Three tools you can use right now
Every verdict comes from public rules and word lists, and you can see exactly what matched. They assist your judgement; they do not replace calling the police or verifying through official channels.
Password strength check
Cracking time assumes 10 billion offline guesses per second — the scale of a consumer GPU cluster. Once a password database is stolen, offline is exactly the situation an attacker is in.
Scam script detector
Matched against 0 scam families and 0 characteristic phrases. No hit does not mean safe — new scripts appear all the time.
No scam rules have been configured yet, so nothing can be matched.
URL risk check
What decides which server you end up on is always the registrable domain — not the subdomain in front of it, nor the path after it. The padlock only says the transport is encrypted; it says nothing about who is on the other end.