Check a domain

Look up age, DNS, TLS, reputation lists and a few homepage clues. This is a risk screen, not a verdict.

Checked domain

obi.de

92%

Saved result

Share this result

Recent page capture of obi.de
Recent capture from urlscan.io — may lag behind the live site.

Risk

13/100

Higher means more caution. Combines domain age, HTTPS, warning lists and hidden ownership — not a fraud verdict.

0 is quiet, 100 is many caution signals

Trust signals

92/100

Higher means a longer public trail and fewer hard warnings. Skipped feeds do not add points. Not a guarantee of safety.

0 is thin public footprint, 100 is more of the usual signs

Phishing clues

0/100

Looks for lookalike names, urgent copy and password or card fields. A low score does not prove the page is genuine.

0 is few of those clues, 100 is many

Ordinary-site clues

46/100

Contacts, legal pages, HTTPS and mail records — the boring pages a real firm often has. Easy to fake, so this is not proof of honesty.

0 is sparse, 100 is more of those pages and records

Summary

No strong automated warnings

This pass did not find major red flags. Automated checks miss a lot. A quiet report is not a guarantee that the site is safe or legitimate.

  • No strong automated warnings The scan did not raise a major alert. That is not the same as proving the site is safe.

What to do: Still confirm the company name, contacts and payment method as you would with any site you have not used before.

See the full technical details

What to watch

No automated warnings on this pass. That is not a clean bill of health.

Warning lists

Public feeds only. A miss does not mean the site is safe. A hit is a reason to stop and check, not a court finding.

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 95 scans, none malicious

Before you trust this site

  • Check that the company and the domain match, and look for independent reviews before you pay.
  • If money already moved, use Get help. Ignore anyone who cold-contacts you offering recovery for a fee.
Technical details

Registration

Public WHOIS/RDAP only. Privacy rules often hide the person behind the domain.

Registered
Unknown
Expires
Unknown
Updated
Unknown
Registrar
Unknown
Registrant
Unknown
Organisation
Unknown
Email
Unknown
Country
Unknown
Privacy
No / not indicated
Source
whois

DNS and mail

NS
ns01.cancom-mase.com, ns02.cancom-mase.net, ns04.cancom-mase.de, ns03.cancom-mase.org, ns05.cancom-mase.eu
MX
aspmx.l.google.com, alt1.aspmx.l.google.com, alt4.aspmx.l.google.com, alt3.aspmx.l.google.com, alt2.aspmx.l.google.com
SPF
v=spf1 ip4:84.17.184.240/28 ip4:213.61.69.162 ip4:217.9.112.165 ip4:212.186.193.50 ip4:213.185.164.18 ip4:18.197.251.173 ip4:52.29.201.254 ip4:3.120.167.104 ip4:18.185.195.229 ip4:52.58.235.215 ip4:52.58.48.167 ip4:18.196.84.111 ip4:18.194.214.102 include :spf.sendinblue.com ip4:85.158.196.35 ip4:85.158.196.36 ip4:85.158.196.37 ip4:85.158.196.241 ip4:85.158.196.242 ip4:85.158.196.243 ip4:85.158.196.244 include:_spf.google.com include:mail.zendesk.com include:_spf.salesforce.com ip4:195.200.255.124 include: spf.codepiraten.com a:spf.mas.t-systems-service.com a:mail.datanet.de a:securemail.datanet.de ip4:80.90.150.66 ip4:80.157.1.58 include:spf-a.opntxtdns.com -all
DMARC
v=DMARC1; p=reject; rua=mailto:[email protected]; adkim=s; aspf=s; fo=1:d:s;

TLS and hosting

HTTPS
Yes
Issuer
Amazon
IP
18.245.60.73, 18.245.60.44, 18.245.60.88, 18.245.60.30
ASN
AS16509 Amazon.com, Inc.

Reputation feeds

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 95 scans, none malicious
Provider log
  • rdap — error (HTTP 404)
  • whois — ok (whois.denic.de)
  • dns — ok
  • ip-api — ok
  • tls — ok
  • google safe browsing — ok
  • urlhaus — ok
  • threatfox — ok
  • phishing army — skipped (Blocklist unavailable)
  • spamhaus — ok
  • urlscan — ok
  • fca warnings — skipped (Warning list unavailable)
  • http fetch — ok
  • robots sitemap — ok
  • search index — skipped (No Search API key)
  • crt sh — error (Operation timed out after 8001 milliseconds with 0 bytes received)
  • passive dns — skipped (No passive DNS key)
  • wayback — ok (20 captures)
  • typosquat — ok
  • screenshot — ok (urlscan)

Check a website for scam and fraud signals

Use this free domain check before you send money, open a wallet, or type a password. Paste a website address to screen age, DNS and mail records, HTTPS/TLS, public reputation lists, and common phishing or fake-site clues. It is a risk screen — not a court finding and not a guarantee that a page is safe.

People look here to check a domain, check a website for scam, run a quick fraud check, or ask whether a site looks like phishing. The report pulls what is public: registration dates, certificate presence, warning-list hits where feeds respond, and homepage patterns that often show up on misleading offers.

What this check covers

  • Domain age and registration trail (WHOIS/RDAP where available)
  • DNS, mail (MX/SPF/DMARC) and HTTPS certificate signals
  • Public malware and phishing reputation feeds (skipped providers are labelled)
  • Homepage cues: forms, urgent copy, lookalike names
  • A plain-English summary with trust and risk scores — not a “safe” badge

If the saved result is older than 14 days, refresh it. If money already moved, use Get help and treat cold “recovery” offers with care via Fake recovery.