Is this website legit?
A fake website is almost always built in a hurry — registered days ago, hosted on a cheap reseller, copying a real brand's logo, and pushing one urgent payment path. Paste the URL into GACS and we score it against seven signals at once so you do not have to guess.
Check any website in 5 seconds
Paste a URL and get a clear safe / caution / scam verdict plus the exact signals that fired.
- Domain age and registrar history
- Blacklist and abuse reports
- SSL certificate timeline
- Look-alike brand matches
- Payment-method red flags
- Known scam URL fingerprints
Treat a website as NOT legit if any of these are true: domain registered in the last 90 days, no real company name or address, prices far below market, only crypto / wire / gift-card checkout, fake reviews that all sound the same, a URL that is one character off a real brand, or an SSL certificate issued moments after the domain. Run it through GACS for the verdict and the exact reasons.
Step-by-step check
- 1
Copy the full URL — not just the brand name
Scams hide in the part after the slash. paypa1-secure.com/login and paypal.com/login look identical at a glance. Copy the entire address from the browser bar, then paste it into GACS.
- 2
Run the link through GACS
GACS checks domain age, SSL issuance, blacklist hits, look-alike patterns against real brands, reported abuse, and known scam URL fingerprints — and returns a clear safe / caution / scam verdict with reasons.
- 3
Look for a real business, not just a logo
A legit site lists a company name, a registered address, a working phone or support email on a matching domain, and a returns or refund policy. Missing any of those is a warning; missing all of them is the scam.
- 4
Check the checkout, not the homepage
Fake stores look polished on the front page and break on checkout. Crypto-only, wire-only, gift-card-only, or a redirect to a personal payment app means walk away.
- 5
Verify reviews independently
Search the brand name plus the word scam or reddit. Look for reviews older than the domain itself — if the site was registered last month, five-star reviews from last year are fake.
- 6
If anything is off, do not pay
Close the tab, do not click any unsubscribe link, and report the URL to GACS so the next person who searches it sees a warning.
Red flags
- Domain registered in the last 90 days but claims to be an established brand.
- URL is one character off a real brand (paypa1.com, amaz0n-deals.shop, micros0ft-support.com).
- Checkout only accepts crypto, wire transfer, gift cards, or a money-app to a personal account.
- Prices are 50%+ below every other retailer for the same product.
- No company name, no address, no phone, or a support email on a free mailbox (gmail, outlook, proton).
- Reviews all sound identical, were posted within the same week, or are older than the domain.
- SSL padlock issued the same day the domain was registered — common for throwaway scam sites.
What to do next
- ✓Paste the full URL into the GACS check to get a verdict and the exact reasons.
- ✓Verify the brand independently by typing the real domain you already trust — never click a link from an email or DM.
- ✓Report the URL to GACS so the next person who searches it sees a warning.
FAQ
How does GACS decide if a website is legit?
GACS combines domain age and registrar data, SSL certificate history, multiple public blacklists, look-alike pattern matching against real brands, reported abuse from victims, and known scam URL fingerprints. The verdict shows you which signals fired so you can decide for yourself.
The site has an SSL padlock — does that mean it is legit?
No. Free SSL certificates take five minutes to issue, and scammers get them on day one. The padlock only proves the connection is encrypted, not that the business behind the site is real.
It looks exactly like a real brand. Is that proof?
The opposite. Pixel-perfect clones are the easiest part of a scam — logos, fonts, and product photos are all stolen from the real site. Always check the URL character-by-character, and verify the domain age in GACS.
What if GACS says the site is safe but I am still unsure?
A safe verdict means GACS has no current evidence against it — not that it is risk-free. Pay with a credit card so you have chargeback protection, never with crypto, wire, or gift cards, and verify the company has a real address and phone you can reach.
I already paid on a fake site — what do I do?
Open the GACS panic guide. Call your card issuer or bank within the first hour to start a chargeback, change any password you reused, and report the URL to GACS and to your country's fraud line (IC3 in the US, Action Fraud in the UK, CAFC in Canada).
How can I tell if this website is legit?
Paste the full URL into the GACS check. In about five seconds you will see the domain age, SSL history, blacklist hits, look-alike pattern matches, and reported abuse — the same signals professional fraud analysts use. If two or more fire, treat the site as not legit and do not pay.
How do I check if this site is safe before I buy?
Three steps before checkout: (1) run the URL through GACS for a safety verdict, (2) confirm the checkout accepts credit cards (not only crypto, wire, or gift cards), and (3) search the brand name plus the word reddit or scam in a separate tab. If any step fails, close the site and do not enter card or address details.
How do I check if a website is legit for free?
GACS is free and requires no sign-up. Paste the URL into the check, read the verdict and the reasons it returned, and cross-check the brand on a search engine independently. You will know in under a minute whether the site is worth trusting with your money or personal information.