Check an email or link

Paste an email address, a web link, or a domain. We look for lookalike names, odd patterns, and (when we can) how new the domain is.

What this check does

• Reads whether you pasted an email, a link, or a domain.
• Pulls out the main domain name.
• Looks for names that mimic big brands (banks, shipping, Apple, Google, Microsoft, PayPal, tax agencies, and more).
• Flags odd patterns such as extra dashes, lots of numbers, strange subdomains, or login-style paths.
• Asks a public domain register (RDAP) for the registration date when the browser allows it. If that fails, we say so and skip age.

What this check does not do

• It does not open your inbox or scan full messages.
• It does not use a paid blocklist account.
• It does not store, log, or send your paste to analytics. The only outside request is the optional domain-age lookup.
• It cannot promise something is safe or prove something is a scam.

If the result worries you

1. Do not click the link, sign in, or send money.
2. Open the real company site by typing it yourself, or call a number from your card or bill.
3. Report it at ReportFraud.ftc.gov.
4. For hands-on help with your own website or email setup, see security consulting.

General information only. Not legal, financial, or security advice, and not a guarantee. Check with the company or agency involved.