About TrustMonitor

TrustMonitor helps users check whether a website is legitimate or a potential scam. A convincing design and a secure icon in the browser bar are no longer enough to judge whether a domain is trustworthy. We built a tool that goes deeper — pulling live data from DNS records, certificate authorities, blacklist databases, WHOIS registries, and more — to give you a clear, honest trust signal in seconds.

What We Check

Every domain report covers six core areas:

• SSL Certificate — Is the connection encrypted? Who issued the certificate, and when does it expire? Expired or self-signed certificates are a warning sign.
• WHOIS & Domain Age — When was the domain registered? Who owns it? Scam sites are almost always newly registered. A domain with years of history is less likely to be a one-time fraud operation.
• Blacklist Status — We query VirusTotal, Google Safe Browsing, and spam intelligence feeds. A single blacklist hit is a serious red flag.
• DNS Health — Are nameservers, MX records, and DNS configuration consistent with a legitimate business? Misconfigured DNS can indicate a hastily set-up scam domain.
• Web Presence — Does the domain serve real content? Does it have a mail server? Is there any history in the Wayback Machine? Ghost domains with no past often have something to hide.
• Page Performance & Technical Quality — Google PageSpeed score, HTTPS redirect, content accessibility, and technical health signals.

How the Trust Score is Calculated

The Trust Score is a number from 0 to 100. It is a weighted composite of every check we run — not a single metric. Each category contributes differently based on how strongly it predicts domain legitimacy:

Free With No Strings Attached

TrustMonitor is completely free. No account. No subscription. No credit card. No ads that track you across the web. We believe access to this kind of safety information should not sit behind a paywall.

We also publish a free REST API for developers. If you run a browser extension, a security dashboard, or any tool where domain trust matters — our API lets you integrate check results directly.

Domain results are cached to keep things fast. If you need the very latest data, every check page has a Force Refresh button that triggers a live re-check.

Our Data Sources

We do not make things up — every signal in our report comes from a documented, publicly accessible source:

Data freshness varies by source. VirusTotal and Google Safe Browsing reflect near real-time threat intelligence. WHOIS/RDAP data is typically accurate to within 24 hours.