Frequently Asked Questions
Everything you need to know about ScamSandbox and how our website safety scanner works.
ScamSandbox is a free online tool that analyzes websites, domains, and IP addresses for potential security threats. We aggregate data from over 20 trusted threat intelligence sources — including VirusTotal, Google Safe Browsing, WHOIS, DNS records, SSL analysis, and more — to generate a comprehensive safety report with a risk score and verdict for any website.
When you submit a URL or domain, ScamSandbox simultaneously queries over 20 data sources in real time. These include virus scanners (VirusTotal), phishing databases (PhishTank, Google Safe Browsing), IP reputation services (AbuseIPDB), domain registration records (WHOIS/RDAP), SSL certificate analysis, DNS records, content analysis, and community reports. All results are aggregated into a single risk score and verdict.
Yes, ScamSandbox is completely free to use. You can scan any URL, domain, or IP address at no cost. There are no hidden fees, no premium tiers required for basic scans, and no account registration needed. We believe that access to security information should be available to everyone.
ScamSandbox uses over 20 data sources including: VirusTotal (70+ antivirus engines), Google Safe Browsing, WHOIS/RDAP domain registration, DNS record analysis, SSL certificate validation, Trustpilot reviews, URLScan.io live analysis, PhishTank phishing database, AbuseIPDB IP reputation, Shodan infrastructure scanning, URLhaus malware tracking, Web Archive historical data, DNSBL blacklists, content analysis, redirect chain analysis, technology stack detection, HTTP security headers, IP geolocation, community intelligence reports, and PageRank/SEO signals.
The risk score (0-100) is calculated by our proprietary algorithm that weighs signals from all data sources. Factors include: number of blacklist detections, domain age (newer domains score higher risk), SSL certificate quality, DNS configuration, IP reputation, content analysis flags, community reports, and trust scores from external platforms. Each factor contributes a weighted amount to the final score, with blacklist detections and confirmed phishing/malware carrying the most weight.
Safe (risk score 0-25): No significant threats detected. The domain has a good reputation across all sources.
Caution (risk score 26-50): Some minor flags were found, such as a relatively new domain or missing security headers. Exercise normal caution.
Suspicious (risk score 51-75): Multiple warning signs detected. The domain may be involved in questionable activity. Proceed with extreme caution.
Dangerous (risk score 76-100): Strong indicators of scam, phishing, malware, or fraud. The domain appears on multiple blacklists or shows clear signs of malicious intent. Avoid this site.
ScamSandbox results are generated from trusted, industry-standard threat intelligence sources and should be considered a strong signal. However, results are informational and not guaranteed. False positives (safe sites flagged as risky) and false negatives (dangerous sites not detected) can occur. We recommend using ScamSandbox as one of multiple tools when evaluating website safety, and always exercising your own judgment.
Each scan queries data sources in real time, so you always get the latest available information. If you scan the same domain again, a new scan will be initiated after 5 minutes from the previous scan. Scan results are stored in our database, so you can also view historical results for previously scanned domains.
There are two ways to report a scam:
1. On the report page: Scan the domain on ScamSandbox and use the "Report this domain" form on the report page. You can describe the scam type, what happened, and optionally how much money was lost.
2. Contact form: Use our Contact page and select "Report a Scam" as the subject.
Your report helps protect other users and contributes to our Community Intelligence database.
If your domain has been incorrectly flagged, you can:
1. Submit a removal request directly from the domain's report page on ScamSandbox.
2. Email us at contact@scamsandbox.com.
Please include: the domain in question, proof of ownership (such as the ability to modify DNS records), and a description of any steps you have taken to resolve identified issues. We review all removal requests within 48 hours.
Note that a new scan after removal will generate fresh results based on current data from all sources.
We store minimal data. Scan queries (the URLs/domains you submit) are stored as part of our scan history database. Your IP address is logged for rate limiting and abuse prevention and is retained in server logs for up to 90 days. If you submit a community report or contact form, the information you provide is stored as described in our Privacy Policy. We do not require account registration and do not use advertising cookies or third-party trackers.
Community Intelligence is ScamSandbox's crowdsourced reporting system. Users can submit reports about websites they believe are scams, phishing, or fraudulent. These reports are displayed on domain report pages and factor into the overall risk assessment. Community reports include the type of scam, a description, and optionally the amount of money lost. This helps create a real-world picture of threats that automated scanning alone might miss.
ScamSandbox integrates trust scores from external platforms like Trustpilot to provide additional context. When available, we display the Trustpilot rating and review count for a domain. These external trust scores are factored into our overall risk assessment alongside technical security data. A domain with a high Trustpilot score and many reviews may receive a lower risk score, while a domain with no external reputation data may be weighted more cautiously.
Yes, the ScamSandbox API is currently free to use with rate limits in place to prevent abuse. You can programmatically scan domains, retrieve results, view scan history, and submit reports. Full API documentation is available at scamsandbox.com/api-docs/. Rate limits may be adjusted over time, and we reserve the right to require API keys for high-volume usage in the future.
You can reach us via email at contact@scamsandbox.com, or by using the contact form at scamsandbox.com/contact/. We typically respond within 48 hours. For scam reports and removal requests, you can also use the dedicated forms on domain report pages.
ScamSandbox est un outil en ligne gratuit qui analyse les sites web, domaines et adresses IP pour détecter les menaces de sécurité potentielles. Nous agrégeons les données de plus de 20 sources de renseignement fiables — dont VirusTotal, Google Safe Browsing, WHOIS, DNS, SSL et plus encore — pour générer un rapport de sécurité complet avec un score de risque et un verdict.
Lorsque vous soumettez une URL ou un domaine, ScamSandbox interroge simultanément plus de 20 sources de données en temps réel : scanners antivirus, bases de données d'hameçonnage, services de réputation IP, registres de domaines, analyse SSL, analyse de contenu et signalements communautaires. Tous les résultats sont agrégés en un score de risque unique et un verdict.
Oui, ScamSandbox est entièrement gratuit. Vous pouvez analyser n'importe quelle URL, domaine ou adresse IP sans frais. Il n'y a pas de frais cachés, pas de niveaux premium requis et aucune inscription nécessaire.
Le score de risque (0-100) est calculé par notre algorithme propriétaire qui pondère les signaux de toutes les sources de données. Les facteurs incluent : le nombre de détections sur les listes noires, l'âge du domaine, la qualité du certificat SSL, la configuration DNS, la réputation IP, l'analyse de contenu et les signalements communautaires.
Sûr (score 0-25) : Aucune menace significative détectée.
Prudence (score 26-50) : Quelques signaux mineurs trouv��s. Faites preuve de prudence normale.
Suspect (score 51-75) : Plusieurs signes d'alerte détectés. Procédez avec extrême prudence.
Dangereux (score 76-100) : Indicateurs forts d'arnaque, d'hameçonnage ou de fraude. Évitez ce site.
Les résultats de ScamSandbox sont générés à partir de sources de renseignement fiables et constituent un signal fort. Cependant, les résultats sont informatifs et non garantis. Des faux positifs et faux négatifs peuvent survenir. Nous recommandons d'utiliser ScamSandbox comme l'un de plusieurs outils d'évaluation.
Il existe deux façons de signaler une arnaque :
1. Sur la page du rapport : Analysez le domaine et utilisez le formulaire « Signaler ce site ».
2. Formulaire de contact : Utilisez notre page de contact.
Si votre domaine a été incorrectement signalé, soumettez une demande de retrait directement depuis la page du rapport ou contactez-nous à contact@scamsandbox.com. Nous examinons toutes les demandes sous 48 heures.
Nous stockons un minimum de données. Les requêtes d'analyse sont conservées dans notre base de données. Votre adresse IP est enregistrée pour la limitation de débit pendant 90 jours maximum. Nous n'utilisons pas de cookies publicitaires ni de traceurs tiers. Consultez notre politique de confidentialité pour plus de détails.
Oui, l'API ScamSandbox est actuellement gratuite avec des limites de débit. Documentation complète sur scamsandbox.com/api-docs/.
Par email à contact@scamsandbox.com, ou via le formulaire de contact à scamsandbox.com/contact/. Nous répondons généralement sous 48 heures.
Still have questions?
Contact Us