Domain & Website SEO Tools
Suspicious Domain Checker
Heuristic check for phishing/spam red flags in a domain name.
- Free to use
- No sign-up
Working on it…
Running the tool — your results will appear here in a moment.
No results yet
Enter the details above and run the tool to see your results here.
About this tool
Check an unfamiliar web address for common warning signs before you click, log in or pay. The tool combines Google Safe Browsing with simple pattern checks that often reveal scam and phishing sites.
How to use it
- Enter the name, for example
example-login.xyz. - Run the check.
- Review the risk level and the reasons behind it.
What is checked
- Google Safe Browsing – known malware and phishing listings, when an API key is configured.
- Risky extensions – TLDs frequently abused for spam.
- Sensitive words – terms like "login", "verify" or "wallet" often used to imitate banks and brands.
- Look-alike encoding – Punycode (xn--) that can disguise characters from other alphabets.
- Auto-generated patterns – long random strings of letters and numbers.
- Age – very new registrations are statistically more likely to be abusive.
Other red flags to watch for
Urgent messages about locked accounts, prices that are too good to be true, spelling mistakes in a brand name and requests for card details on an unexpected site.
Reading the result
A warning is a reason to investigate, not proof of wrongdoing, and a clean result is not a guarantee of safety. Never enter passwords or payment details unless you are sure the site is genuine.
A worked example
A message claims your parcel is held at customs and links to post-delivery-verify.top. The check flags a risky extension, the sensitive word "verify" and a registration only days old. The real postal service uses its own well-known site, so the message is deleted.
Spotting look-alike names
- Extra words added to a brand, such as
paypal-secure-login.com. - Swapped letters like rn for m, or 0 for o.
- Characters from other alphabets that look identical (shown as xn-- in Punycode).
- Unusual extensions for well-known companies.
What to do with a suspicious message
- Do not click links or open attachments.
- Go to the company's site by typing its address yourself.
- Report phishing to your email provider or national cyber security agency.
- If you already entered details, change your password and contact your bank.
Related tools
- Domain Age Checker – see how new a name is
- Blacklist Lookup – check spam listings
- Website Malware Scanner – scan a site for known threats
Teaching others
Older relatives, new employees and children are common phishing targets. Share a simple rule: never click a link that creates urgency, and visit important sites by typing the address or using a saved bookmark. Running unfamiliar names through this checker together is a good way to show what warning signs look like.
Reporting phishing
- Use the "Report phishing" option in Gmail or Outlook.
- Report deceptive sites to Google Safe Browsing.
- Forward scam texts to your mobile operator's spam number where available.