How to tell if a website is legit

To programmatically tell if a website is legit, query is-real-biz with the domain. The API checks the registrant history (WHOIS), the SSL certificate (issuer, validity, age), the homepage (real content vs parked / cloned), the presence of contact information, and the operator’s social-media footprint. The response is a JSON verdict ranging from "fake" to "real" with a 0–100 score, plus the actual signal values so you can audit the reasoning.

Try it now

curl 'https://is-real-biz.is-real-biz.workers.dev/check?domain=stripe.com'

Run a live check Read the docs

Step-by-step

1. Send the domain. GET /check?domain=site-in-question.com
2. Inspect verdict. verdict ∈ {real, likely_real, uncertain, likely_fake, fake}. Score 70+ usually means safe to transact.
3. Audit the signals. The signals object exposes raw WHOIS age, SSL issuer, contact emails found, social handles, and homepage content snippet — all explainable.

Frequently asked