Scan any link, QR code or email
Know before you click.
Paste a URL, drop a QR-code image, or paste a suspicious email — and get a clear verdict in seconds: safe or scam, explained in plain English.
Trusted for 400+ scans across 17 countries
// How it works
Twelve signals. One honest verdict.
Live Threat Feeds
Every URL is checked against curated malware and phishing feeds — URLhaus, OpenPhish and PhishStats — refreshed continuously.
TLS & JARM Fingerprinting
We fingerprint the server's TLS stack (JARM) to spot infrastructure reused across known command-and-control and scam networks.
SSL / TLS Analysis
Certificate validity, issuer and encryption are inspected on every scan.
Certificate Transparency
Public CT logs reveal how new a domain's certificates really are — a classic phishing-kit tell.
Passive DNS & Fast-Flux
The site's resolving IPs are geolocated and mapped to expose fast-flux or freshly-moved infrastructure.
Device Cloaking & Favicon
Mobile-vs-desktop cloaking checks plus favicon fingerprinting catch sites impersonating trusted brands.
// Live threat map