Online website scanner

The trust score is a rating from 0 to 100 generated automatically from the scan signals we collect. It is our own aggregated assessment - it is not provided by, nor attributable to, any individual security vendor.

We group the result into four tiers:

• 70-100 - No Threats Found. No obvious threat indicators in the available scan data.
• 40-69 - Moderate Risk. Some signals warrant caution.
• 20-39 - Potentially Suspicious. Multiple indicators suggest potential risk.
• 0-19 - Potentially Dangerous. Strong indicators of likely harmful activity.

Results reflect findings at the time of the scan and may change. A trust score is not a guarantee, and a high score does not certify that a website is completely safe.

When you submit a URL, we check it against more than 90 antivirus and URL-reputation engines, plus 10 independent threat databases, inspect the site's files and resources, verify its SSL/TLS certificate, look up domain registration and hosting information, capture a screenshot in an isolated browser, and produce an AI-generated summary of the findings.

All of these signals are combined into a single trust score so you can understand the result at a glance. A detailed report is then shown, including the Blacklist Status, File Scan Summary, External Links & Domains, HTTP Redirect Chain, and Website Insights sections.

Most scans complete in under a minute. Some scans - especially for large or slow-responding websites - can take up to five minutes.

Please keep the scanner tab open while a scan is in progress. The progress indicator will show the current step, and you will be redirected to the report automatically as soon as it is ready.

We check every URL against more than 90 antivirus and URL-reputation engines, plus 10 threat databases including major blacklist providers, phishing databases, malware URL feeds, and DNS-based blocklists. The exact number is shown at the top of the Blacklist Status section on each report.

To comply with the terms of our data providers, we do not publish individual vendor names on the results pages. The list of sources we query is updated from time to time as new feeds are added or removed.

You do not need to register or provide an email address to use the scanner, and we do not associate scans with any user identity.

We do store the scanned URL and the resulting report so that frequently requested domains can be served quickly and so that we can improve the accuracy of the scanner over time. These reports are public: anyone who enters the same URL will see the same report until a new scan is performed, and they may appear in search engine results.

If you are concerned about a specific URL being publicly viewable, please do not submit it to the scanner.

Each report shows the date and time of the most recent scan. If that information is out of date, you can rescan the website from the report page to generate a fresh result.

Because website content, hosting, and reputation can change quickly, results should be treated as a point-in-time snapshot. A site that was clean when last scanned may have changed since, and a flagged site may have been cleaned up.

We take accuracy seriously and every dispute is reviewed manually. If you believe a report is inaccurate, open the report for your domain and click “Dispute This Score” near the bottom of the page. Fill in the form with the domain, reason, and any relevant context.

We may ask you to verify ownership of the domain (for example, by adding a DNS TXT record or replying from the address on the WHOIS record) before the dispute can be processed. Our team typically responds within 1-2 business days.

False positives are possible. A legitimate website can be marked as moderate risk for reasons such as a recently registered domain, missing WHOIS data, a heuristic flag from one of our sources, unusual redirects, or unavailable infrastructure information at the time of the scan. One or two engines reporting a hit is often a false positive rather than confirmation of a real threat.

If you believe the result is wrong, please use the Dispute This Score form on the report page so our team can review the case.

No. This tool only scans publicly accessible URLs. You cannot upload files for analysis. The scanner fetches the page at the URL you provide, analyses its files and linked resources remotely, and generates a report based on what it finds on the live site.

The Website Insights section gives you extra context about a website that is not strictly about malware or phishing:

• Popularity - the website's current Tranco rank, an estimated traffic range, its category, and a chart of its rank history over the last 30 days.
• Cookies - how many cookies the website sets, how many are first-party versus third-party (trackers), and a breakdown by purpose (essential, analytics, advertising, social).

These signals help you judge whether a site is well-established and how much it tracks visitors, independent of its security score.

The web scanner is free to use for personal and non-commercial website safety checks. There is no registration, no paywall, and no rate limit for normal individual use.

Monitoring your own sites programmatically is available through the Trust Badge REST API (read access on the Pro plan, full domain management on Business). There is deliberately no API for scanning arbitrary third-party websites. For anything else, contact us.

The scanner is a useful reference point but should not be your only line of defense. No automated scanner - including ours - can guarantee a 100% detection rate, and both false positives and false negatives are possible. A clean report does not mean a website is completely safe, and a flagged report does not necessarily confirm malicious intent.

We recommend combining scanner results with basic judgment: check the domain spelling, look for an established reputation, be cautious with sites requesting login credentials or payments, and keep your browser and antivirus software up to date. This report is provided for informational purposes only and does not constitute a security audit or certification.