Malware & phishing
Live lookups against Google Safe Browsing for known malware, phishing and unwanted-software listings — a confirmed threat caps the score.
Home / Features
Every check, explained in plain language.
UrlTestly inspects the signals that actually predict whether a website can be trusted — then tells you what each one found.
SSL / TLS
Certificate validity, issuer and expiry, and whether insecure HTTP traffic is properly redirected to HTTPS.
Domain reputation
Age, registrar, status, expiry and abuse contact from WHOIS/RDAP, weighted so young domains earn caution and mature ones earn trust.
DNS & DNSSEC
Nameservers and whether DNS responses are cryptographically signed with DNSSEC.
Hosting & location
The resolved IP and the hosting country, so you can see where a site is actually served from.
Content safety
Scraped page text is screened for harmful content categories using OpenAI's moderation, at no token cost.
Essential pages & metadata
Whether the site has contact, about, privacy and terms pages, plus a proper title and meta description.
Social presence
Links to real social profiles are a positive signal; their complete absence is worth noting.
Technology detection
CMS, web server, CDN, analytics and security features fingerprinted from the site's HTML, headers and assets.
Link reputation
Domain authority from the site's backlink profile via the public Ahrefs Domain Rating.
AI summary
A plain-language "What is this site?" explanation, generated from the homepage and the model's own knowledge.
Community discussion
A moderated discussion on every report where people can share experience or flag a concern about a domain.
Fair by design
Signals are weighted honestly.
A missing nicety shouldn't make a legitimate business look dangerous — but a confirmed threat should always win. The score reflects that.
−25Score impact of a confirmed malware or phishing listing
+12Reward for a well-established domain (10+ years old)
+8Reward for a valid SSL certificate on HTTPS