Check a domain

Look up age, DNS, TLS, reputation lists and a few homepage clues. This is a risk screen, not a verdict.

Checked domain

win32soft.com

86%

Saved result

Share this result

Recent page capture of win32soft.com
Recent capture from urlscan.io — may lag behind the live site.

Risk

12/100

Higher means more caution. Combines domain age, HTTPS, warning lists and hidden ownership — not a fraud verdict.

0 is quiet, 100 is many caution signals

Trust signals

86/100

Higher means a longer public trail and fewer hard warnings. Skipped feeds do not add points. Not a guarantee of safety.

0 is thin public footprint, 100 is more of the usual signs

Phishing clues

0/100

Looks for lookalike names, urgent copy and password or card fields. A low score does not prove the page is genuine.

0 is few of those clues, 100 is many

Ordinary-site clues

46/100

Contacts, legal pages, HTTPS and mail records — the boring pages a real firm often has. Easy to fake, so this is not proof of honesty.

0 is sparse, 100 is more of those pages and records

Summary

No strong automated warnings

This pass did not find major red flags. Automated checks miss a lot. A quiet report is not a guarantee that the site is safe or legitimate.

  • No strong automated warnings The scan did not raise a major alert. That is not the same as proving the site is safe.

What to do: Still confirm the company name, contacts and payment method as you would with any site you have not used before.

See the full technical details

What to watch

No automated warnings on this pass. That is not a clean bill of health.

Warning lists

Public feeds only. A miss does not mean the site is safe. A hit is a reason to stop and check, not a court finding.

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 1 scans, none malicious

Before you trust this site

  • Check that the company and the domain match, and look for independent reviews before you pay.
  • If money already moved, use Get help. Ignore anyone who cold-contacts you offering recovery for a fee.
Technical details

Registration

Public WHOIS/RDAP only. Privacy rules often hide the person behind the domain.

Registered
2025-12-01T10:17:01Z
Expires
2026-12-01T10:17:01Z
Updated
2025-12-01T10:17:02Z
Registrar
Dynadot Inc · IANA 472
Registrar URL
http://www.dynadot.com
Registrant
Unknown
Organisation
Unknown
Email
[email protected]
Country
Unknown
Abuse email
[email protected]
Privacy
No / not indicated
Source
rdap+whois

DNS and mail

NS
ns1.hwrn.net, ns2.hwrn.net
MX
mx2.csof.net, mx1.csof.net
SPF
v=spf1 include:_incspfcheck.mailspike.net -all
DMARC
None

TLS and hosting

HTTPS
Yes
Issuer
ZeroSSL GmbH
IP
34.41.139.193
ASN
AS396982 Google LLC

Reputation feeds

  • google safe browsing not listed
  • urlhaus not listed
  • threatfox not listed
  • spamhaus not listed
  • urlscan not listed · 1 scans, none malicious
Provider log
  • rdap — ok
  • whois — ok (whois.verisign-grs.com)
  • dns — ok
  • ip-api — ok
  • tls — ok
  • google safe browsing — ok
  • urlhaus — ok
  • threatfox — ok
  • phishing army — skipped (Blocklist unavailable)
  • spamhaus — ok
  • urlscan — ok
  • fca warnings — skipped (Warning list unavailable)
  • http fetch — ok
  • robots sitemap — ok
  • search index — skipped (No Search API key)
  • crt sh — ok
  • passive dns — skipped (No passive DNS key)
  • wayback — ok (7 captures)
  • typosquat — ok
  • screenshot — ok (urlscan)

Check a website for scam and fraud signals

Use this free domain check before you send money, open a wallet, or type a password. Paste a website address to screen age, DNS and mail records, HTTPS/TLS, public reputation lists, and common phishing or fake-site clues. It is a risk screen — not a court finding and not a guarantee that a page is safe.

People look here to check a domain, check a website for scam, run a quick fraud check, or ask whether a site looks like phishing. The report pulls what is public: registration dates, certificate presence, warning-list hits where feeds respond, and homepage patterns that often show up on misleading offers.

What this check covers

  • Domain age and registration trail (WHOIS/RDAP where available)
  • DNS, mail (MX/SPF/DMARC) and HTTPS certificate signals
  • Public malware and phishing reputation feeds (skipped providers are labelled)
  • Homepage cues: forms, urgent copy, lookalike names
  • A plain-English summary with trust and risk scores — not a “safe” badge

If the saved result is older than 14 days, refresh it. If money already moved, use Get help and treat cold “recovery” offers with care via Fake recovery.