← All articles

How to check a site's reputation and not fall for traffic arbitrage

A practical checklist - how the address, domain age, redirects and reviews reveal a bait site before you type in your data.

Published: 3 min read
A laptop with a magnifier over a website - reputation check, an HTTPS padlock, review stars and a danger warning

Traffic arbitrage is a scheme that lures you to a site with ads, “fake news”, “surveys”, “giveaways”, “security checks”, or the promise of a prize or compensation. The page owner is paid for every click, sign-up, filled form or installed app you make. Here is a checklist for spotting such bait before you have given anything away.

1. Look at the address

The domain must match the brand. Compare:

google.com                  - fine
support-google-help.net     - suspicious
google-prize-center.com     - almost certainly a scam

Especially dangerous are long domains, domains with digits, and random strings of letters: claim-bonus-now.com, verify-account-2026.net, survey-reward.xyz.

2. Check the domain’s age

A freshly registered domain is one of the main risk signals. Check via WHOIS, ICANN Lookup or DomainTools. If the domain was registered yesterday, a week or a month ago, yet the site claims to be a “big company” - that is a red flag.

3. Check reputation through services

  • VirusTotal, URLVoid - a check against dozens of antivirus databases;
  • Sucuri SiteCheck - malicious code and blocklists;
  • AbuseIPDB - a history of complaints against the IP.

Look at antivirus detections, complaints, malicious code and suspicious redirects.

4. Watch the redirect chain

A typical scheme looks like this:

ad → intermediate site → another site → survey → form → affiliate program

Signs: the address in the browser keeps changing, several redirects appear, you land on unexpected domains. If you do not understand why you are on this site - close the page.

5. Never enter data into “surveys”

Especially if they ask for your name, phone, email, address, card or passport details. Typical pretexts: “You won an iPhone”, “You are our 100,000th visitor”, “Claim your compensation”, “Take a short survey and get a gift”.

A serious site usually has a privacy policy, terms of use, company details, contacts and support. If none of that is there - the risk is high.

7. Look for real reviews

A quick web search reveals reputation fast:

site:reddit.com example.com
example.com scam
example.com review
example.com complaints

If reviews are all alike, over-enthusiastic, or hosted on unknown sites - they may be fabricated.

8. Do not agree to everything

Never accept straight away: notifications, extension installs, APK downloads, camera or microphone access. Many arbitrage operators earn precisely from installs and subscriptions.

bit.ly, tinyurl, cutt.ly hide the final address. Before following one, expand it with a link-checking service.

10. The signs add up

If a page has several of these at once, the probability of a scheme is very high:

  • aggressive ads and pop-ups;
  • a countdown timer, “only 3 spots left”;
  • a multi-question survey;
  • a promise of money or gifts;
  • a mandatory phone/email field;
  • numerous redirects.

What it risks

Level Consequences
Low email harvesting for spam, marketing mailouts
Medium selling data to brokers, aggressive telemarketing, paid subscriptions
High phishing, account theft, device infection, financial fraud

The golden rule of OSINT: if a site offers money, a gift or a prize before it explains who it is and why you received it - almost certainly the one earning is the site owner, not you.