Loading...
Loading...
We analyze 9+ trust signals to provide comprehensive website legitimacy verification.
You enter any website URL. Our system immediately begins running every trust check in parallel.
All checks happen simultaneously, delivering results in seconds — no account required.
Receive a detailed trust score with positive highlights, areas for improvement, and actionable insights.
We check when the domain was first registered. Older domains (2+ years) generally indicate more established businesses.
Why it matters
New domains (<1 year) can be a red flag for potential scams.
Verifies if the website uses HTTPS encryption. Valid SSL certificates protect user data and show technical competence.
Why it matters
Missing or invalid SSL certificates pose security risks.
Analyzes HTTP security headers like HSTS, CSP, and X-Frame-Options that protect against common web vulnerabilities.
Why it matters
Proper security headers prevent attacks like clickjacking and XSS.
Scans the page for links to major social platforms (Facebook, Instagram, X, LinkedIn, YouTube, TikTok).
Why it matters
Legitimate businesses typically maintain some social presence.
Detects whether the site links to a Google reviews or Maps profile.
Why it matters
A reviews profile points to a real, findable business.
Measures website popularity using the Tranco list of top domains.
Why it matters
Popular websites are less likely to be scams.
Checks for proper title tags, meta descriptions, contact pages, and mobile responsiveness.
Why it matters
Professional websites invest in proper technical implementation.
Verifies proper SEO configuration through robots.txt and sitemap.xml files.
Why it matters
Shows attention to technical SEO and website maintenance.
Cross-checks the URL against Google Safe Browsing — Google's continuously updated list of malware and phishing sites.
Why it matters
A confirmed blocklist hit is a strong signal to avoid the site entirely.
Our algorithm considers context:
We analyze 9+ objective trust signals that legitimate businesses typically have, plus a Google Safe Browsing blocklist check. While no automated tool is 100% perfect, our comprehensive approach provides reliable guidance. We recommend using our analysis as part of broader due diligence.
We don't require accounts and never store your searches or personal data. To speed up repeat lookups, we do keep a short-lived, in-memory cache of public domain-registration data for up to 7 days — nothing personal, and never anything about you.
We scan the page's HTML for links to major social platforms. Not every legitimate business uses social media, but visible, linked profiles add transparency.