Security & Finance Tools

Paste any email, SMS or WhatsApp message. 18-rule pattern engine detects urgency tactics, payment fraud, romance scams, fake prizes, and IRS impersonation.

Paste any suspicious link — detects lookalike domains, homograph attacks, free TLD abuse, IP-based URLs, redirect traps, and URL shorteners hiding real destinations.

Answer questions about a suspicious social media profile. Detects romance scam, catfish, and fake account red flags across 20+ behavioral indicators on Facebook, Tinder, Instagram & LinkedIn.

Check if your email was exposed in a known data breach via the HaveIBeenPwned database of 12+ billion compromised accounts. Get actionable steps if a breach is found.

Paste raw email headers to detect phishing attempts, spoofed senders, SPF/DKIM failures, and trace the full delivery path hop by hop.

Reveal where a shortened or suspicious URL really leads. See the full redirect chain before clicking on any unknown link.

See your real IP, geolocation, ISP, browser fingerprint hash, OS, screen resolution, timezone, WebGL info — everything websites silently collect about you.

Instantly see how long it would take a hacker to crack your password using brute force, plus generate a cryptographically secure random password.

Generate cryptographically secure emergency backup codes, compare authenticator apps vs SMS vs hardware keys, and get step-by-step 2FA setup guides for 6 major platforms.

Paste any privacy policy — detects data selling clauses, indefinite retention, biometric collection, third-party sharing, and 23+ other risky patterns with a letter grade.

Find out who owns a domain — registration date, expiry, registrar, country. Spot freshly-registered scam domains pretending to be established brands.

Check any IP address for geolocation, ISP, ASN, and whether it's flagged as a proxy, VPN, Tor exit node, or known malicious host.

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text instantly. Verify file integrity, compare checksums, and detect tampered downloads.

Encode/decode Base64, URL parameters, HTML entities, hex, and binary. Decode obfuscated payloads hidden in phishing emails and suspicious URLs.

Beautify JSON with syntax highlighting, validate structure, minify for production, sort keys alphabetically, and pinpoint exact syntax errors.

Verify any website's SSL certificate — issuer, validity, expiry date, SANs, and grade. Catch fake HTTPS phishing sites using free certificates.

Compare the Snowball vs Avalanche debt payoff strategy. See which method saves you the most interest and gets you debt-free the fastest.

Enter your salary and US state to see exact take-home pay — federal tax, state tax, Social Security, Medicare, with weekly/bi-weekly/monthly breakdowns.

Find your financial independence number and early retirement date. Visualize the full savings journey with projected net worth growth year by year.

Compare the true cost of renting versus buying a home with break-even analysis, opportunity cost of down payment, and 5/10/20-year projections.

Check your DTI ratio against all major lender benchmarks — FHA, conventional, VA, USDA, and auto loans. See exactly what to reduce to qualify.

Calculate self-employment tax, quarterly estimated payments, and deductions for freelance income. Know exactly what to set aside from every gig payment.

Step-by-step action plan if you’ve been scammed. Covers bank fraud, crypto scams, romance scams, identity theft and job scams with personalized recovery checklists.

Analyze any investment offer for Ponzi scheme patterns, unrealistic return promises, unregistered platforms, and 20+ fraud red flags. Get a risk score out of 100.

Paste a wallet address or describe a crypto offer. Detects pig butchering, rug pulls, honeypot tokens, fake exchanges, and withdrawal-fee scams across all major blockchains.

Check any phone number for scam patterns. Identify IRS impersonators, tech support fraud, robocalls, spoofed numbers, and area code risk with reporting links.

Paste any Bitcoin, Ethereum, USDT, TRON, or XRP wallet address. Validates format, detects vanity address scam patterns, links to blockchain explorers, and checks our scam report database.

Browse the crypto scam list: fraudulent cryptocurrency exchanges, fake investment platforms, pig butchering scams, rug pulls, NFT fraud, and recovery scams — with red flags for each.

Seven checks that take two minutes — and why the padlock icon proves almost nothing. Most phishing pages have one.

Eight checks before you buy. A site is legit when a real, reachable business stands behind it — design proves nothing.

A 60-second test. Trust is a scale, not a yes or no — match the checking to what you are actually risking.

You cannot spot a clone by looking at it — good ones are exact copies. Check the domain, the age and the contact details instead.

Which blacklists matter, how to read the result, and the trap: a brand new scam site passes every check on day one.

The three routes available to you, what each costs and achieves, and how to choose before the trail goes cold. Start with the free 15 minute check.

15 minutes to trace, weeks to freeze, months to recover. Three different clocks — and the 72 hour window that actually decides your outcome.

Free to start, four figures for a professional investigation. What you get at each price point — and the cases where paying will not change the outcome.

Yes — and they hold the one power nobody else has: forcing an exchange to freeze funds. What they realistically do, and how to file a report that gets acted on.

Free block explorers you can use right now versus the platforms investigators license. Which explorer to use for USDT, and what no tool can do.

An honest answer: yes, almost always. But tracing and recovery are two different things. Learn what a trace can and cannot do, and what really decides whether you get anything back.

Follow your stolen crypto on the blockchain in about 15 minutes using free tools. Find your TXID, pick the right block explorer, and see where the money actually went.

Most "recovery services" that contact you are a second scam. Learn the red flags, why they find you within hours, and how to verify a real firm before you pay anyone.

Yes. Tether and Circle can blacklist addresses holding USDT or USDC — something impossible with Bitcoin. If your stolen funds are still stablecoins, this is your best route.

These sound identical but need opposite solutions. One is a wallet access problem, the other is a theft investigation. A 30 second test tells you which one you have.

Answer 5 quick questions to find out if your crypto scam case qualifies for professional fund recovery. Get your eligibility score in 60 seconds — free assessment.

Complete guide to pig butchering (sha zhu pan) crypto romance fraud — how it works, red flags, real victim examples, and step-by-step recovery actions.

Step-by-step guide to reporting cryptocurrency scams to FBI IC3, FTC, SEC, CFTC, FCA, and other regulators worldwide. Includes what evidence to gather and direct links.