StopScam vs DNS Survey

Something feels wrong about a message, call or photo? Check it with StopScam before you click, reply or pay. Get understandable explanations and practical next steps, all in one app. CHECK WHAT YOU RECEIVED Paste a suspicious text, email or full link. Import photos and screenshots, photograph a letter or select PDF pages. You can also share supported content to StopScam from another app. AI helps explain warning signs such as urgent payment demands or attempts to obtain personal information. Ask follow-up questions in the scam assistant. Manual link checks assess the URL and context you submit; they do not inspect the destination website. CALL GUARD AND SMS GUARD Help identify and block calls from numbers flagged as spam or scams. Enable Call Guard in iPhone Settings; Live Caller ID requires iOS 18 or later and available number data. New or unlisted scam numbers may not be recognized. SMS Guard helps filter eligible messages from unknown senders in Messages after you enable it in Settings. It does not read your inbox or filter every message. KEEP AN EYE ON EMAIL BREACHES Check one or more email addresses against known data breaches, with separate results for each address. Turn on monitoring for the addresses you choose and confirm it is active. Saving an address alone does not activate alerts. A breach record does not prove that your account is currently compromised. MAKE SENSE OF A SUSPECTED SCAM AI Investigator brings messages, links and supported files together in a private case. Review findings, uncertainties and suggested actions, then export a report. It provides guidance, not a promise to identify a person or recover money. LOOK CLOSER AT PHOTOS Photo Authenticity examines available origin information, Content Credentials and signs of editing or AI generation. Optional web matching needs separate consent. A match does not prove the original source, and no check guarantees authenticity. Investigator and Photo Authenticity require active access and have usage and retention limits. CHECK YOUR DEVICE AND PASSWORDS Review supported security settings with Device Check. Check your connection to StopScam; this is not a test of the safety of the whole network. Check passwords against known breaches without sending the actual password, generate passwords on your device and keep entries in the encrypted Password Notebook. YOUR CHOICE, YOUR NEXT STEP Content submitted for AI analysis is processed online with your consent. Choose what to send. Do not submit passwords or verification codes in a scam check. Some features require an active subscription. Prices, renewal terms and any available trial appear before purchase. Manage or cancel your subscription in your App Store account settings. Results are advisory and coverage is incomplete. No app detects every scam; no warning does not mean no risk. When in doubt, verify through a trusted contact method before acting. Terms of Use: https://stopscam.ai/terms Privacy Policy: https://stopscam.ai/privacy

DNS Survey reads a domain's public DNS records and explains, in plain English, how that domain handles email. Type a domain and you get: • A plain-English summary — who hosts the mailboxes, whether sender authorisation (SPF) is published, whether an anti-spoofing policy (DMARC) is in place and how strict it is, and whether outgoing mail is signed (DKIM). • Third-party senders — the outside services allowed to send email as that domain, with the evidence for each. Shared sending platforms are labelled separately, because they prove mail is being sent without revealing which application sends it. • Vendors by category — products the domain shows evidence of using, from mailbox hosting and CRM to payments, security and developer tools, each shown with the record that identified it. • The raw records — SPF, DMARC, MX, NS, CNAME, A, TXT and DKIM, including SPF lookup-limit counting and DMARC policy warnings. Touch and hold to copy any value. Everything comes from public DNS. The app never connects to mail servers, sends email, or asks for credentials. Nothing is stored. No history, no cache, no account — a result exists only while you are looking at it. Detection is best-effort: a match on a verification token means the domain was verified with that service at some point, not that it is in use today.