Request a Demo Contact
Menu

Check it before you trust it.

Thirteen security tools we use ourselves, opened to everyone. Paste a link, drop a file, scan a QR code or type an IP, and get a plain answer in seconds.

Popular: a linka UPI requestan attachmentmy email
  • Private by designFiles and passwords never leave your browser.
  • Open dataabuse.ch, Spamhaus, Tor, RDAP, Have I Been Pwned.
  • Built in BengaluruBy the Arventiq Labs security team. MIT licensed.

Before you click or pay

For everyone. Most fraud starts with a link, a QR code or an attachment.

Most used

Is this link safe?

Link checker

Phishing pages, lookalike domains, hidden redirects.

Open tool

Where does this QR go?

QR code checker

Fake payment stickers and poster codes, decoded on your phone.

Open tool India

Is this UPI request safe?

UPI link checker

Collect requests, "pay ₹1 for refund" baits, fake bank names.

Open tool

Is this file safe to open?

Attachment checker

Disguised programs, macros, scripted PDFs. Never uploaded.

Open tool

Who really sent this email?

Email header analyser

Spoofed senders, Reply-To tricks, SPF/DKIM/DMARC.

Open tool

Your accounts and privacy

Passwords, breaches and what your connection reveals.

Has my email leaked?

Breach exposure

Which breaches had your address, and what to change first.

Open tool

How strong is my password?

Password checker

Strength, leaked-password check and a passphrase generator.

Open tool

What does my connection reveal?

What the internet sees

Your IP, network, location and a VPN leak test.

Open tool

For IT teams, institutions and analysts

The checks we run during engagements, made self-service.

For IT

Can our domain be spoofed?

Domain security check

SPF, DKIM, DMARC, DNSSEC, HTTPS headers, certificates.

Open tool

Who is behind this IP?

IP address checker

Owner, reverse DNS, botnet, spam and Tor lists.

Open tool

Is this download genuine?

Download verifier

SHA-256, SHA-1, MD5 against the published checksum.

Open tool

Decode or extract indicators

Decoder & IOC extractor

Base64, URL, hex, defang; pull URLs, IPs, hashes from text.

Open tool

How secure is our institution?

Self-assessment

Twenty questions, five domains, an emailed report.

Open tool

How secure is your institution's domain?

Enter a domain and get an A–F grade in seconds, based on email spoofing protection, HTTPS and security headers.

Indicative score from public DNS and web-header checks. It is not a penetration test or a certification.

How the tools work

What happens when you press Check

Most of the work happens on your own device. Only what has to be looked up on the internet reaches our server, and nothing you check is stored.

Seen a scam? Report it.

A fake refund request, a phishing link, a threatening call, a server hammering yours. Tell us the UPI ID, number, link, IP or email behind it. Reviewed by our team; the next person who checks it here sees a warning.

Report a scam →

Why we built these

Every week someone in our network — a student, a parent, an administrator at a college we work with — forwards us a message and asks “is this real?”. Usually it takes two minutes and the same handful of checks. These pages are those checks, written down and automated, so you can run them yourself at 11 pm without waiting for a reply.

They are deliberately simple. A tool tells you what it found and why it matters; it will not pretend to certainty it does not have. When a check says “no red flags”, read it as “nothing we test for”, not “safe”.

How they work

  • Nothing you upload is stored. Attachments and passwords are processed on your device. For breach checks we send five characters of a hash, not the password.
  • We fetch links from our server, never from your browser, so a malicious site does not see you.
  • Threat data is open and credited on every result.
  • Rate limits apply (40 checks per network per 10 minutes) so the tools stay available to everyone.
  • Open source on GitHub, MIT licence. Fixes and ideas welcome.

Changes

3 Oct 2026
Community reports: anyone can report a scam UPI ID, phone number, link, IP or email; confirmed reports show as warnings in the UPI, link and IP checkers. The UPI checker now shows the registered account name, the same lookup your payment app does.
2 Oct 2026
Added QR, UPI, breach exposure, domain check, download verifier, decoder and “what the internet sees”. Passphrase generator on the password page. Tools moved to the main menu.
1 Oct 2026
First release: link, attachment, IP, password and email-header checkers.

Known limits: the breach-exposure search needs an API key we are still arranging; VirusTotal and AbuseIPDB rows show “Not enabled” until keys are added; the QR decoder needs a reasonably sharp photo.

Built and maintained by the Arventiq Labs team in Bengaluru. Free for anyone, source on GitHub (MIT). Results are indications, not verdicts. Something wrong? Tell us.

See how Arventiq Labs can support your institution.

Tell us what you are trying to improve. We will recommend the right product, service or implementation path.

Request a Demo Contact us