Suspicious Domain Checker

A web address can appear familiar while containing substituted letters, Unicode look-alike characters, misspellings, added punctuation, or other subtle differences.

Use this tool to examine the text of a suspicious domain or link before deciding whether to visit it.

How It Works

Enter the suspicious domain. If you know the legitimate domain you expected, enter that as the trusted comparison domain.

The tool may identify:

• Internationalized domain names(IDN) and Punycode

• Unicode characters that resemble common Latin letters

• Mixed writing systems

• Character substitutions

• Missing or added characters

• Transposed letters

• Added hyphens

• Similarity to a trusted domain

• Relevant Unicode character names and code points

The checker analyzes the submitted text only. It does not visit, open, download content from, or otherwise connect to the submitted website.

Important Limitation

A similarity warning does not prove that a domain is malicious. A lack of warnings does not prove that a domain is safe.

This tool does not currently check domain registration, DNS records, IP addresses, hosting providers, certificates, redirects, website content, reputation services, malware detections, or threat-intelligence sources.

Treat the result as a preliminary indicator rather than a final security determination.

Do not enter passwords, usernames, authentication tokens, private document links, password-reset links, or URLs containing sensitive personal information.

Need a More Detailed Review?

Frederick Data Forensics, L.L.C. can conduct an authorized review of a suspicious domain, link, message, or related technical records.

A more detailed review may examine available domain-registration information, DNS configuration, certificate information, email context, redirects, reputation indicators, and other relevant records without making unsupported claims about identity, intent, or criminal responsibility.