Two safety tools in one place — check risky links, and check passwords.
Everything runs on your own device. Nothing you type — no links, no passwords — is ever saved, sent, or seen by anyone. Both tools work even with your internet turned off.
It never opens, visits, or loads the link — it only reads the text, right here in your browser. If you find a link you think is a scam, you can "defang" it so it can't be clicked by accident: swap http for hxxp and . for [.], like hxxp://bad-site[.]tk. Scam Spotter understands that and reads it anyway. A clean score isn't a promise, and a real site can sometimes trip one flag. If anything feels off, stop and don't type anything.
This webpage checks links when you ask. The included Python script (scam_spotter.py) can also run in the background and check every link you copy, automatically, popping up a warning for bad ones and saving them to a log.
Save them in one folder, then open README.txt for how to run it.
Anything before an @ in a link is ignored by browsers. Scammers put a trusted name there; the real site is whatever comes after the @.
The name looks almost right, swapping letters for lookalike numbers — a zero for an O, a 1 for an l — to fool your eye.
Letters from other alphabets can look identical to normal ones. The address reads like a real site but isn't.
Scammers love free or unusual endings like .tk, .xyz or .top, because real companies rarely use them for logins.
"Verify now", "your account is suspended", "claim your free prize" — urgency is designed to make you act before you think.
Everything happens inside this page, in your browser. There is no server, no account, and no internet connection used to check your password. Nothing you type is stored, so when you close the page it's gone. That's why it's safe to test even your real passwords here.
Put this page on a free web host (like GitHub Pages), open it in Chrome or Safari, and use "Install app" or "Add to Home Screen" — it gets its own icon and opens in its own window. Because everything runs in the page, it keeps working with no internet after that. (Installing needs the page to be online once; opening the file straight from your computer won't show the install button.)