Check a link or message

Paste what you received. Message analysis runs locally. For URLs, SOS sends only a SHA-256 hash of the destination domain to the Threat Graph.

Check a QR code

Select an image containing a QR code. On compatible browsers the image is decoded locally, then you can check the destination.

What SOS looks for

• Known malicious destination hashes
• IP-address links, punycode and unusual ports
• Insecure payment/login links
• Urgency, credential and payment-pressure patterns
• Suspicious redirection and impersonation signals

A clean result is not a guarantee. If a bank, government service or company contacted you unexpectedly, open its official app/site yourself instead of using the message link.

If you think you were scammed

Stop the payment or contact the provider/bank through an official channel, change compromised credentials, revoke sessions and preserve evidence.