# Reputation Links

URL: https://phishdestroy.io/developer-tools/reputation-links
Category: Phishing URL & domain
Where it runs: Runs locally (nothing you enter is uploaded)

Look a suspicious domain, URL or IP up in five places at once: urlscan.io scans, VirusTotal verdicts, Google Safe Browsing, crt.sh certificate history and the PhishDestroy domain report.

## Example input

A subdomain under a country-code domain

```
login.example.co.uk
```

Builds the five links; crt.sh searches %.example.co.uk, the registered domain from the Public Suffix List, so every certificate for its subdomains shows up, and the PhishDestroy report link uses example.co.uk too.

## FAQ

### Does this page query those services?

No. It only builds links, and nothing is sent until you open one; then that service sees the name. This keeps a suspicious domain out of third-party logs until you decide to look it up.

### What does each service tell me?

urlscan.io shows earlier scans with screenshots and redirects, VirusTotal shows antivirus and blocklist verdicts, Safe Browsing shows whether browsers warn, crt.sh lists TLS certificates (when the site was set up) and the PhishDestroy report shows our evidence.

### Why does crt.sh search the parent domain?

Phishing kits often live on many subdomains of one registered domain. Searching %.registered-domain, worked out with the Public Suffix List, lists every certificate issued for them, not only the one name you entered.

## Related tools

- [DestroyList Check](https://phishdestroy.io/developer-tools/destroylist-check)
- [Link Unwrapper](https://phishdestroy.io/developer-tools/link-unwrapper)
- [Abuse Contact Lookup](https://phishdestroy.io/developer-tools/abuse-contact-lookup)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Archive Link Builder](https://phishdestroy.io/developer-tools/archive-link-builder)
- [Lookalike Domain Generator](https://phishdestroy.io/developer-tools/lookalike-generator)

All tools: https://phishdestroy.io/developer-tools