# Website Trust Score & Scam Checker (`lofomachines/website-trust-scam-checker`) Actor
Check if any website is legit or a scam. Bulk trust score, risk level, legitimacy report and AI verdict for every domain — built for fraud checks, supplier vetting and AI agents.
- **URL**: https://apify.com/lofomachines/website-trust-scam-checker.md
- **Developed by:** [Lofomachines](https://apify.com/lofomachines) (community)
- **Categories:** Agents, Developer tools, Automation
- **Stats:** 2 total users, 1 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet
## Pricing
from $0.005 / website analyzed
This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.
Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event
## What's an Apify Actor?
Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.
Actors are written with capital "A".
## How to integrate an Actor?
If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
The best way to integrate Actors is as follows.
In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md):
```bash
npm install apify-client
```
In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md):
```bash
pip install apify-client
```
In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md):
````bash
# MacOS / Linux
curl -fsSL https://apify.com/install-cli.sh | bash
# Windows
irm https://apify.com/install-cli.ps1 | iex
```bash
In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md).
If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md).
For usage examples, see the [API](#api) section below.
For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).
# README
## Website Trust Score & Scam Checker — Is This Website Legit?
**Check if any website is legit or a scam in seconds.** Paste one URL or thousands of domains and get back a complete **website legitimacy report** for each one: a **trust score from 0 to 100**, a clear **risk level**, plain-English red flags, business transparency signals, security posture, domain history, and an **AI-generated verdict** telling you whether the site is safe to buy from, share data with, or do business with.
No login, no API keys, no browser extensions — just a list of websites in, and a clean, structured trust dataset out.
### Why you need a website trust checker
Fake online shops, cloned brand stores, phishing pages and fly-by-night "suppliers" cost consumers and businesses billions every year. Checking a single site by hand — WHOIS lookups, SSL checks, hunting for a refund policy, googling reviews — takes 15–30 minutes. This Actor does the entire investigation **automatically, in bulk, in seconds per site**, and condenses everything into one number you can act on.
It is also built for the **agentic era**: when an AI agent is about to place an order, submit a form, or recommend a merchant, it needs a machine-readable answer to *"can I trust this website?"*. This Actor is that trust layer — call it from any agent framework, workflow or app via the Apify API and get a structured verdict back.
### What you get for every website
| Category | Data points |
|---|---|
| 🎯 **Verdict** | Trust score (0–100), risk level (very low → very high), one-line verdict, confidence level |
| 🚩 **Flags** | Positive signals, warnings, and red flags in plain English |
| ✅ **Checks** | Pass/warn/fail status for registration, security, email setup, transparency, reachability |
| 🏢 **Site profile** | Title, description, language, e-commerce platform, store detection, parked-page detection |
| 📅 **Domain history** | Registration date, domain age, expiry date, registrar |
| 🔒 **Security** | HTTPS status, certificate validity and issuer, HSTS, suspicious redirects |
| 📧 **Email setup** | Whether the domain runs real, professionally configured email |
| 👤 **Transparency** | Contact / about / privacy / terms / refund pages, emails, phone numbers, social media profiles |
| 🤖 **AI insights** | Site category, credibility summary, detected risk signals, actionable recommendation |
### Who is this for?
- **AI agents & automations** — give shopping agents, booking agents and autonomous workflows a trust gate before they transact, sign up, or recommend anything.
- **E-commerce & dropshipping** — vet suppliers, wholesalers and print-on-demand partners before wiring money.
- **Consumers & deal hunters** — check that suspicious online shop with the too-good-to-be-true prices before checkout.
- **Fraud, risk & compliance teams** — screen merchants, counterparties and vendor lists in bulk.
- **Marketplaces & ad networks** — moderate seller and advertiser websites at scale.
- **Sales & lead-gen teams** — qualify inbound leads and prospect lists by website credibility.
- **Brand protection & security teams** — triage lookalike domains and suspected phishing pages.
- **Affiliate & SEO managers** — audit partner sites and link targets for credibility.
### How to use it
1. Paste your websites (domains or full URLs, one per line).
2. Click **Start**.
3. Download your trust reports as JSON, CSV, Excel or via API.
That's it. All technical settings are pre-optimized — there is nothing to configure.
### Example input
```json
{
"websites": [
"apify.com",
"suspicious-mega-deals.top",
"https://my-supplier-candidate.com"
],
"enableAiInsights": true
}
````
### Example output
```json
{
"input": "apify.com",
"domain": "apify.com",
"websiteUrl": "https://apify.com/",
"status": "ok",
"trustScore": 98,
"riskLevel": "very low",
"verdict": "Established website with strong legitimacy signals.",
"confidence": "high",
"flags": {
"positive": [
"Domain registered more than 5 years ago",
"Valid HTTPS encryption",
"Professional email setup (mail, anti-spoofing and policy records)",
"Clear legal pages and reachable contact details",
"Active social media presence linked on the website"
],
"warnings": [],
"negative": []
},
"checks": {
"registration": "pass",
"security": "pass",
"emailSetup": "pass",
"transparency": "pass",
"reachability": "pass"
},
"site": {
"title": "Apify: The largest marketplace of trusted tools for AI",
"language": "en",
"isEcommerce": false,
"isParked": false
},
"registration": {
"createdAt": "2009-06-02T17:14:10Z",
"ageYears": 17,
"registrar": "Amazon Registrar, Inc."
},
"security": {
"https": true,
"certificateValid": true,
"certificateIssuer": "Amazon",
"hstsEnabled": true
},
"emailSetup": {
"canReceiveEmail": true,
"spfConfigured": true,
"dmarcConfigured": true
},
"transparency": {
"hasContactPage": true,
"hasPrivacyPolicy": true,
"hasTermsPage": true,
"socialProfiles": {
"linkedin": "http://linkedin.com/company/apify/",
"twitter": "https://x.com/apify"
}
},
"aiInsights": {
"category": "SaaS / developer platform",
"summary": "Apify is a long-established web automation platform with complete legal, security and contact transparency.",
"riskSignals": [],
"recommendation": "Safe to do business with."
},
"checkedAt": "2026-07-02T08:25:27.605Z"
}
```
### Understanding the trust score
| Score | Risk level | Meaning |
|---|---|---|
| 80–100 | Very low | Established website with strong legitimacy signals |
| 65–79 | Low | Looks legitimate, no significant risk signals |
| 45–64 | Medium | Mixed signals — verify before transacting |
| 25–44 | High | Multiple risk signals — proceed only with strong evidence |
| 0–24 | Very high | Strong scam indicators or unverifiable — avoid |
### Popular use cases
- **"Is this online shop legit?"** — bulk-check stores before buying or promoting them.
- **Supplier due diligence** — screen a spreadsheet of 500 vendor domains in one run.
- **AI shopping agent trust gate** — agents call the Actor via API before checkout and abort on high risk.
- **Lead scoring** — enrich CRM leads with website credibility before sales outreach.
- **Phishing & lookalike triage** — score suspicious domains from threat feeds or typo-squat monitoring.
- **Marketplace onboarding** — auto-screen new sellers' websites during KYC.
- **Scheduled monitoring** — re-check your partner/vendor list weekly and alert on score drops.
### Integrations & automation
- **API** — start runs and fetch results from any language ([Apify API](https://docs.apify.com/api/v2)); ideal for AI agents, LangChain/LlamaIndex tools and custom apps.
- **n8n / Make / Zapier** — plug the Actor into no-code workflows: check a domain whenever a new lead, order or form submission arrives.
- **MCP** — expose it to Claude, ChatGPT or any MCP-compatible agent through the Apify MCP server, so your assistant can verify websites mid-conversation.
- **Webhooks & schedules** — run on a schedule and push results to Slack, email, Google Sheets or your data warehouse.
### FAQ
**Do I need an account on any external service?**
No. You only need the list of websites you want to check.
**How many websites can I check in one run?**
Up to 1,000 per run. Duplicate domains are deduplicated automatically.
**Can it guarantee that a website is safe or a scam?**
No automated tool can give a legal guarantee. The trust score aggregates dozens of independently verifiable signals and is designed as a fast, reliable first line of screening — treat "high risk" results as a strong signal to investigate further.
**What happens if a website is offline?**
You still get a report: the site is marked unreachable, scored accordingly, and all signals that could be verified are included.
**Does it work on non-English websites?**
Yes — reports are produced for websites in any language.
### Related Actors
- [Lead Sonar — Website Contact & Company Intelligence](https://apify.com/lofomachines/lead-sonar) — turn website lists into enriched, sales-ready leads.
- [Extract Contacts & Social Links from Any Site](https://apify.com/lofomachines/contact-extractor) — pull every email, phone and social profile from a website.
- [Website Tech Profiler](https://apify.com/lofomachines/website-tech-profiler) — detect the full technology stack behind any website.
- [Email Data Breach Checker](https://apify.com/lofomachines/email-breach-checker) — check if email addresses appear in known data breaches.
- [Organization Registered Domain & Subdomain Scraper](https://apify.com/lofomachines/organization-registered-domain-subdomain-scraper) — discover every domain an organization owns.
# Actor input Schema
## `websites` (type: `array`):
Paste one website per line. You can enter plain domains (e.g. example-shop.com) or full URLs (e.g. https://example-shop.com/product/123) — each website is analyzed and receives its own trust report.
## `enableAiInsights` (type: `boolean`):
Adds an AI-generated plain-English verdict to every report: what the site is about, detected risk signals, and a clear recommendation. Keep it on for the richest results.
## Actor input object example
```json
{
"websites": [
"apify.com",
"wikipedia.org"
],
"enableAiInsights": true
}
```
# Actor output Schema
## `overview` (type: `string`):
No description
# API
You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.
## JavaScript example
```javascript
import { ApifyClient } from 'apify-client';
// Initialize the ApifyClient with your Apify API token
// Replace the '' with your token
const client = new ApifyClient({
token: '',
});
// Prepare Actor input
const input = {
"websites": [
"apify.com",
"wikipedia.org"
]
};
// Run the Actor and wait for it to finish
const run = await client.actor("lofomachines/website-trust-scam-checker").call(input);
// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
console.dir(item);
});
// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs
```
## Python example
```python
from apify_client import ApifyClient
# Initialize the ApifyClient with your Apify API token
# Replace '' with your token.
client = ApifyClient("")
# Prepare the Actor input
run_input = { "websites": [
"apify.com",
"wikipedia.org",
] }
# Run the Actor and wait for it to finish
run = client.actor("lofomachines/website-trust-scam-checker").call(run_input=run_input)
# Fetch and print Actor results from the run's dataset (if there are any)
print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
print(item)
# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start
```
## CLI example
```bash
echo '{
"websites": [
"apify.com",
"wikipedia.org"
]
}' |
apify call lofomachines/website-trust-scam-checker --silent --output-dataset
```
## MCP server setup
```json
{
"mcpServers": {
"apify": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.apify.com/?tools=lofomachines/website-trust-scam-checker",
"--header",
"Authorization: Bearer "
]
}
}
}
```
## OpenAPI specification
```json
{
"openapi": "3.0.1",
"info": {
"title": "Website Trust Score & Scam Checker",
"description": "Check if any website is legit or a scam. Bulk trust score, risk level, legitimacy report and AI verdict for every domain — built for fraud checks, supplier vetting and AI agents.",
"version": "1.0",
"x-build-id": "SAQbkx0n5C5Uc4d9q"
},
"servers": [
{
"url": "https://api.apify.com/v2"
}
],
"paths": {
"/acts/lofomachines~website-trust-scam-checker/run-sync-get-dataset-items": {
"post": {
"operationId": "run-sync-get-dataset-items-lofomachines-website-trust-scam-checker",
"x-openai-isConsequential": false,
"summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK"
}
}
}
},
"/acts/lofomachines~website-trust-scam-checker/runs": {
"post": {
"operationId": "runs-sync-lofomachines-website-trust-scam-checker",
"x-openai-isConsequential": false,
"summary": "Executes an Actor and returns information about the initiated run in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/runsResponseSchema"
}
}
}
}
}
}
},
"/acts/lofomachines~website-trust-scam-checker/run-sync": {
"post": {
"operationId": "run-sync-lofomachines-website-trust-scam-checker",
"x-openai-isConsequential": false,
"summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
"tags": [
"Run Actor"
],
"requestBody": {
"required": true,
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/inputSchema"
}
}
}
},
"parameters": [
{
"name": "token",
"in": "query",
"required": true,
"schema": {
"type": "string"
},
"description": "Enter your Apify token here"
}
],
"responses": {
"200": {
"description": "OK"
}
}
}
}
},
"components": {
"schemas": {
"inputSchema": {
"type": "object",
"required": [
"websites"
],
"properties": {
"websites": {
"title": "Websites to check",
"type": "array",
"description": "Paste one website per line. You can enter plain domains (e.g. example-shop.com) or full URLs (e.g. https://example-shop.com/product/123) — each website is analyzed and receives its own trust report.",
"items": {
"type": "string"
}
},
"enableAiInsights": {
"title": "AI verdict & insights",
"type": "boolean",
"description": "Adds an AI-generated plain-English verdict to every report: what the site is about, detected risk signals, and a clear recommendation. Keep it on for the richest results.",
"default": true
}
}
},
"runsResponseSchema": {
"type": "object",
"properties": {
"data": {
"type": "object",
"properties": {
"id": {
"type": "string"
},
"actId": {
"type": "string"
},
"userId": {
"type": "string"
},
"startedAt": {
"type": "string",
"format": "date-time",
"example": "2025-01-08T00:00:00.000Z"
},
"finishedAt": {
"type": "string",
"format": "date-time",
"example": "2025-01-08T00:00:00.000Z"
},
"status": {
"type": "string",
"example": "READY"
},
"meta": {
"type": "object",
"properties": {
"origin": {
"type": "string",
"example": "API"
},
"userAgent": {
"type": "string"
}
}
},
"stats": {
"type": "object",
"properties": {
"inputBodyLen": {
"type": "integer",
"example": 2000
},
"rebootCount": {
"type": "integer",
"example": 0
},
"restartCount": {
"type": "integer",
"example": 0
},
"resurrectCount": {
"type": "integer",
"example": 0
},
"computeUnits": {
"type": "integer",
"example": 0
}
}
},
"options": {
"type": "object",
"properties": {
"build": {
"type": "string",
"example": "latest"
},
"timeoutSecs": {
"type": "integer",
"example": 300
},
"memoryMbytes": {
"type": "integer",
"example": 1024
},
"diskMbytes": {
"type": "integer",
"example": 2048
}
}
},
"buildId": {
"type": "string"
},
"defaultKeyValueStoreId": {
"type": "string"
},
"defaultDatasetId": {
"type": "string"
},
"defaultRequestQueueId": {
"type": "string"
},
"buildNumber": {
"type": "string",
"example": "1.0.0"
},
"containerUrl": {
"type": "string"
},
"usage": {
"type": "object",
"properties": {
"ACTOR_COMPUTE_UNITS": {
"type": "integer",
"example": 0
},
"DATASET_READS": {
"type": "integer",
"example": 0
},
"DATASET_WRITES": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_READS": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_WRITES": {
"type": "integer",
"example": 1
},
"KEY_VALUE_STORE_LISTS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_READS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_WRITES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_INTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_EXTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_SERPS": {
"type": "integer",
"example": 0
}
}
},
"usageTotalUsd": {
"type": "number",
"example": 0.00005
},
"usageUsd": {
"type": "object",
"properties": {
"ACTOR_COMPUTE_UNITS": {
"type": "integer",
"example": 0
},
"DATASET_READS": {
"type": "integer",
"example": 0
},
"DATASET_WRITES": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_READS": {
"type": "integer",
"example": 0
},
"KEY_VALUE_STORE_WRITES": {
"type": "number",
"example": 0.00005
},
"KEY_VALUE_STORE_LISTS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_READS": {
"type": "integer",
"example": 0
},
"REQUEST_QUEUE_WRITES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_INTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"DATA_TRANSFER_EXTERNAL_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
"type": "integer",
"example": 0
},
"PROXY_SERPS": {
"type": "integer",
"example": 0
}
}
}
}
}
}
}
}
}
}
```