All checks

Malware & Phishing

Whether the site appears on common malware and phishing lists

What it is

Checks the domain against public malware and phishing feeds, currently URLHaus and PhishTank, both community-reported and updated continuously.

Why it matters

A listing is strong evidence. An absence is weak evidence, since these feeds only know what somebody has reported. Freshly registered phishing domains routinely appear on no list at all for their first few days, which is exactly when they do their work.

Key terms

Google Safe Browsing
Google's list of sites known for malware or phishing, which Chrome, Firefox and Safari warn visitors about.
Threat Scan
A scan of the site for malware, phishing and other threats to visitors.
Phishing
Pages that pose as a trusted brand to steal logins, card details or other personal data.
Malware
Software designed to harm visitors or their devices, often spread through hacked sites.

Related checks