Free tool
How to check if a website is safe
Check if a website is safe in five steps: confirm the exact domain name, make sure it loads over HTTPS without warnings, find a real company behind it, search for independent reviews, and avoid sites that only take bank transfers, gift cards or crypto. Then run a free check of how securely the site is configured.
- ISO 27001 compliant
- SOC 2 Type 2 compliant
- Preferred Cloudflare Partner
- 24/7 follow-the-sun support
1. Read the domain carefully
Scam sites copy real brands with lookalike domains: an extra word (brand-support.com), a different ending (.shop instead of .com) or swapped characters. Type the address you know rather than following a link.
2. Look for HTTPS without warnings
A safe site loads over https:// and your browser shows no certificate warning. Never enter a password or payment details on a page that shows one.
3. Find the company behind it
A legitimate business lists its registered name, a physical address and working contact details. A site with only a contact form deserves more caution.
4. Search for independent reviews
Search the domain name with words like scam or reviews. Sites registered in the last few weeks with no history are a common pattern in shopping fraud.
5. Check how it wants to be paid
Card payments can be disputed. Requests for bank transfer, gift cards or cryptocurrency cannot, which is why scammers prefer them.
How Vigilbase helps
Vigilbase runs security operations and website protection for businesses that would rather not build a security team.
Vigilbase Shield
Managed Cloudflare WAF, DDoS and bot protection, configured and watched by our team.
Learn moreIncident response
Help to contain, clean up and recover when something has already gone wrong.
Learn moreVigilbase OS
AI investigates every alert and brings you only verified threats, with the fix ready to approve.
Learn moreFrequently asked questions
Can a website be unsafe even with a padlock?
Yes. The padlock only means the connection is encrypted. Anyone can get a certificate, including scammers.
What does the free Vigilbase check test?
How securely the site is configured: HTTPS, security headers, exposed files and server settings. It is not a scam blocklist.
What should I do if I entered details on an unsafe site?
Change the password everywhere you reused it, turn on two-factor authentication, and call your bank to block the card if you paid.
More free tools and guides
Security handled, around the clock
Vigilbase is ISO 27001 and SOC 2 Type 2 compliant and a Preferred Cloudflare Partner, with follow-the-sun support from teams in Kenya, South Africa, the UAE and Portugal.