Safety & Threats
Comprehensive malware detection, phishing analysis, and threat assessment. Click any check below to learn exactly how it works.
Malware/Phishing Indicators
Detects known malware, phishing attempts, typosquatting, and suspicious URL patterns using Google Safe Browsing API and heuristic analysis.
Critical SeveritySSL Certificate Status
Verifies that the website uses HTTPS encryption to protect data in transit between the user and the server.
Critical SeverityForm Security
Checks if HTML forms are present on non-HTTPS pages, which could expose sensitive user data to interception.
Critical SeverityOutdated Software Detection
Identifies potentially outdated frameworks, libraries, or CMS versions that may contain known vulnerabilities.
Medium SeveritySQL Injection Protection
Assesses server-side protection against SQL injection attacks that could compromise database security.
Critical SeverityXSS (Cross-Site Scripting) Protection
Evaluates protection against XSS attacks through Content Security Policy headers and input sanitization.
High SeverityIframe Usage
Detects embedded iframes that could potentially load malicious content from untrusted third-party sources.
Medium SeverityExternal Scripts
Counts and analyzes external JavaScript sources that could introduce security vulnerabilities or tracking.
High SeverityRate Limiting / Bot Protection
Checks for protection mechanisms against brute force attacks, credential stuffing, and automated bot abuse.
Medium SeverityDomain Registrar Status
Analyzes domain registration information via WHOIS to identify newly registered or suspicious domains.
Medium SeverityHow Safety Scoring Works
Score Calculation
The category starts at 100 and calculateCategoryScore() deducts points for each finding: a fail costs the check's full severity weight, a warn costs half, and pass, info and error cost nothing. Ordinary findings can't take a category below 15.
Malware Override
A confirmed, high-confidence malware or phishing match sets the whole category to 0, overriding the floor. Heuristic signals on their own only deduct points.
Status Meanings
- Pass: Check passed successfully
- Warn: Potential issue detected
- Info: Informational only
- Fail: Security issue found
- Error: Check could not complete