Check your Minecraft mods
for hidden malware & stealers
Scan any .jar file before running it. Detects Fractureiser, Discord token stealers, account grabbers, and remote backdoors in seconds.
Drop your .jar or mod file here
or click to choose a file from your computer
We download the file safely using a protected proxy so your IP is never exposed. Dangerous local or cloud addresses are automatically blocked.
Look up results for a file you previously scanned in this browser.
100% Private in Your Browser
Your files are never uploaded to our servers. All archive extraction, class reading, and pattern checks run entirely in your browser.
Detects Rats & Stealers
Catches Fractureiser Stages 0–3, Skyrage, Kurium, Discord token grabbers, browser password stealers, and Minecraft session loggers.
Checks Inside Nested JARs
Malware often hides inside nested jars in META-INF/jars/. RatScanner unpacks nested archives and checks every hidden class.
Recent Scans
Saved on this device| File Name | Verdict | Threat Score | Scanned |
|---|
What RatScanner Checks For
84 detection rulesAccount & Token Theft
Detects code trying to steal your Discord tokens, official Minecraft launcher accounts, Feather, Lunar, Badlion, Prism Launcher sessions, and browser cookies.
Fractureiser & Known RATs
Flags known Fractureiser C2 IP addresses (85.217.144.130), stage 0 downloaders, Skyrage, Kurium, and backdoor trojans targeting players.
Remote Code & Hidden Loaders
Finds remote URL classloaders, hidden PowerShell commands, JNDI injections, and unsafe bytecode loaders that download second-stage malware.
Webhooks & Data Exfiltration
Pulls out Discord webhooks, Telegram bots, external server IPs, and paste services used to send stolen passwords out of your PC.