Security & Finance Tools

Paste any email, SMS or WhatsApp message. 18-rule pattern engine detects urgency tactics, payment fraud, romance scams, fake prizes, and IRS impersonation.

Paste any suspicious link — detects lookalike domains, homograph attacks, free TLD abuse, IP-based URLs, redirect traps, and URL shorteners hiding real destinations.

Answer questions about a suspicious social media profile. Detects romance scam, catfish, and fake account red flags across 20+ behavioral indicators on Facebook, Tinder, Instagram & LinkedIn.

Check if your email was exposed in a known data breach via the HaveIBeenPwned database of 12+ billion compromised accounts. Get actionable steps if a breach is found.

Paste raw email headers to detect phishing attempts, spoofed senders, SPF/DKIM failures, and trace the full delivery path hop by hop.

Reveal where a shortened or suspicious URL really leads. See the full redirect chain before clicking on any unknown link.

Run any link through 15+ phishing indicators — IP-based addresses, lookalike domains, brand names buried in subdomains, throwaway TLDs — and see exactly which ones it trips.

Paste a suspicious SMS, email or WhatsApp message and find out which scam it matches — prize wins, fake bank alerts, government impersonation, crypto bait, or credential phishing.

See what a suspicious site looks like without ever loading it in your own browser. Returns a screenshot, a safety score, and the scam signals found on the page.

See your real IP, geolocation, ISP, browser fingerprint hash, OS, screen resolution, timezone, WebGL info — everything websites silently collect about you.

Instantly see how long it would take a hacker to crack your password using brute force, plus generate a cryptographically secure random password.

Generate cryptographically secure emergency backup codes, compare authenticator apps vs SMS vs hardware keys, and get step-by-step 2FA setup guides for 6 major platforms.

Paste any privacy policy — detects data selling clauses, indefinite retention, biometric collection, third-party sharing, and 23+ other risky patterns with a letter grade.

Find out who owns a domain — registration date, expiry, registrar, country. Spot freshly-registered scam domains pretending to be established brands.

Check any IP address for geolocation, ISP, ASN, and whether it's flagged as a proxy, VPN, Tor exit node, or known malicious host.

Find out how long a domain has actually existed. A shop or investment platform registered weeks ago is the single strongest scam signal there is — this tells you in seconds.

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes from any text instantly. Verify file integrity, compare checksums, and detect tampered downloads.

Encode/decode Base64, URL parameters, HTML entities, hex, and binary. Decode obfuscated payloads hidden in phishing emails and suspicious URLs.

Beautify JSON with syntax highlighting, validate structure, minify for production, sort keys alphabetically, and pinpoint exact syntax errors.

Verify any website's SSL certificate — issuer, validity, expiry date, SANs, and grade. Catch fake HTTPS phishing sites using free certificates.

Audit any site's HTTP response headers — HSTS, CSP, X-Frame-Options, X-Content-Type-Options and more — for a security grade plus the exact header lines needed to fix what's missing.

Compare the Snowball vs Avalanche debt payoff strategy. See which method saves you the most interest and gets you debt-free the fastest.

Enter your salary and US state to see exact take-home pay — federal tax, state tax, Social Security, Medicare, with weekly/bi-weekly/monthly breakdowns.

Find your financial independence number and early retirement date. Visualize the full savings journey with projected net worth growth year by year.

Compare the true cost of renting versus buying a home with break-even analysis, opportunity cost of down payment, and 5/10/20-year projections.

Check your DTI ratio against all major lender benchmarks — FHA, conventional, VA, USDA, and auto loans. See exactly what to reduce to qualify.

Calculate self-employment tax, quarterly estimated payments, and deductions for freelance income. Know exactly what to set aside from every gig payment.

Step-by-step action plan if you’ve been scammed. Covers bank fraud, crypto scams, romance scams, identity theft and job scams with personalized recovery checklists.

Analyze any investment offer for Ponzi scheme patterns, unrealistic return promises, unregistered platforms, and 20+ fraud red flags. Get a risk score out of 100.

Paste a wallet address or describe a crypto offer. Detects pig butchering, rug pulls, honeypot tokens, fake exchanges, and withdrawal-fee scams across all major blockchains.

Check any phone number for scam patterns. Identify IRS impersonators, tech support fraud, robocalls, spoofed numbers, and area code risk with reporting links.

Paste any Bitcoin, Ethereum, USDT, TRON, or XRP wallet address. Validates format, detects vanity address scam patterns, links to blockchain explorers, and checks our scam report database.

Browse the crypto scam list: fraudulent cryptocurrency exchanges, fake investment platforms, pig butchering scams, rug pulls, NFT fraud, and recovery scams — with red flags for each.

How to send credit to Roshan, AWCC, Etisalat, ATOMA and Salaam numbers from abroad — and how to spot the fake recharge sites that target the Afghan diaspora.

Seven checks that take two minutes — and why the padlock icon proves almost nothing. Most phishing pages have one.

Eight checks before you buy. A site is legit when a real, reachable business stands behind it — design proves nothing.

A 60-second test. Trust is a scale, not a yes or no — match the checking to what you are actually risking.

You cannot spot a clone by looking at it — good ones are exact copies. Check the domain, the age and the contact details instead.

Which blacklists matter, how to read the result, and the trap: a brand new scam site passes every check on day one.

The three routes available to you, what each costs and achieves, and how to choose before the trail goes cold. Start with the free 15 minute check.

15 minutes to trace, weeks to freeze, months to recover. Three different clocks — and the 72 hour window that actually decides your outcome.

Free to start, four figures for a professional investigation. What you get at each price point — and the cases where paying will not change the outcome.

Yes — and they hold the one power nobody else has: forcing an exchange to freeze funds. What they realistically do, and how to file a report that gets acted on.

Free block explorers you can use right now versus the platforms investigators license. Which explorer to use for USDT, and what no tool can do.

An honest answer: yes, almost always. But tracing and recovery are two different things. Learn what a trace can and cannot do, and what really decides whether you get anything back.

Follow your stolen crypto on the blockchain in about 15 minutes using free tools. Find your TXID, pick the right block explorer, and see where the money actually went.

Most "recovery services" that contact you are a second scam. Learn the red flags, why they find you within hours, and how to verify a real firm before you pay anyone.

Yes. Tether and Circle can blacklist addresses holding USDT or USDC — something impossible with Bitcoin. If your stolen funds are still stablecoins, this is your best route.

These sound identical but need opposite solutions. One is a wallet access problem, the other is a theft investigation. A 30 second test tells you which one you have.

Answer 5 quick questions to find out if your crypto scam case qualifies for professional fund recovery. Get your eligibility score in 60 seconds — free assessment.

Complete guide to pig butchering (sha zhu pan) crypto romance fraud — how it works, red flags, real victim examples, and step-by-step recovery actions.

Step-by-step guide to reporting cryptocurrency scams to FBI IC3, FTC, SEC, CFTC, FCA, and other regulators worldwide. Includes what evidence to gather and direct links.

Seven actions for the first hour after a scam: stop further losses, try to halt the payment, preserve the evidence, and file the reports that actually get looked at.

Your odds depend almost entirely on how you paid. Card, bank wire, crypto and gift card cases each get an honest answer and the deadline you are racing against.

Sent BTC to a scammer? The six Bitcoin scams that catch people most often, what tracing can realistically achieve, and the moves that matter in the first 48 hours.

Fifteen checks that separate a licensed broker from a fake crypto exchange or forex platform — including the withdrawal blocks and "tax before payout" demands that expose pig butchering.

How a fake relationship is built week by week and where it turns into a crypto investment pitch — plus the five warning signs that appear long before money is ever mentioned.

Seven signs an offer is fake — work-from-home task scams, upfront training fees, cheque overpayments, recruiter impersonation — and what to do if you already sent money or ID documents.

Eight red flags of a fake store or Marketplace seller, how to claw a payment back after the item never arrives, and where to report the shop so it gets taken down.

The eight scams running on Instagram, Facebook, TikTok and WhatsApp — hacked-friend messages, fake shops, giveaway bait — with the reporting route for each platform.