← Back to the scanner

Licences

This site

WebMVT-Scanner is distributed under the MVT License 1.1 (full text), the licence of the Mobile Verification Toolkit it is built on. Its Android collection code is a port of AndroidQF, also under the MVT License 1.1.

Consensual use only. Section 3.0 of the MVT License permits use only when the person who uses the device explicitly consents, free from any coercion, and is fully informed about the procedure, its privacy implications, and the data retention and disposal policy. This site asks for that consent before every scan.

Data retention and disposal. There is no server-side code. Device data, iPhone backup contents, backup passwords and reports are processed only in your browser tab's memory and are discarded when you close the tab, unless you download them. The site's Content-Security-Policy (connect-src 'self') stops the page from contacting any other server. Nothing is saved in browser storage: the USB debugging key used to connect to Android phones exists only in memory for the visit. The site's own files are cached by a service worker so it works offline.

Unofficial port, no endorsement. WebMVT-Scanner is PrivacyFirst's unofficial port of MVT to the web. It is not affiliated with, endorsed by or supported by Amnesty International, its Security Lab, or the MVT or AndroidQF projects. "MVT" is used only to say which software this site runs.

The software is provided "as is", without warranty of any kind; see sections 6 and 7 of the MVT License.

Spyware indicators

Indicator index from mvt-indicators (MIT). Each feed is used under its own licence, with attribution below.

FeedResearchersLicenceSource
NSO Group Pegasus Indicators of CompromiseAmnesty InternationalCC BY 2.0STIX file · research
Predator Spyware Indicators of CompromiseMeta, Amnesty International, Citizen Lab, Cisco, Inside Story, iVerifyMITSTIX file · research
RCS Lab Spyware Indicators of CompromiseGoogle, LookoutMITSTIX file · research
Stalkerware Indicators of CompromiseECHAPCC BY 4.0STIX file · research
Surveillance campaign linked to mercenary spyware companyAmnesty International, GoogleCC BY 2.0STIX file · research
Quadream KingSpawn Indicators of CompromiseCitizen Lab, MicrosoftMITSTIX file · research
Operation Triangulation Indicators of CompromiseKaspersky LabMITSTIX file · research
WyrmSpy and DragonEgg Indicators of CompromiseLookoutMITSTIX file · research
Wintego Helios Indicators of CompromiseAmnesty InternationalCC BY 2.0STIX file · research
NoviSpy (Serbia) Indicators of CompromiseAmnesty InternationalCC BY 2.0STIX file · research
EagleMsgSpy Indicators of CompromiseLookoutMITSTIX file · research
Candiru (DevilsTongue) Indicators of CompromiseMicrosoft, Recorded FutureMITSTIX file · research
ResidentBat Indicators of CompromiseReporters Without Borders, RESIDENT.NGOMITSTIX file · research
Cellebrite Indicators of CompromiseCitizen LabMITSTIX file · research
DarkSword Indicators of CompromiseGoogle Threat Intelligence Group, iVerify, LookoutMITSTIX file · research
Coruna Indicators of CompromiseGoogle Threat Intelligence Group, iVerifyMITSTIX file · research
Morpheus Indicators of CompromiseOsservatorio NessunoMITSTIX file · research
BTMOB Indicators of CompromiseESET, Cyble Research, ZimperiumMITSTIX file · research
Spyrtacus Indicators of CompromiseOsservatorio NessunoMITSTIX file · research

Analysis engine (Python, run in the browser)

Pyodide 314.0.7 (MPL-2.0; source: github.com/pyodide/pyodide), which includes CPython 3.14.2 (PSF License). Wheels are served unmodified from this site. tld is triple-licensed; it is used here under MPL-1.1. pyahocorasick is replaced by a small pure-Python implementation in this project's source, because it has no WebAssembly build.

PackageVersionLicenceLicence text
annotated-types0.7.0MIT Licenseannotated-types-LICENSE
appdirs1.4.4MIT Licenseappdirs-LICENSE
betterproto20.10.0MITbetterproto2-LICENSE
certifi2026.4.22Mozilla Public License 2.0 (MPL 2.0)certifi-LICENSE
cffi2.0.0MITcffi-AUTHORS
cffi-LICENSE
charset-normalizer3.4.7MITcharset-normalizer-LICENSE
click8.3.1BSD-3-Clauseclick-LICENSE
cryptography47.0.0Apache-2.0 OR BSD-3-Clausecryptography-LICENSE
cryptography-LICENSE.APACHE
cryptography-LICENSE.BSD
idna3.11BSD-3-Clauseidna-LICENSE.md
iphone_backup_decrypt0.10.0see licence fileiphone_backup_decrypt-LICENSE
mvt2026.10.12see licence filemvt-LICENSE
packaging26.1Apache-2.0 OR BSD-2-Clausepackaging-LICENSE
packaging-LICENSE.APACHE
packaging-LICENSE.BSD
pycparser3.0BSD-3-Clausepycparser-LICENSE
pycryptodome3.23.0BSD License, Public Domainpycryptodome-AUTHORS.rst
pycryptodome-LICENSE.rst
pydantic2.12.5MITpydantic-LICENSE
pydantic_core2.41.5MITpydantic_core-LICENSE
pydantic-settings2.15.0MITpydantic-settings-LICENSE
Pygments2.20.0BSD-2-ClausePygments-AUTHORS
Pygments-LICENSE
python-dateutil2.9.0.post0BSD License, Apache Software Licensepython-dateutil-LICENSE
python-dotenv1.2.4BSD-3-Clausepython-dotenv-LICENSE
PyYAML6.0.3MIT LicensePyYAML-LICENSE
requests2.33.1Apache Software Licenserequests-LICENSE
requests-NOTICE
rich14.3.3MIT Licenserich-LICENSE
simplejson3.20.2MIT License, Academic Free License (AFL)simplejson-LICENSE
six1.17.0MIT Licensesix-LICENSE
tld0.13.2MPL-1.1 OR GPL-2.0-only OR LGPL-2.1-or-latertld-LICENSE.rst
tld-LICENSE_GPL2.0
tld-LICENSE_LGPL_2.1
tld-LICENSE_MPL_1.1
typing_extensions4.15.0PSF-2.0typing_extensions-LICENSE
typing-inspection0.4.2MITtyping-inspection-LICENSE
tzdata2025.3Apache-2.0tzdata-LICENSE
tzdata-LICENSE_APACHE
urllib32.6.3MITurllib3-LICENSE

Complete source code of this site: source.zip

Page code (JavaScript)

PackageVersionLicenceLicence text
@noble/hashes2.4.0MITLICENSE
@types/w3c-web-usb1.0.14MITLICENSE
@yume-chan/adb2.6.4MITLICENSE
@yume-chan/adb-daemon-webusb2.3.2MITLICENSE
@yume-chan/async4.1.3MITLICENSE
@yume-chan/event2.0.0MITLICENSE
@yume-chan/no-data-view2.0.0MITLICENSE
@yume-chan/stream-extra2.6.1MITLICENSE
@yume-chan/struct2.3.2MITLICENSE
fflate0.8.3MITLICENSE