# How to check if a website is safe

> Check if a website is safe in five steps: confirm the exact domain name, make sure it loads over HTTPS without warnings, find a real company behind it, search for independent reviews, and avoid sites that only take bank transfers, gift cards or crypto. Then run a free check of how securely the site is configured.

This site is run by Vigilbase (https://vigilbase.com), a managed security provider. It covers: check if website is safe.

## Run the check

- In the browser: https://checkifwebsiteissafe.com/ (results shown on the page)
- API: POST https://api.vigilbase.com/tools/v1/agent/tools/security-headers/execute with {"target":"example.com"}

## 1. Read the domain carefully

Scam sites copy real brands with lookalike domains: an extra word (brand-support.com), a different ending (.shop instead of .com) or swapped characters. Type the address you know rather than following a link.

## 2. Look for HTTPS without warnings

A safe site loads over https:// and your browser shows no certificate warning. Never enter a password or payment details on a page that shows one.

## 3. Find the company behind it

A legitimate business lists its registered name, a physical address and working contact details. A site with only a contact form deserves more caution.

## 4. Search for independent reviews

Search the domain name with words like scam or reviews. Sites registered in the last few weeks with no history are a common pattern in shopping fraud.

## 5. Check how it wants to be paid

Card payments can be disputed. Requests for bank transfer, gift cards or cryptocurrency cannot, which is why scammers prefer them.

## FAQ

### Can a website be unsafe even with a padlock?

Yes. The padlock only means the connection is encrypted. Anyone can get a certificate, including scammers.

### What does the free Vigilbase check test?

How securely the site is configured: HTTPS, security headers, exposed files and server settings. It is not a scam blocklist.

### What should I do if I entered details on an unsafe site?

Change the password everywhere you reused it, turn on two-factor authentication, and call your bank to block the card if you paid.

## Related

- [Run the full website security check](https://vigilbase.com/tools/website-security)
- [Protect your own site](https://vigilbase.com/shield)
- [Security headers checker](https://vigilbase.com/tools/security-headers)
- [HSTS checker](https://vigilbase.com/tools/hsts-checker)
- [DNSSEC checker](https://vigilbase.com/tools/dnssec-checker)
- [CSP evaluator](https://vigilbase.com/tools/csp-evaluator)
- [Cloudflare checker](https://vigilbase.com/tools/cloudflare-checker)