Check a domain

Look up age, DNS, TLS, reputation lists and a few homepage clues. This is a risk screen, not a verdict.

Checked domain

example.org

12%

Saved result

Share this result

Recent page capture of example.org
Recent capture from urlscan.io — may lag behind the live site.

Risk

34/100

Higher means more caution. Combines domain age, HTTPS, warning lists and hidden ownership — not a fraud verdict.

0 is quiet, 100 is many caution signals

Trust signals

12/100

Higher means a longer public trail and fewer hard warnings. Skipped feeds do not add points. Not a guarantee of safety.

0 is thin public footprint, 100 is more of the usual signs

Phishing clues

0/100

Looks for lookalike names, urgent copy and password or card fields. A low score does not prove the page is genuine.

0 is few of those clues, 100 is many

Ordinary-site clues

37/100

Contacts, legal pages, HTTPS and mail records — the boring pages a real firm often has. Easy to fake, so this is not proof of honesty.

0 is sparse, 100 is more of those pages and records

Summary

Treat this site with caution

The scan found signals that often appear on risky or misleading sites. This check cannot say the operator is a criminal. Do not send money or enter card details until you have verified the business yourself.

  • Appears on a public warning list At least one malware or phishing feed has recorded this host. Lists can lag or contain mistakes — treat it as a serious prompt to stop and check.

What to do: Pause any payment. Confirm the company through official registers and a phone number you typed yourself — not a chat link.

See the full technical details

What to watch

  • Serious signal

    Appears on a public warning list

    At least one malware or phishing feed has recorded this host. Lists can lag or contain mistakes — treat it as a serious prompt to stop and check.

Warning lists

Public feeds only. A miss does not mean the site is safe. A hit is a reason to stop and check, not a court finding.

  • google safe browsing not listed
  • urlhaus listed · Host seen in URLhaus
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 422 scans, none malicious

Before you trust this site

  • Do not enter payment details or send crypto until you have confirmed this is the organisation you meant to reach.
  • If money already moved, use Get help. Ignore anyone who cold-contacts you offering recovery for a fee.
Technical details

Registration

Public WHOIS/RDAP only. Privacy rules often hide the person behind the domain.

Registered
1995-08-31T04:00:00Z
Expires
2027-08-30T04:00:00Z
Updated
2026-10-14T04:00:57.481Z
Registrar
ICANN · IANA 376
Registrant
Redacted / privacy service
Organisation
Unknown
Email
[email protected]
Country
Unknown
Abuse email
[email protected]
Privacy
Yes
Source
rdap+whois

DNS and mail

NS
mitch.ns.cloudflare.com, katelyn.ns.cloudflare.com
MX
None
SPF
v=spf1 -all
DMARC
v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s

TLS and hosting

HTTPS
Yes
Issuer
SSL Corporation
IP
104.20.26.136, 172.66.157.237
ASN
AS13335 Cloudflare, Inc.

Reputation feeds

  • google safe browsing not listed
  • urlhaus listed · Host seen in URLhaus
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 422 scans, none malicious
Provider log
  • rdap — ok
  • whois — ok (whois.publicinterestregistry.org)
  • dns — ok
  • ip-api — ok
  • tls — ok
  • google safe browsing — ok
  • urlhaus — ok
  • threatfox — ok
  • phishing army — skipped (Blocklist unavailable)
  • spamhaus — ok
  • urlscan — ok
  • fca warnings — skipped (Warning list unavailable)
  • http fetch — ok
  • robots sitemap — ok
  • search index — skipped (No Search API key)
  • crt sh — error (Operation timed out after 8001 milliseconds with 0 bytes received)
  • passive dns — skipped (No passive DNS key)
  • wayback — ok (20 captures)
  • typosquat — ok
  • screenshot — ok (urlscan)

Check a website for scam and fraud signals

Use this free domain check before you send money, open a wallet, or type a password. Paste a website address to screen age, DNS and mail records, HTTPS/TLS, public reputation lists, and common phishing or fake-site clues. It is a risk screen — not a court finding and not a guarantee that a page is safe.

People look here to check a domain, check a website for scam, run a quick fraud check, or ask whether a site looks like phishing. The report pulls what is public: registration dates, certificate presence, warning-list hits where feeds respond, and homepage patterns that often show up on misleading offers.

What this check covers

  • Domain age and registration trail (WHOIS/RDAP where available)
  • DNS, mail (MX/SPF/DMARC) and HTTPS certificate signals
  • Public malware and phishing reputation feeds (skipped providers are labelled)
  • Homepage cues: forms, urgent copy, lookalike names
  • A plain-English summary with trust and risk scores — not a “safe” badge

If the saved result is older than 14 days, refresh it. If money already moved, use Get help and treat cold “recovery” offers with care via Fake recovery.