EN

Check a domain

Look up age, DNS, TLS, reputation lists and a few homepage clues. This is a risk screen, not a verdict.

Checked domain

drweb.ru

86%

Saved result

Share this result

WhatsApp Telegram X
Recent page capture of drweb.ru
Recent capture from urlscan.io — may lag behind the live site.

Risk

3/100

Higher means more caution. Combines domain age, HTTPS, warning lists and hidden ownership — not a fraud verdict.

0 is quiet, 100 is many caution signals

Trust signals

86/100

Higher means a longer public trail and fewer hard warnings. Skipped feeds do not add points. Not a guarantee of safety.

0 is thin public footprint, 100 is more of the usual signs

Phishing clues

42/100

Looks for lookalike names, urgent copy and password or card fields. A low score does not prove the page is genuine.

0 is few of those clues, 100 is many

Ordinary-site clues

71/100

Contacts, legal pages, HTTPS and mail records — the boring pages a real firm often has. Easy to fake, so this is not proof of honesty.

0 is sparse, 100 is more of those pages and records

Summary

Treat this site with caution

The scan found signals that often appear on risky or misleading sites. This check cannot say the operator is a criminal. Do not send money or enter card details until you have verified the business yourself.

  • The page asks for a password or card Login and payment forms are normal on real shops. Combined with other warnings, they are a reason not to type anything yet.

What to do: Pause any payment. Confirm the company through official registers and a phone number you typed yourself — not a chat link.

See the full technical details

What to watch

  • Serious signal

    The page asks for a password or card

    Login and payment forms are normal on real shops. Combined with other warnings, they are a reason not to type anything yet.

Warning lists

Public feeds only. A miss does not mean the site is safe. A hit is a reason to stop and check, not a court finding.

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 12 scans, none malicious

Before you trust this site

  • If a form asks for a seed phrase, recovery key or remote-access code, stop.
  • If money already moved, use Get help. Ignore anyone who cold-contacts you offering recovery for a fee.
Technical details

Registration

Public WHOIS/RDAP only. Privacy rules often hide the person behind the domain.

Registered
1998-05-05T12:35:22Z
Expires
2027-05-31T21:00:00Z
Updated
Unknown
Registrar
RU-CENTER-RU
Registrant
Unknown
Organisation
Unknown
Email
Unknown
Country
Unknown
Privacy
No / not indicated
Source
whois

DNS and mail

NS
rns01.drweb.com, rns03.drweb.com, rns02.drweb.com
MX
relay3.drweb.com, relay2.drweb.com
SPF
v=spf1 redirect=drweb.com
DMARC
None

TLS and hosting

HTTPS
Yes
Issuer
GlobalSign nv-sa
IP
178.248.232.183
ASN
AS51115 HLL LLC

Reputation feeds

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 12 scans, none malicious
Provider log
  • rdap — error (HTTP 404)
  • whois — ok (whois.tcinet.ru)
  • dns — ok
  • ip-api — ok
  • tls — ok
  • google safe browsing — ok
  • urlhaus — ok
  • threatfox — ok
  • phishing army — skipped (Blocklist unavailable)
  • spamhaus — ok
  • urlscan — ok
  • fca warnings — skipped (Warning list unavailable)
  • http fetch — ok
  • robots sitemap — ok
  • search index — skipped (No Search API key)
  • crt sh — skipped (HTTP 502)
  • passive dns — skipped (No passive DNS key)
  • wayback — ok (20 captures)
  • typosquat — ok
  • screenshot — ok (urlscan)

If money already moved, start at Get help. If someone now offers to recover funds for a fee, read Fake recovery.

General information only, not legal or financial advice. Feeds and records change. We are not calling any domain a criminal enterprise on this screen alone. If you lost money, contact your bank and the authorities through the help pages.

Check a website for scam and fraud signals

Use this free domain check before you send money, open a wallet, or type a password. Paste a website address to screen age, DNS and mail records, HTTPS/TLS, public reputation lists, and common phishing or fake-site clues. It is a risk screen — not a court finding and not a guarantee that a page is safe.

People look here to check a domain, check a website for scam, run a quick fraud check, or ask whether a site looks like phishing. The report pulls what is public: registration dates, certificate presence, warning-list hits where feeds respond, and homepage patterns that often show up on misleading offers.

What this check covers

  • Domain age and registration trail (WHOIS/RDAP where available)
  • DNS, mail (MX/SPF/DMARC) and HTTPS certificate signals
  • Public malware and phishing reputation feeds (skipped providers are labelled)
  • Homepage cues: forms, urgent copy, lookalike names
  • A plain-English summary with trust and risk scores — not a “safe” badge

If the saved result is older than 14 days, refresh it. If money already moved, use Get help and treat cold “recovery” offers with care via Fake recovery.