Not sure whether a website is real and safe to use? You are right to check. The good news is that a few reliable signals, looked at together, will tell you most of what you need to know in a couple of minutes.
This guide covers what to look at, which signals actually matter, and the ones that fool people. You can also run the site through our free check below to do the technical parts automatically.
Paste an address for a free safety check: encryption, malware and phishing, domain age and more.
No single signal proves a site is legit or a scam. What works is looking at several together: is the connection encrypted, how long has the site existed, does it have a real business behind it, and what do independent reviews say. If most of those look good, the site is probably fine. If several look off, treat it with caution.
Our free safety check covers the technical signals for you in seconds and gives you a plain verdict.
Legitimate sites usually have a history. A domain registered years ago is more reassuring than one created last week.
The address starts with https and shows a padlock. This protects what you type, though on its own it does not prove honesty.
A findable company name, physical address, contact method, and clear returns and privacy policies.
A footprint on review sites, social media or forums that you did not find on the site itself.
Two things make people trust a site they should not. The first is the padlock: HTTPS only means your connection is private, not that the business is honest, and scammers get certificates for free. The second is a polished design: a professional-looking template can be bought or copied in an afternoon. Judge a site on verifiable signals, not on how slick it looks.
Run it through our free safety check, which looks at malware and phishing flags, whether the connection is encrypted, how old the domain is and more, then gives you a clear verdict. Combine that with a quick search for independent reviews of the business.
No. A polished design is easy to buy or copy and is not evidence of a real, honest business. Judge a site on verifiable signals like domain age, encryption, contact details and independent reviews.
No. The padlock and https only mean your connection to the site is encrypted. Scammers can get valid certificates for free, so a padlock is necessary but not proof the business is trustworthy.
Check how old the domain is and whether it is flagged for malware or phishing, then look for independent reviews. A brand-new domain, no reviews anywhere, and prices that seem too good to be true are the strongest warning signs.
Free, anonymous, and no signup. Know before you buy.