, RTCPeerConnection, Clipboard API, MutationObserver, navigator.permissions, localStorage analysis, and function signature checking - all standard APIs.
100% client-side processing. No data is transmitted, stored, or logged. All security analysis happens entirely in your browser.