# ScamWebGuard > ScamWebGuard is a free website safety checker that instantly analyzes any URL for scams, phishing, malware, and online fraud. It generates a 0–100 safety score backed by 40+ security checks — including SSL certificate analysis, domain age verification, WHOIS data, blacklist scanning (Google Safe Browsing, VirusTotal), malware detection, and AI-generated threat assessments — to help users determine whether a website is safe to visit. ScamWebGuard is used by individuals and businesses to verify websites before sharing payment details, clicking suspicious links, or making online purchases. The platform maintains a community-sourced scam directory, allows users to submit scam reports, and provides an API for automated safety checks. ## Tools - [Website Safety Checker](https://scamwebguard.com/verify): Submit any URL to receive an instant 0–100 safety score with a full breakdown of security indicators, SSL info, WHOIS data, and threat analysis - [Domain Safety Report](https://scamwebguard.com/verify/{domain}): Full safety analysis page for any domain — replace `{domain}` with the domain to check (e.g., `/verify/amazon.com`). Reports include safety score, verdict, positive/negative findings, blacklist status, screenshot, and user reviews - [Scam Directory](https://scamwebguard.com/scam-directory): Searchable database of known scam and fraudulent websites reported by the community and sourced from trusted warning databases (FCA, AA419) - [Report a Scam](https://scamwebguard.com/check): Submit a report if you have been victimized by an online scam or fraudulent website ## Security Tools Hub All tools are free, require no account, and process queries without storing personally identifiable information. - [Security Tools Hub](https://scamwebguard.com/tools): Landing page listing all available free security tools with descriptions and direct links - [Email Header Analyzer](https://scamwebguard.com/tools/email-header-analyzer): Paste raw email headers to detect phishing, spoofed senders, SPF/DKIM/DMARC authentication failures, reply-to mismatches, and trace the full email delivery hop chain. Runs entirely client-side — headers are never sent to the server. - [URL Expander & Redirect Tracer](https://scamwebguard.com/tools/url-expander): Safely follow any shortened or suspicious URL (bit.ly, tinyurl, t.co, etc.) through every server-side redirect to reveal the true final destination before clicking. Displays HTTP status codes at each hop. - [IP Address Reputation Lookup](https://scamwebguard.com/tools/ip-lookup): Enter any IPv4 or IPv6 address to see its geographic location, country, ISP, autonomous system number (ASN), and whether it is flagged as a proxy server, VPN, or commercial hosting provider. - [WHOIS Domain Lookup](https://scamwebguard.com/tools/whois-lookup): Query the official WHOIS database for any domain. Returns registrar, registration date (with age indicator flagging newly-registered domains), expiry date, registrant country, name servers, and domain status. Includes raw WHOIS output toggle. - [SSL Certificate Checker](https://scamwebguard.com/tools/ssl-checker): Fetch the live SSL/TLS certificate from any HTTPS website. Displays issuer, subject common name, valid-from/valid-to dates, days remaining, subject alternative names (SANs), serial number, and an A/B/F grade. Detects expired and soon-to-expire certificates. - [Phishing URL Detector](https://scamwebguard.com/tools/phishing-detector): Analyze any URL for 15+ phishing indicators including IP-based hostnames, brand keyword spoofing, lookalike domains, suspicious TLDs (.xyz, .top, .click), excessive subdomains, encoded characters, URL length, and phishing keywords. Runs client-side with no data sent to server. - [Domain Age Checker](https://scamwebguard.com/tools/domain-age): Look up when any domain was first registered via WHOIS. Displays domain age in days/months/years with a risk assessment badge (red for under 90 days, yellow for under 1 year, green for older). Over 95% of scam websites are under 1 year old. - [Scam Message Analyzer](https://scamwebguard.com/tools/scam-message-analyzer): Paste any suspicious SMS, email, or chat message to detect scam patterns across 8 categories: prize/lottery fraud, bank impersonation, government impersonation, crypto investment scams, urgency/pressure tactics, phishing links, romance scams, and parcel/delivery scams. Runs entirely client-side. - [HTTP Security Headers Checker](https://scamwebguard.com/tools/security-headers): Fetch and grade a website's HTTP security headers including HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and X-XSS-Protection. Returns an A+ to F grade with per-header present/missing status. - [Safe Website Preview](https://scamwebguard.com/tools/safe-preview): View a cached screenshot of any website alongside its safety score without the user's browser ever contacting the target domain. Zero exposure to malware, tracking, or phishing content. ## Key Pages - [Home](https://scamwebguard.com/): Service overview with recently scanned websites, live safety stats, and latest user reviews - [About](https://scamwebguard.com/about): Mission, team, and methodology — how safety scores are calculated and what data sources are used - [FAQ](https://scamwebguard.com/faq): How the checker works, what the safety score means, data sources, and common questions - [Contact](https://scamwebguard.com/contact): Contact the ScamWebGuard team for support or inquiries - [Privacy Policy](https://scamwebguard.com/privacy): How user data is collected, processed, and protected - [Terms of Service](https://scamwebguard.com/terms): Terms governing use of the service and API - [Sitemap](https://scamwebguard.com/sitemap.xml): Full XML sitemap of all indexed pages ## API ScamWebGuard provides a public API for automated website safety checks and security tool queries. No authentication required. ### Safety Check API - **Scan** — `POST /api/scan` — Body: `{"url": "example.com"}` — Returns: safety score, verdict, positive/negative findings, and analysis summary - **Recent sites** — `GET /api/recent-sites` — Returns: recently analyzed domains with safety scores and timestamps - **Recent reviews** — `GET /api/recent-reviews` — Returns: latest user-submitted reviews across all domains - **Domain reviews** — `GET /api/reviews/{domain}` — Returns: all user reviews for a specific domain ### Security Tools API - **WHOIS Lookup** — `POST /api/tools/whois` — Body: `{"domain": "example.com"}` — Returns: parsed WHOIS data (registrar, dates, nameservers, registrant country) and raw WHOIS output - **SSL Certificate Check** — `POST /api/tools/ssl` — Body: `{"domain": "example.com"}` — Returns: issuer, validity dates, days remaining, SAN list, grade (A/B/F), expiry status - **URL Expander** — `POST /api/tools/url-expand` — Body: `{"url": "https://bit.ly/xyz"}` — Returns: full redirect chain with HTTP status codes and final destination URL ## Safety Score Methodology Scores range from **0 to 100**: - **70–100 (Safe)**: Website passed all or most security checks. Low risk. - **40–69 (Caution)**: Some security concerns detected. Verify before sharing personal data. - **0–39 (Dangerous)**: Multiple red flags detected. Website is likely fraudulent or malicious. Checks performed include: SSL certificate validity, domain age (newly registered domains score lower), WHOIS data consistency, presence on Google Safe Browsing / VirusTotal / phishing blacklists, malware scan results, known scam directory matches (FCA, AA419, ScamMinder, ChainAbuse), website screenshot analysis, and AI-generated review based on aggregated signals. ## Languages All pages are available in 16 languages at the `/{lang}/` URL prefix: | Language | Prefix | |---|---| | English (default) | *(no prefix)* | | Spanish | `/es/` | | French | `/fr/` | | German | `/de/` | | Arabic | `/ar/` | | Portuguese | `/pt/` | | Russian | `/ru/` | | Chinese | `/zh/` | | Japanese | `/ja/` | | Korean | `/ko/` | | Italian | `/it/` | | Dutch | `/nl/` | | Turkish | `/tr/` | | Polish | `/pl/` | | Hindi | `/hi/` | | Vietnamese | `/vi/` | ## Contact & Organization - **Website**: https://scamwebguard.com - **Address**: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom - **Phone**: +44 7520 693992 - **Contact page**: https://scamwebguard.com/contact ## Optional - [Full AI Documentation](https://scamwebguard.com/llms-full.txt): Extended site content, page descriptions, and full knowledge base for AI systems - [AI Plugin Manifest](https://scamwebguard.com/.well-known/ai-plugin.json): OpenAI-compatible plugin definition - [Robots.txt](https://scamwebguard.com/robots.txt): Crawler permissions (all AI crawlers explicitly allowed)