The questions people actually ask

It is an opinion formed by software from technical signals, out of 100. Above 80 means nothing examined looked wrong; below 40 means enough went wrong to be careful. It is not a certification, and it cannot tell you whether an order will arrive. The methodology sets out what goes into it.

Usually one of three reasons: the domain is young, the owner is not identifiable in the WHOIS record, or it shares an address with sites that have behaved badly. All three are common for legitimate small businesses. Open the findings — they say which one it is.

Because the checks are technical. A fraudster who buys an aged domain, a valid certificate and clean hosting will pass them. That is the honest limit of this approach, and it is why the findings are shown rather than just the number.

Every report shows when it was last analysed. Press Re-run analysis and it is checked again in a few seconds. A great many complaints are simply a stale record.

Search for it. If nothing matches and what you typed is a domain, you are taken straight to its report page and the scan starts on arrival — no button to find.

A DNS lookup, a WHOIS query, one TLS handshake and a single fetch of the home page. It is a fraction of what one ordinary visitor costs.

Scans are limited per visitor and per domain, because each one makes this server send requests to somebody else's site. Reading existing reports is not limited. Wait a few minutes and the limit clears.

No. The scanner refuses loopback, link-local and private ranges outright, which stops it being used to probe networks it cannot otherwise see.

Re-run the analysis first — it resolves a good share of cases on its own. If it is still wrong, write to [email protected] naming the domain and the specific signal you believe is wrong. Corrections are free and prompt.

No, and not because of stubbornness. A report is a factual record of public technical signals. What will happen is correction of anything inaccurate and a fresh analysis so the record reflects the site as it stands today.

No. There is no mechanism through which that could happen, and a trust score that could be bought would not be worth publishing.

No analytics, no advertising, no tracking cookies. Two strictly necessary cookies and nothing else — the cookie policy lists them by name.

The domain, the outcome, and the IP address that asked — for 90 days. It is kept because without it the scanner is an open relay for generating traffic against other people. The privacy policy is short.

Write to [email protected] and say so. It is assessed on its facts rather than refused on principle.