Suspicious Domain Checker
Score the structural phishing signals of any domain before you click, link to it, or accept it from a client.
Score phishing-risk signals in any domain instantly. Free suspicious-domain checker with entropy, lookalike, TLD and structure analysis.
Calculator Inputs
About Domain Risk
Score the structural phishing signals of any domain before you click, link to it, or accept it from a client.
Phishing domains share structural tells: punycode prefixes hiding Cyrillic lookalikes, hyphen-stuffed names, embedded digits, trust-bait words, deep subdomains, abused TLDs, and machine-random strings. This checker scores each signal transparently — every point is listed, so the verdict is auditable.
Structure is only half the story: a clean score never proves legitimacy. Confirm unknown sites through official channels before entering credentials or paying. Everything runs in your browser.
Where it is used
Vetting link-exchange requests, triaging suspicious emails, checking lookalike domains against your brand, and teaching phishing awareness.
How to use the Domain Risk
- Domain or URL — enter the value (e.g. paypaI-secure-login.tk).
- Calculate — press the Calculate button to see the result instantly above.
Formula
Weighted signals: punycode/TLD 20, length/hyphens/trust-words 15, digits/nesting/case/entropy/lookalikes 10.
Examples
Example
Frequently Asked Questions
- My own domain scored moderate — is something wrong?
- Probably not. Long brandable names with hyphens trip heuristics. The score measures resemblance to phishing patterns, not actual malice.
- Can a low-risk domain still be dangerous?
- Yes. Compromised legitimate sites and fresh lookalikes on reputable TLDs score low structurally. Combine with reputation checks.
- What is punycode abuse?
- Attackers register non-Latin characters that render like Latin ones (e.g. Cyrillic а for a). Browsers show these as xn--… — an instant red flag.