Free & open source. No data stored. No login needed.
How ScamCheck works
- Local heuristics — checks domain age signals, suspicious TLDs, IP-based URLs, excessive subdomains, and known scam keyword patterns
- Google Safe Browsing — queries Google's threat database for known phishing, malware, and social engineering URLs
- VirusTotal — cross-references 70+ security vendors for additional threat intelligence
All three signals are combined into a single verdict. If external APIs are unavailable, heuristics alone are used with a notice.