Is VirusTotal Scan safe?

Low risk

VirusTotal Scan sends context-menu link URLs to VirusTotal with an embedded API key.

When you choose the extension's context-menu scan action on a link, it sends that link URL to VirusTotal's URL report API. The request includes a hardcoded VirusTotal API key that is packaged inside the extension source.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

vtscan@gmx.dev0.6.3Firefox Add-ons
15Risk
Who publishes it

vtscan@gmx.de - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
vtscan@gmx.de

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.6.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on www.virustotal.com

    https://www.virustotal.com/*

  • Add items to the right-click menu

    contextMenus

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed VirusTotal Scan contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.virustotal.com

    VirusTotal Scan sends data to www.virustotal.com. 8 other extensions we have analysed send data here.

Updated 30 September 2026amo-1007567