Website Trust Score & Scam Checker — Is This Website Legit?

Check if any website is legit or a scam in seconds. Paste one URL or thousands of domains and get back a complete website legitimacy report for each one: a trust score from 0 to 100, a clear risk level, plain-English red flags, business transparency signals, security posture, domain history, and an AI-generated verdict telling you whether the site is safe to buy from, share data with, or do business with.

No login, no API keys, no browser extensions — just a list of websites in, and a clean, structured trust dataset out.

Why you need a website trust checker

Fake online shops, cloned brand stores, phishing pages and fly-by-night "suppliers" cost consumers and businesses billions every year. Checking a single site by hand — WHOIS lookups, SSL checks, hunting for a refund policy, googling reviews — takes 15–30 minutes. This Actor does the entire investigation automatically, in bulk, in seconds per site, and condenses everything into one number you can act on.

It is also built for the agentic era: when an AI agent is about to place an order, submit a form, or recommend a merchant, it needs a machine-readable answer to "can I trust this website?". This Actor is that trust layer — call it from any agent framework, workflow or app via the Apify API and get a structured verdict back.

What you get for every website

Category	Data points
🎯 Verdict	Trust score (0–100), risk level (very low → very high), one-line verdict, confidence level
🚩 Flags	Positive signals, warnings, and red flags in plain English
✅ Checks	Pass/warn/fail status for registration, security, email setup, transparency, reachability
🏢 Site profile	Title, description, language, e-commerce platform, store detection, parked-page detection
📅 Domain history	Registration date, domain age, expiry date, registrar
🔒 Security	HTTPS status, certificate validity and issuer, HSTS, suspicious redirects
📧 Email setup	Whether the domain runs real, professionally configured email
👤 Transparency	Contact / about / privacy / terms / refund pages, emails, phone numbers, social media profiles
🤖 AI insights	Site category, credibility summary, detected risk signals, actionable recommendation

Who is this for?

• AI agents & automations — give shopping agents, booking agents and autonomous workflows a trust gate before they transact, sign up, or recommend anything.
• E-commerce & dropshipping — vet suppliers, wholesalers and print-on-demand partners before wiring money.
• Consumers & deal hunters — check that suspicious online shop with the too-good-to-be-true prices before checkout.
• Fraud, risk & compliance teams — screen merchants, counterparties and vendor lists in bulk.
• Marketplaces & ad networks — moderate seller and advertiser websites at scale.
• Sales & lead-gen teams — qualify inbound leads and prospect lists by website credibility.
• Brand protection & security teams — triage lookalike domains and suspected phishing pages.
• Affiliate & SEO managers — audit partner sites and link targets for credibility.

How to use it

1. Paste your websites (domains or full URLs, one per line).
2. Click Start.
3. Download your trust reports as JSON, CSV, Excel or via API.

That's it. All technical settings are pre-optimized — there is nothing to configure.

Example input

{
    "websites": [
        "apify.com",
        "suspicious-mega-deals.top",
        "https://my-supplier-candidate.com"
    ],
    "enableAiInsights": true
}

Example output

{
    "input": "apify.com",
    "domain": "apify.com",
    "websiteUrl": "https://apify.com/",
    "status": "ok",
    "trustScore": 98,
    "riskLevel": "very low",
    "verdict": "Established website with strong legitimacy signals.",
    "confidence": "high",
    "flags": {
        "positive": [
            "Domain registered more than 5 years ago",
            "Valid HTTPS encryption",
            "Professional email setup (mail, anti-spoofing and policy records)",
            "Clear legal pages and reachable contact details",
            "Active social media presence linked on the website"
        ],
        "warnings": [],
        "negative": []
    },
    "checks": {
        "registration": "pass",
        "security": "pass",
        "emailSetup": "pass",
        "transparency": "pass",
        "reachability": "pass"
    },
    "site": {
        "title": "Apify: The largest marketplace of trusted tools for AI",
        "language": "en",
        "isEcommerce": false,
        "isParked": false
    },
    "registration": {
        "createdAt": "2009-06-02T17:14:10Z",
        "ageYears": 17,
        "registrar": "Amazon Registrar, Inc."
    },
    "security": {
        "https": true,
        "certificateValid": true,
        "certificateIssuer": "Amazon",
        "hstsEnabled": true
    },
    "emailSetup": {
        "canReceiveEmail": true,
        "spfConfigured": true,
        "dmarcConfigured": true
    },
    "transparency": {
        "hasContactPage": true,
        "hasPrivacyPolicy": true,
        "hasTermsPage": true,
        "socialProfiles": {
            "linkedin": "http://linkedin.com/company/apify/",
            "twitter": "https://x.com/apify"
        }
    },
    "aiInsights": {
        "category": "SaaS / developer platform",
        "summary": "Apify is a long-established web automation platform with complete legal, security and contact transparency.",
        "riskSignals": [],
        "recommendation": "Safe to do business with."
    },
    "checkedAt": "2026-07-02T08:25:27.605Z"
}

Understanding the trust score

Score	Risk level	Meaning
80–100	Very low	Established website with strong legitimacy signals
65–79	Low	Looks legitimate, no significant risk signals
45–64	Medium	Mixed signals — verify before transacting
25–44	High	Multiple risk signals — proceed only with strong evidence
0–24	Very high	Strong scam indicators or unverifiable — avoid

Popular use cases

• "Is this online shop legit?" — bulk-check stores before buying or promoting them.
• Supplier due diligence — screen a spreadsheet of 500 vendor domains in one run.
• AI shopping agent trust gate — agents call the Actor via API before checkout and abort on high risk.
• Lead scoring — enrich CRM leads with website credibility before sales outreach.
• Phishing & lookalike triage — score suspicious domains from threat feeds or typo-squat monitoring.
• Marketplace onboarding — auto-screen new sellers' websites during KYC.
• Scheduled monitoring — re-check your partner/vendor list weekly and alert on score drops.

Integrations & automation

• API — start runs and fetch results from any language (Apify API); ideal for AI agents, LangChain/LlamaIndex tools and custom apps.
• n8n / Make / Zapier — plug the Actor into no-code workflows: check a domain whenever a new lead, order or form submission arrives.
• MCP — expose it to Claude, ChatGPT or any MCP-compatible agent through the Apify MCP server, so your assistant can verify websites mid-conversation.
• Webhooks & schedules — run on a schedule and push results to Slack, email, Google Sheets or your data warehouse.

FAQ

Do I need an account on any external service? No. You only need the list of websites you want to check.

How many websites can I check in one run? Up to 1,000 per run. Duplicate domains are deduplicated automatically.

Can it guarantee that a website is safe or a scam? No automated tool can give a legal guarantee. The trust score aggregates dozens of independently verifiable signals and is designed as a fast, reliable first line of screening — treat "high risk" results as a strong signal to investigate further.

What happens if a website is offline? You still get a report: the site is marked unreachable, scored accordingly, and all signals that could be verified are included.

Does it work on non-English websites? Yes — reports are produced for websites in any language.

Related Actors

• Lead Sonar — Website Contact & Company Intelligence — turn website lists into enriched, sales-ready leads.
• Extract Contacts & Social Links from Any Site — pull every email, phone and social profile from a website.
• Website Tech Profiler — detect the full technology stack behind any website.
• Email Data Breach Checker — check if email addresses appear in known data breaches.
• Organization Registered Domain & Subdomain Scraper — discover every domain an organization owns.