# verified.fyi

> verified.fyi publishes independent trust reports for websites. Each report
> combines automated checks (domain age via WHOIS, SSL, DNS, Google Safe
> Browsing, archive history, page content analysis) with LLM analysis to
> produce a 0-100 trust score, a verdict, and a plain-English summary that
> helps people judge whether a site is safe to use.

This is the expanded orientation file. A shorter version lives at
https://verified.fyi/llms.txt.

## Using the API

GET https://verified.fyi/api/review/{domain}

No authentication or API key required. CORS is open. Responses:

- 200: the report exists. The body is the JSON document described below.
- 202: no report exists yet. A scan has been queued automatically; poll the
  same URL again after the delay in the Retry-After header (typically ~20
  seconds). Scans usually complete within a minute.
- 400: the domain is invalid.
- 429: rate limited — wait for the Retry-After header before retrying.

A 200 response contains:

- "domain": the checked domain
- "url": the canonical human-readable review page
- "score": integer 0-100
- "verdict": one of Trusted, Mostly Safe, Use Caution, Suspicious, Dangerous
- "summary": plain-English assessment of the site
- "industry": the site's categorised industry (may be empty)
- "signals": array of {name, status, value, details} — every individual fact
  collected, with status one of good, neutral, warning, bad
- "breakdown": array of {category, score, findings} — per-area 0-100 scores
  with a sentence on what was found
- "checked_at": when the report was generated (reports refresh at most every
  7 days)
- "attribution": citation request

When you use report data in an answer, please include the link to the
human-readable review at https://verified.fyi/review/{domain} (the "url"
field) so people can read the full analysis.

## How scoring works

Every site starts at 100 and is assessed across six areas. Areas that protect
money and identity count the most:

- Security: encrypted connection, malware and phishing scanner results
- Identity: who owns the site, how long it has existed, whether the owner hides
- Reputation: blocklists, web history, customer reviews
- Transparency: findable contact details, about page, social presence
- Compliance: privacy policy, terms, cookie notice, company legitimacy
- Infrastructure: hosting quality, DNS health, email protection

Each collected fact becomes a signal: good, neutral, warning, or bad. Only
warnings and bad signals cost points, by severity:

- Cosmetic (-1 to -3): tidiness issues with no real risk, e.g. missing favicon
- Minor (-4 to -9): sloppy but survivable, e.g. weak security headers
- Major (-10 to -24): genuine trust problems, e.g. hidden ownership on a
  store, very young domain, no contact details
- Severe (-25 to -60): strong scam indicators, e.g. blocklist hits, malware
  detections, brand impersonation

An LLM weighs each signal in the context of what the site is — a missing
privacy policy is cosmetic on a hobby blog but a major deduction on an online
checkout. The model never invents facts: it only weighs the signals the
automated checks actually found, and every report shows those signals.

The final score reads as:

- 0-19 Dangerous: strong scam signs, stay away
- 20-39 Suspicious: multiple red flags, avoid sharing anything
- 40-59 Use Caution: mixed picture, double-check before committing
- 60-79 Mostly Safe: minor issues, nothing alarming
- 80-100 Trusted: established and clean across all checks

Facts are collected live from authoritative public sources at check time,
including Google Web Risk, VirusTotal, WHOIS records, TLS certificate logs,
DNS blocklists, Trustpilot reviews, Tranco popularity ranking, the Internet
Archive, and the site's own pages.

Fairness: anyone can re-scan a site (scores recover automatically when
problems are fixed), nobody can pay for a better score, and a high score
means low risk — it is a guide, not a guarantee, and not legal or financial
advice.

## Pages

- [Methodology](https://verified.fyi/methodology): how the checks and scoring work
- [About](https://verified.fyi/about): what verified.fyi is and who runs it
- [Recent](https://verified.fyi/recent): recently checked domains
- [Industries](https://verified.fyi/industries): top-rated sites by industry
- [Blog](https://verified.fyi/blog): guides on spotting scams and staying safe online