Tidy My Mac: Mac Cleaner, Antivirus & Scam Lists

Short answer: Tidy My Mac is a cleanup and security app for macOS, made by Yuix Networks, the company behind NameOcean. It frees up disk space, removes apps completely, scans for malware, blocks phishing and scam sites in every app, and keeps your apps patched. Its phishing and scam lists also power the free Website Scam Checker here on NameOcean. This post explains what the app does, how the lists work, and why we built it.

Why a domain company built a Mac app

Running a registrar means seeing the dark side of domain names every day. A large share of phishing starts with a cheap domain registered minutes earlier: apple-id-verify.top, paypa1-login.com, a fake shop on a name that sounds like a real brand. We handle abuse reports for the domains on our own platform, but most of our customers are also just people on a laptop, clicking links in their inbox. We wanted to protect them where the click happens, on the computer itself.

Tidy My Mac is the result: one app that keeps a Mac clean and safe, with the same attention to privacy we put into our own infrastructure. Every scan runs on the Mac.

What Tidy My Mac does

Clean up

• Smart Scan and Disk Map. One scan finds junk, large files and duplicates; a treemap shows exactly what fills the disk.
• Junk Cleaner. Caches, logs, old installers, iOS backups, and developer junk from Xcode, Docker, Homebrew, node_modules and Python environments.
• Duplicates and Photos. Byte-for-byte duplicate files, near-identical shots and old screenshots, always keeping the best copy.
• Uninstaller. Removes an app together with its preferences, caches, launch agents and helpers, and finds leftovers of apps deleted long ago.

Protect

• Antivirus. Built on ClamAV, with real-time protection for new downloads and a quarantine you can restore from.
• Ransomware protection. Spots ransomware by what it does, such as encrypted file names, ransom notes and touched decoy files, and stops it within seconds, even if it is brand new.
• Web Protection. Blocks phishing, malware and scam sites, plus ads and trackers if you like, in every browser and app, with no extension to install.
• Firewall. Shows which apps connect to the internet and blocks any app's outgoing connections with one click.
• Scam Detector. Paste a suspicious email or text message and get a verdict with the reasons.
• Updates. Lists apps with available updates, putting the ones with known security holes first.
• Secure Connection. A built-in VPN for untrusted Wi-Fi networks.

It needs macOS 26 Tahoe or later, comes as a signed and notarized download from tidymymac.com, and has a 7-day free trial with no credit card. One honest note on privacy: the optional deep malware analysis, which is on by default, sends files from your home folder to Tidy My Mac's servers for AI analysis. You can switch it off in Settings, and everything else stays on your Mac.

How the scam lists work

The phishing and scam protection in Tidy My Mac, and the Website Scam Checker on this site, use the same domain lists. They are built by an open-source project we maintain, Yuix-Networks/blocklists on GitHub:

• Threats: more than 350,000 phishing, malware, command-and-control and cryptojacking domains, from HaGeZi's Threat Intelligence Feeds.
• Scams: nearly 19,000 fake shops, investment and crypto scams, fake tech support and fake streaming sites, from HaGeZi's Fake list.
• Your reports: sites reported through our harmful site form (or the one on tidymymac.com) that we review and confirm.

The lists are rebuilt every four hours. If a source fails to download or suddenly shrinks to less than half its size, the last good copy is kept, so a broken download can never silently switch protection off. The Mac app downloads them as a signed manifest, checks the signature, and does every lookup locally: the sites you visit are never sent anywhere.

What the Website Scam Checker adds

A list only knows the sites already reported. For everything else, the checker looks at the address itself:

• Domain age. It asks the registry, over RDAP, when the domain was registered. As a registrar we know how short-lived scam domains are: most are days or weeks old.
• Borrowed brands. A well-known brand's name, or a look-alike with swapped letters such as paypa1 or a Cyrillic "а" in аpple.com, on a domain that doesn't belong to the brand.
• Other red flags. Link shorteners, free page hosts, a bare IP address, cheap endings that scammers favour, and names that don't resolve at all.

The checker never opens the site, so nothing on it can run on your computer or ours. Try it on any link you're unsure about: nameocean.net/website-scam-checker.

More free security tools

Tidy My Mac's website has a set of free tools that need no account: a scam message checker for emails and texts, a password leak checker that never sends your password, a password generator, an email header analyzer for SPF, DKIM and DMARC, and a Mac app vulnerability checker. On NameOcean you'll also find our Whois lookup and Website Technology Checker.

Try it

If you use a Mac, try Tidy My Mac free for 7 days. And if you run a website yourself, a domain with free SSL and DNS at NameOcean is the first step to a site your visitors can trust.