Scam Awareness Tool

Domain Safety Checker

Paste a domain, suspicious link, or sender email address to look for practical warning signs before entering card details, passwords, or account information.

Check a Domain

What this tool can and cannot do

When our technicians investigate a suspicious link or email address, this is some of what they check. The tool automates those same signals: domain age, mail system profile, whether the site loads securely, and whether the name uses tricks like misspellings or lookalike characters. When you paste a full link starting with https://, it also queries Google's Safe Browsing service to check whether that exact URL has been flagged as a known scam. Pasting the full link gives the most complete result.

It catches a lot, but it is not a full investigation. A "Low Risk" result means no warning signs were found, not that the site is safe. The Google Safe Browsing check is limited to scams already in Google's database, though the other signals often catch new ones before Google does. It does not open the page, read any email, or replace your judgment when something feels off.

Examples: https://example.com/pay, billing@example.com, or example.com. Pasting the full web link (starting with https://) gives the most thorough check.

Important: A working padlock or HTTPS certificate does not prove that a site is trustworthy. Many scam sites still use HTTPS.

Privacy note: When you run a check, the domain name is sent to our server for registration and DNS lookups. When you paste a full URL, the URL itself, not just the domain, is also shared with Google Safe Browsing so that URL-level phishing and malware warnings can be checked. We do not store your searches or track which domains you check.

Warning Signs Worth Slowing Down For

These are common reasons a domain or sender deserves more caution, even if the page looks polished.

Brand-new domain registrations

Domains registered only days or weeks ago deserve extra skepticism, especially for stores, payment pages, and account-verification links.

Free mailbox senders

A merchant order confirmation or invoice from gmail.com or another free mailbox provider is not normal enough to ignore. Verify independently.

Payment or login wording in the hostname

Domains stuffed with words like secure, verify, billing, or login can be impersonation-style domains built to look convincing at a glance.

HTTPS is not the same as trust

Scam sites can still have a padlock. HTTPS only means the connection is encrypted. It does not prove who is behind the site.

Related Resources

More practical guidance on spotting risky technology signals.

Need help with a suspicious site, email, or payment request?

Treo helps organizations respond pragmatically when technology trust breaks down. If a suspicious domain or sender is creating risk for your team, start a conversation.

Talk to Us