Is this website safe?
Paste a link or domain before you buy, pay or log in. We check malware and phishing blocklists, how old the domain is, its SSL certificate and signs that the site has been hacked.
What this website safety check looks at
- Google Safe Browsing: Google's list of sites that spread malware or phishing; Chrome shows a red warning for them.
- Malware / phishing DNS blocklist: Cloudflare's security resolver (1.1.1.2) blocks domains known to host malware or phishing.
- Domain age: most scam shops use domains registered a few weeks earlier. Under 3 months old is a red flag.
- SSL certificate: a padlock doesn't prove a site is honest, but a broken or missing certificate is a bad sign.
- Hacked-site signs: hidden gambling or pharma spam, or a defaced homepage, mean the site was compromised and may serve malware.
Signs a shopping site may be a scam
- Prices 50–90% below every other store, often with a countdown timer.
- Payment only by bank transfer, crypto or gift cards; no card or PayPal buyer protection.
- No real address or phone number, or contact only through a chat app.
- The domain imitates a brand with extra words or odd endings (brand-sale-outlet.shop).
- Brand-new domain and no reviews outside the site itself.
No tool can prove a site is honest. A clean result means no known danger signs, not a guarantee. If in doubt, pay with a credit card or PayPal so you can dispute the charge.
Already entered your details on a suspicious site?
- Change that password, and any account that used the same one; turn on two-factor sign-in.
- Call your bank to block the card if you entered card details.
- Report the site to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish) so others are warned.
Check your whole site, not just one thing
The free scan checks SSL, email spoofing, security headers, exposed sensitive files, outdated CMS and signs of hacking in one go, with plain-language fixes.
Free once you verify your domain: weekly re-scans and email alerts for new issues. PRO ($19/month): deep scan with 5,000+ known-vulnerability checks, deep re-scans up to 10 times a day and 5-minute uptime monitoring.
FAQ
How do I check if a website is safe?
Enter the domain above. The checker looks it up in Google Safe Browsing and a malware/phishing DNS blocklist, reads the domain's registration date, checks the SSL certificate and scans the homepage for signs of hacking.
Does a padlock (HTTPS) mean a site is safe?
No. HTTPS only means the connection is encrypted. Scam sites get free certificates too. Look at domain age, blocklists and the scam signs listed above.
Is a new domain always a scam?
No, every business starts with a new domain. But a shop that is only weeks old, with huge discounts and transfer-only payment, is a common scam pattern.
I own the site and it's flagged. What now?
Run the full free scan to find malware or injected spam, clean it, then request a review in Google Search Console. Our cleanup service can do it for you.