What Your Website Check Result Means

Website safety results are tools for decision-making, not final judgments. Understanding what each result means — and what it doesn't — helps you use this information in a practical way rather than treating it as a simple pass/fail grade.

When You See a Green Result

A green "Established" result means the domain has been around for a meaningful period of time, has a valid SSL certificate, and hasn't been flagged in public threat databases. This is a genuinely good sign. Long-running scam operations are the exception, not the rule — most fraudulent websites are short-lived by necessity.

However, a green result is automatic. No human has looked at this website. It means the data looks clean, not that the business is verified. You should still use normal caution — check the returns policy before buying, look for contact information, and trust your instincts if something feels off about the product or price. For high-value purchases or unfamiliar stores, consider checking reviews on independent platforms as well.

When You See a Yellow Result

Yellow doesn't mean danger. It means we don't have enough data to confirm safety one way or the other. The most common cause is a recently registered domain — a site that simply hasn't been around long enough to build a track record.

Many completely legitimate businesses launch with new domains every day. A new freelancer, a startup's first landing page, a small online store that opened last month — all of these would show yellow on our tool. What yellow tells you is: exercise more care than you would with an established site. Look for other trust signals before sharing payment details: social media presence, reviews on third-party platforms, verifiable contact information, and a clear returns or refund policy.

If you're the owner of a new website showing yellow and you want to change that result, the Verified Badge Program exists for exactly this reason. A one-time eligibility check against our published criteria is the way to go from "Unknown" to "Verified" before your domain has had years to build organic history.

When You See a Red Result

A red result means our scan found a specific, concrete warning: the domain appeared in a phishing database, was associated with malware distribution, or has been reported in security feeds as malicious. This is a serious signal and should not be ignored.

We recommend not entering any personal information, passwords, or payment details on a red-flagged site. If you've already interacted with the site — clicked a link, entered an email address, or especially if you've entered payment details — read our guide on what to do after visiting a scam website. Acting quickly can minimize the damage.

In rare cases, a legitimate website may get flagged if it was recently compromised by hackers, or if a previous owner of the domain used it for malicious purposes. If you believe a site was incorrectly flagged, contact that site's owner and ask them to investigate and get their domain removed from the relevant threat feed.

When You See a Verified Result

A teal "Verified" result reflects our highest trust level. The website owner applied to our Verified Badge Program, passed a one-time eligibility check against our published criteria, and is approved for ongoing monitoring. The owner continues paying for that monitoring on a monthly basis — meaning they have ongoing accountability for maintaining the standards that got them approved.

This is meaningfully different from the automatic checks. Automatic checks alone can't confirm business legitimacy, read terms of service, or evaluate whether product descriptions match what's actually being sold. The eligibility check covers that ground once, at onboarding, and the recurring subscription is what keeps the domain under continuous, automated monitoring after that — not a repeated manual review.

Results Are a Snapshot, Not a Permanent Record

Website status changes over time. A safe, established website can be hacked and start distributing malware without the owner even knowing. A previously risky domain can be cleaned up and reclaimed by a legitimate owner. Our results reflect what the data says at the time of your check — they are not a permanent certification of good or bad standing.

For this reason, we recommend checking a website at the time you're about to interact with it — not relying on a check you did three months ago. The check takes seconds, and the data may have changed.