Last updated: 2026-08-30
When you paste a URL into the form, your server (not a third party) does the following: checks whether the domain is on a public list of confirmed threats, examines patterns in the URL's own text (domain, extension, parameters), follows the redirect chain if any, and checks the WHOIS record and SSL certificate of the destination site. All of this happens on the spot, to generate your report.
We don't store the URLs you analyze. No record is kept in our database of which URL you pasted or when. The analysis is generated, shown to you, and that's the end of it.
When analyzing your URL, the server directly contacts the destination site (to follow redirects and check its certificate) and public WHOIS servers (for the domain's registration date). This is equivalent to your own browser visiting that site — we don't share the URL with any other service.
If the site is running in "Pro" mode, periodically (not on every analysis, but in a separate, weekly process) Claude's API (Anthropic) is used to research general fraud news and propose updates to the threat database. That process never sends the URLs visitors analyze — it researches public trends, not individual lookups.
If you're a regular visitor analyzing a URL, you are not assigned any cookie. The only cookie on this site is for the administration panel session (internal use), lasts 8 hours, and is never used to track visitors or for advertising. More detail on the Cookies page.
For any questions about this policy, you can reach us through the contact link available on the site's main page.
This document describes the actual technical operation of the service. It does not replace formal legal advice; if you operate this site in a context that requires specific regulatory compliance (GDPR, etc.), consult a professional.
← Back to the analyzer