Features
Everything Scam Lookup checks on every scan. No feature is behind a paywall.
Trust score (0–100)
Weighted composite of six category scores. Every finding contributes explicit points.
Six category breakdowns
Security, Infrastructure, Transparency, Content, Email, Performance — each scored independently.
DNS-over-HTTPS
A / AAAA / MX / NS / TXT queried through Cloudflare 1.1.1.1.
RDAP registration
Domain age, registrar, expiry — new-domain risk flagged automatically.
SSL / TLS via CT logs
Active certificate, issuer, expiration and SAN entries via crt.sh.
Security headers
HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy.
Email spoofing risk
SPF, DMARC and DKIM — with policy strength analysis.
Transparency scan
Privacy policy, terms, contact, refund, socials, email and phone extracted from HTML.
Technology fingerprint
30+ signatures for CMS, framework, analytics and CDN.
Robots & sitemap
Basic maturity signals plus raw robots.txt inspection.
Edge cache (24h)
Cloudflare Cache API today; swappable to KV, R2 or DB later without touching the engine.
Shareable reports
Every scan gets a permanent URL at /check/{domain} — send it, bookmark it, embed it.