Live API · No key · No signup

UTA Scam Checker

Your AI agent recommended a store, a tool or a download link. Before it touches your files or your wallet — check the domain against 8 transparent heuristics.

Type a domain. Get a verdict in ~1–2 seconds (live registry + TLS checks).

Try:
resolving domainchecking TLD reputationparsing IDN/punycodematching typosquat patternsquerying RDAP registryinspecting TLS certificate

⚙️ How it works

8 transparent heuristics run on every domain: URL shortener, suspicious TLD, punycode/IDN homoglyphs, typosquatting, subdomain abuse, suspicious tokens, domain age, SSL. Domain age and SSL are now verified LIVE server-side (RDAP registry data + TLS certificate) — no API key. Every check's reasoning is shown — no black-box score.

🤖 For AI agents

Call it from any agent before a purchase or download: GET /api/scam-check?domain=… — same engine, JSON response. Works great as an MCP tool pre-check.

🔬 Fail-closed philosophy

A new clean scam domain returns UNKNOWN, never TRUSTED. No data = no trust. That’s the MarketNow golden rule applied to domains.