Our methodology

How we score a website

Here's exactly what happens in the seconds between pasting a link and reading your verdict.

The short version

1

We collect 200+ facts about the site from trusted public sources. Age, security, owner, reputation and more.

2

Each fact becomes a signal: good, neutral or bad. Points are calculated depending on how serious they are.

3

AI weighs it all in context and writes the verdict. A perfect site is near 100; serious problems sink the score fast.

01 · The six areas

What we look at

Every site is scored 0–100 in six areas. Areas that protect your money and identity count the most.

Security

Is the connection encrypted, and is the site clean on malware and phishing scanners?

certificatemalware scansphishing checks

Identity

Who owns the site, how long has it existed, and are they hiding?

domain ageownership recordsregistrar

Reputation

What do blocklists, web history and reviews say about it?

blocklistsweb historyreviews

Transparency

Can you actually find out who runs it and how to reach them?

contact detailsabout pagesocial presence

Compliance

Are the legal basics in place, are they valid, is the company real?

privacy policytermscookie notice

Infrastructure

Is the site built on solid ground — proper hosting, DNS and email setup?

DNS healthhostingemail protection
02 · The signals

How facts become signals

Each fact we collect is classified into one of four kinds. Only warnings and bad signals cost points.

Good

Things working in the site's favour. They don't add points; trust is the default.

e.g. valid certificate, 14-year history

Neutral

Useful context that doesn't change the score either way.

e.g. popularity rank, review count

Warning

Worth knowing about, but common on otherwise honest sites.

e.g. missing email protection

Bad

Red flags strongly linked to scams and fraud. These cost real points.

e.g. on a scam blocklist, copycat name
03 · The maths

How points are taken off

Every site starts at 100. Problems subtract points based on severity. One severe finding is enough to sink a score on its own.

Cosmetic

Tidiness issues with no real risk: a missing favicon, no social links.

−1 to −3
Minor

Sloppy but survivable: weak security headers, no cookie notice.

−4 to −9
Major

Genuine trust problems: hidden ownership on a store, very young domain, no contact details.

−10 to −24
Severe

Strong scam indicators: blocklist hits, malware detections, brand impersonation.

−25 to −60
04 · The context

Why AI does the weighing

The same fact can be harmless on one site and alarming on another. Our model reads each signal in the context of what the site actually is.

A personal blog
Missing privacy policy

Not great, but a hobby blog isn't asking for your card number. Treated as a cosmetic issue, a few points at most.

An online checkout
Missing privacy policy

A store taking payments with no privacy policy is a serious problem. The same fact is now a major deduction.

The AI never invents facts. It only weighs the signals our checks actually found, and every report shows you those signals so you can see the working for yourself.

05 · The scale

Reading the final score

0–19
Dangerous
Strong scam signs. Stay away.
20–39
Suspicious
Multiple red flags. Avoid sharing anything.
40–59
Use caution
Mixed picture. Double-check before you commit.
60–79
Mostly safe
Minor issues, nothing alarming.
80–100
Trusted
Established and clean across our checks.
06 · The sources

Where the facts come from

We don't guess. Every signal is collected live from authoritative public sources at the moment you check. We don't publish the full list, to make the system harder to game.

Google Web Risk

Malware & phishing flags

VirusTotal

90+ antivirus engines

WHOIS records

Domain age & ownership

Certificate logs

TLS validity & issuance

DNS blocklists

Spam & scam listings

Trustpilot & reviews

What customers say

Tranco ranking

Global popularity

Internet Archive

Site history over time

The site itself

Pages, policies & contact info
07 · Fair play

Keeping it honest

Scores aren't forever

Anyone can re-scan a site at any time. Fix the problems, and the score recovers automatically.

Same rules for everyone

Nobody can pay for a better score. Badges show the live score, whatever it is.

A guide, not a guarantee

We can measure signals, but not intentions. A high score means low risk. It's not a promise, and it isn't legal or financial advice.

See it in action

The best way to understand the score is to read a real report.