Is This Website Legit?
Paste the web address of a site you're not sure about. We read the domain the way a fraud analyst would and tell you what stands out.
To check if a website is legit, look at the exact domain name for misspellings of a known brand, an unusual top-level domain, and whether contact details and policies are real. Paste the address into 1Lookup's free website checker and it flags lookalike domains, suspicious TLDs and scam-storefront patterns, and explains what it found.
This tool provides an automated assessment of the web address you submit. It analyses the address itself and does not load the page, scan for malware, verify the business behind it, or query external blocklists. It is not a security scanner and cannot guarantee that a site is safe or fraudulent. A low-risk result means the address shows no clear scam indicators, not that the site is verified as trustworthy. Before buying, verify the business independently, prefer payment methods with buyer protection, and never pay by bank transfer, gift card or cryptocurrency. Report suspected scam sites at reportfraud.ftc.gov.
Need this at scale? Domain Authority API
Pull search footprint, traffic and authority for any domain to size up how established it really is.
Check a Website Before You Buy From It
Scam storefronts are cheap to build and disposable by design. They run a few weeks of ads on impossible discounts, take card details and orders, ship nothing or ship a counterfeit, and disappear before the chargebacks land. The site itself usually looks fine, because the template was bought and the product photos were stolen from the real brand.
The domain is where they leak. Paste the address here and the checker examines the registered domain rather than the page design: whether it is a near-miss of a known brand, whether the brand name is sitting in a subdomain of something unrelated, whether the top-level domain is one heavily associated with throwaway stores, and whether the structure matches known scam-shop patterns. It tells you plainly when the address alone cannot settle it.
Some checks are worth doing yourself alongside this one. Look for a real street address and phone number rather than a contact form. Search the store's name with the word reviews and read what comes back on sites the store does not control. Pay by credit card or PayPal, never by bank transfer, gift card or crypto, because those routes have no way to get your money back.
How to read a link before you click it
The trick in almost every fake link is the same: the brand name is there, but it is not in the part that decides where you land. Here is where to look.
https://your-bank.com.secure-login-verify.icu/auth?ref=email
The brand name, in a part that means nothing
Anything before the final two labels is chosen freely by whoever owns the site. Putting your-bank.com there costs nothing.
The bit that actually decides where you go
Read backwards from the first single slash: the last two labels are the real site. Here that is secure-login-verify.icu, and nothing else.
A tag that tells them the bait worked
Not dangerous on its own, but it means the link was built for a campaign and tracks which message you came from.
The example above is invented for illustration. It names no real company, and the address in it is not a live site.
How the Website Checker Works
Paste the website address
Enter the domain or the full URL of the page you are looking at. You do not need to visit the site again, and we never load it, so nothing is triggered by checking.
We analyse the domain
The checker reads the registered domain for brand lookalikes and misspellings, subdomain tricks, suspicious top-level domains, raw IP hosts and punycode, and weighs the patterns common to short-lived scam storefronts.
Read the verdict and dig deeper
You get a risk level, a confidence score and the specific findings. Then run the domain through our free domain authority checker to see whether it has any real search history behind it.
Catches lookalike brand domains
An added word, a swapped character, a hyphen where there was none, or the real brand parked in the subdomain of a domain nobody owns for long. These read as correct in an ad or a search result.
Weighs the top-level domain
Some TLDs are disproportionately used by disposable stores because they are cheap and lightly policed. That is a signal, not a verdict, and the tool treats it that way.
Judges the address, never the page
We do not load the site. Nothing you check gets a visit from you or from us, and no tracking or malware on the page can fire as a result of running the check.
Says when it cannot tell
A plausible domain proves very little on its own. When the address is not enough to decide, the tool says so and tells you what to check next, rather than inventing confidence it does not have.
Who uses this tool
A store you found through an ad
Social ads are where most scam storefronts get their traffic, and the discount is usually the hook. Check the domain before you enter a card, especially if the brand name looks nearly right.
A deal that seems too good
Genuine clearance exists, but ninety percent off a current-season product from a site you have never heard of almost never does. The domain check often confirms what the price already suggested.
A link from a search result or message
Paid search results and messages both put lookalike domains in front of people looking for the real thing. Paste the address rather than trusting the display text.
Checking a site before you sign up
Not only shopping. The same read applies to a service asking for your details, a job board, or a portal claiming to be an official agency.
Frequently asked questions
Can you tell me if a website will actually ship my order?
No. Nobody can promise that from the outside. What the check gives you is whether the address shows the hallmarks of a scam domain, which is the strongest early signal available before you have spent anything.
Does an HTTPS padlock mean a site is safe?
No, and this is the most common misunderstanding in online safety. A padlock means the connection is encrypted, nothing more. Scam sites get free certificates in minutes, and almost all of them have one.
Do you visit the website to check it?
No. The analysis is of the address itself. That keeps the check safe and instant, and it means no request from you or from us ever reaches the site.
How can I check a site myself?
Search the exact domain plus the word reviews or scam. Look for a physical address and phone number. Check whether the returns and privacy pages are real text or filler. See whether the social links go to accounts with genuine history. A store with none of these is worth avoiding.
I already paid. What can I do?
Contact your card issuer or PayPal straight away and ask about a chargeback: card payments have real protection and the clock matters. Change any password you reused on the site. Report it to the FTC at reportfraud.ftc.gov.
How many sites can I check for free?
Five a day on this tool and fifteen a day across all our free tools, from one IP with a short pause between checks. A free account gives you 1,000 lookups over a seven-day trial.