URL Virus Scanner

What gets checked

• the redirect chain: a shortened link reveals its final destination;
• blocklists: the domain is checked against Quad9, Cloudflare, and CleanBrowsing, the URL against Google, Yandex, VirusTotal, and VK;
• the domain name: lookalike letters, punycode, a familiar brand tucked into the name, an address hidden inside a subdomain;
• the domain registration date and the site's certificate;
• the page itself: password and card forms, input sent to a foreign domain, a script hidden from view;
• downloads: the file name and its extension.

How to read the result

A fraudulent site looks clean during its first hours: it has not reached the blocklists yet, and the page still works. Judge by the full picture, and the strongest signal is usually the domain registration date.

If you are checking a shop you plan to pay, not a link from an email, use the neighboring tool instead: website scam checker. It looks at the seller's details, the offer terms, and the payment methods.