Skip to content

THE SECONDLOOKBEFORE YOU
TRUST IT,
CHECK IT.

Upload a screenshot or paste a link. The SecondLook is a free scam-detection tool for suspicious messages and links. We examine the evidence and explain what we find, in plain language.

Drop a screenshot here, or

PNG, JPG or WebP · up to 8 MB · you can also paste with Ctrl/Cmd + V

Links are never opened in your browser. Screenshots are deleted as soon as the text is extracted.

FREE · NO ACCOUNT · SCREENSHOTS DELETED AFTER ANALYSIS

PROCESS

THREE STEPS.
NO GUESSWORK.

From your screenshot to a clear answer, every step is grounded in evidence you can read, check and share.

// 01 //

Submit

Upload a screenshot of the message, or paste the link exactly as you got it.

// 02 //

Analyze

We read the text, check the link's public records and run every available check.

// 03 //

Understand

You get a score, the evidence behind it, and clear next steps.

OUR CHECKS

  • URL INTELLIGENCE

    Threat feeds, lookalike brands, shorteners and redirects — followed safely on our server, never in your browser.

  • DOMAIN INTELLIGENCE

    Registration age, DNS records and certificate history from public sources.

  • MESSAGE ANALYSIS

    Urgency, requests for codes or payment, impersonation and other classic scam patterns.

  • SCREENSHOT ANALYSIS

    Text extraction, then every link, number, email and payment detail it contains.

SCORING

HOW THE SCORE
IS CALCULATED.

Each finding carries fixed points. Points are capped per category, AI-detected wording can never add more than 40, and a confirmed threat-feed hit sets a floor of 85. The same evidence always produces the same score.

Link 45
Domain 25
Message 40
Screenshot 15
Read the full methodology →

YOUR REPORT

WHAT YOU CAN DO WITH RESULTS.

// 01 //

Copy summary

A plain-text summary to share with family or your bank.

// 02 //

Export report

A clean, printable black-and-white PDF.

// 03 //

View extracted text

See exactly what we read from your screenshot.

// 04 //

Technical details

Redirects, DNS, registration data and every signal's weight.

PRINCIPLES

WHY YOU CAN TRUST IT.

We show our evidence

Every point in the score traces back to a finding you can read.

We say when a check is unavailable

If a source is down or not configured, the report says so — we never fill the gap.

We never promise safety

“Low risk” means no major threats were found in the checks that ran. Not a guarantee.

We delete screenshots after analysis

Your image is removed as soon as the text has been extracted.

FAQ

QUESTIONS.