How old the domain is
Fetched from the registry, not guessed. We speak RDAP to the registries that have it, and WHOIS straight over port 43 to those that do not. It is the single signal that says the most.
ScamZam checks the website for you. You get the answer in under ten seconds, and you can see exactly which signs are behind it. Ten seconds now, or an unpleasant conversation with your bank later.
psst… your grandmother would get something out of installing it too
Both of these appeared in the address bar of a real browser. One is PayPal. The other is not. Press the one you think is fake.
You found something on Facebook. The price is good. The site looks right. But can you trust it?
20 minutes
Hmm. I still do not know.
8 seconds
HIGH RISK
Right. I am not buying here.
You never just get a colour. You get the reasons, and you can open the full report if you want to see the figures yourself.
LOOKS OK
We found nothing that suggests a scam.
Carry on as usual
BE CAREFUL
A few things stand out, without necessarily meaning anything.
Read the reasons first
SUSPICIOUS
Several signs point the same way.
Do not pay by card here
HIGH RISK
Strong signs of a scam.
Type nothing in. Close the pageBehind every verdict are concrete facts about the website. Six kinds, looked up while you wait. None of them come from us, they come from registries you can look in too.
Fetched from the registry, not guessed. We speak RDAP to the registries that have it, and WHOIS straight over port 43 to those that do not. It is the single signal that says the most.
Six public blocklists. If the site is on one of them, the matter is settled immediately.
If there is a VAT number, we look it up with the European Commission. An invented number is not sloppiness, it is an attempt to look like something you are not.
The PayPal thing above. We decode the address and fold it down to Latin letters, so the imitation cannot hide behind a Cyrillic a.
Who hosts the site, in which country, whether the domain even has a mail server, and how far back the certificates go.
Countdown clocks, discounts that are too good, payment that cannot be traced, language run through a machine. If the two models disagree, we ask a third.
We are building ScamZam because it should not take twenty minutes of research to find out whether a website can be trusted.
ScamZam is made by one person, not by a company that lives on advertising. No investors who need to make money from your data, and no ad network. That is why you can write to a human being and get an answer, and why a wrong verdict is read by someone when you report it.