# Website Trust Score & Scam Checker (`lofomachines/website-trust-scam-checker`) Actor

Check if any website is legit or a scam. Bulk trust score, risk level, legitimacy report and AI verdict for every domain — built for fraud checks, supplier vetting and AI agents.

- **URL**: https://apify.com/lofomachines/website-trust-scam-checker.md
- **Developed by:** [Lofomachines](https://apify.com/lofomachines) (community)
- **Categories:** Agents, Developer tools, Automation
- **Stats:** 4 total users, 2 monthly users, 100.0% runs succeeded, 0 bookmarks
- **User rating**: No ratings yet

## Pricing

from $0.005 / website analyzed

This Actor is paid per event. You are not charged for the Apify platform usage, but only a fixed price for specific events.
Since this Actor supports Apify Store discounts, the price gets lower the higher subscription plan you have.

Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-event

## What's an Apify Actor?

Actors are web data automations that power AI and operations. They run on the Apify platform to scrape websites, process data, connect APIs, and automate workflows.
In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours,
and optionally produces a well-defined JSON output, datasets with results, or files in key-value store.
In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server.
Actors are written with capital "A".

## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
The best way to integrate Actors is as follows.

- **AI agents and MCP clients** — the [Apify MCP server](https://docs.apify.com/integrations/mcp.md) at `https://mcp.apify.com` (remote, streamable HTTP, OAuth on first use).
- **Agentic workflows and local Actor development** — [Agent Skills](https://apify.com/.well-known/agent-skills/index.json) with the [Apify CLI](https://docs.apify.com/cli/docs.md): `npm install -g apify-cli`, then `apify login`.
- **JavaScript/TypeScript projects** — the official [JS/TS client](https://docs.apify.com/api/client/js/docs.md): `npm install apify-client`.
- **Python projects** — the official [Python client](https://docs.apify.com/api/client/python/docs.md): `pip install apify-client`.
- **Any other language** — the [REST API](https://docs.apify.com/api/v2.md).

For usage examples, see the [API](#api) section below.

For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).

# README

## Website Trust Score & Scam Checker — Is This Website Legit?

**Check if any website is legit or a scam in seconds.** Paste one URL or thousands of domains and get back a complete **website legitimacy report** for each one: a **trust score from 0 to 100**, a clear **risk level**, plain-English red flags, business transparency signals, security posture, domain history, and an **AI-generated verdict** telling you whether the site is safe to buy from, share data with, or do business with.

No login, no API keys, no browser extensions — just a list of websites in, and a clean, structured trust dataset out.

### Why you need a website trust checker

Fake online shops, cloned brand stores, phishing pages and fly-by-night "suppliers" cost consumers and businesses billions every year. Checking a single site by hand — WHOIS lookups, SSL checks, hunting for a refund policy, googling reviews — takes 15–30 minutes. This Actor does the entire investigation **automatically, in bulk, in seconds per site**, and condenses everything into one number you can act on.

It is also built for the **agentic era**: when an AI agent is about to place an order, submit a form, or recommend a merchant, it needs a machine-readable answer to *"can I trust this website?"*. This Actor is that trust layer — call it from any agent framework, workflow or app via the Apify API and get a structured verdict back.

### What you get for every website

| Category | Data points |
|---|---|
| 🎯 **Verdict** | Trust score (0–100), risk level (very low → very high), one-line verdict, confidence level |
| 🚩 **Flags** | Positive signals, warnings, and red flags in plain English |
| ✅ **Checks** | Pass/warn/fail status for registration, security, email setup, transparency, reachability |
| 🏢 **Site profile** | Title, description, language, e-commerce platform, store detection, parked-page detection |
| 📅 **Domain history** | Registration date, domain age, expiry date, registrar |
| 🔒 **Security** | HTTPS status, certificate validity and issuer, HSTS, suspicious redirects |
| 📧 **Email setup** | Whether the domain runs real, professionally configured email |
| 👤 **Transparency** | Contact / about / privacy / terms / refund pages, emails, phone numbers, social media profiles |
| 🤖 **AI insights** | Site category, credibility summary, detected risk signals, actionable recommendation |

### Who is this for?

- **AI agents & automations** — give shopping agents, booking agents and autonomous workflows a trust gate before they transact, sign up, or recommend anything.
- **E-commerce & dropshipping** — vet suppliers, wholesalers and print-on-demand partners before wiring money.
- **Consumers & deal hunters** — check that suspicious online shop with the too-good-to-be-true prices before checkout.
- **Fraud, risk & compliance teams** — screen merchants, counterparties and vendor lists in bulk.
- **Marketplaces & ad networks** — moderate seller and advertiser websites at scale.
- **Sales & lead-gen teams** — qualify inbound leads and prospect lists by website credibility.
- **Brand protection & security teams** — triage lookalike domains and suspected phishing pages.
- **Affiliate & SEO managers** — audit partner sites and link targets for credibility.

### How to use it

1. Paste your websites (domains or full URLs, one per line).
2. Click **Start**.
3. Download your trust reports as JSON, CSV, Excel or via API.

That's it. All technical settings are pre-optimized — there is nothing to configure.

### Example input

```json
{
    "websites": [
        "apify.com",
        "suspicious-mega-deals.top",
        "https://my-supplier-candidate.com"
    ],
    "enableAiInsights": true
}
```

### Example output

```json
{
    "input": "apify.com",
    "domain": "apify.com",
    "websiteUrl": "https://apify.com/",
    "status": "ok",
    "trustScore": 98,
    "riskLevel": "very low",
    "verdict": "Established website with strong legitimacy signals.",
    "confidence": "high",
    "flags": {
        "positive": [
            "Domain registered more than 5 years ago",
            "Valid HTTPS encryption",
            "Professional email setup (mail, anti-spoofing and policy records)",
            "Clear legal pages and reachable contact details",
            "Active social media presence linked on the website"
        ],
        "warnings": [],
        "negative": []
    },
    "checks": {
        "registration": "pass",
        "security": "pass",
        "emailSetup": "pass",
        "transparency": "pass",
        "reachability": "pass"
    },
    "site": {
        "title": "Apify: The largest marketplace of trusted tools for AI",
        "language": "en",
        "isEcommerce": false,
        "isParked": false
    },
    "registration": {
        "createdAt": "2009-06-02T17:14:10Z",
        "ageYears": 17,
        "registrar": "Amazon Registrar, Inc."
    },
    "security": {
        "https": true,
        "certificateValid": true,
        "certificateIssuer": "Amazon",
        "hstsEnabled": true
    },
    "emailSetup": {
        "canReceiveEmail": true,
        "spfConfigured": true,
        "dmarcConfigured": true
    },
    "transparency": {
        "hasContactPage": true,
        "hasPrivacyPolicy": true,
        "hasTermsPage": true,
        "socialProfiles": {
            "linkedin": "http://linkedin.com/company/apify/",
            "twitter": "https://x.com/apify"
        }
    },
    "aiInsights": {
        "category": "SaaS / developer platform",
        "summary": "Apify is a long-established web automation platform with complete legal, security and contact transparency.",
        "riskSignals": [],
        "recommendation": "Safe to do business with."
    },
    "checkedAt": "2026-07-02T08:25:27.605Z"
}
```

### Understanding the trust score

| Score | Risk level | Meaning |
|---|---|---|
| 80–100 | Very low | Established website with strong legitimacy signals |
| 65–79 | Low | Looks legitimate, no significant risk signals |
| 45–64 | Medium | Mixed signals — verify before transacting |
| 25–44 | High | Multiple risk signals — proceed only with strong evidence |
| 0–24 | Very high | Strong scam indicators or unverifiable — avoid |

### Popular use cases

- **"Is this online shop legit?"** — bulk-check stores before buying or promoting them.
- **Supplier due diligence** — screen a spreadsheet of 500 vendor domains in one run.
- **AI shopping agent trust gate** — agents call the Actor via API before checkout and abort on high risk.
- **Lead scoring** — enrich CRM leads with website credibility before sales outreach.
- **Phishing & lookalike triage** — score suspicious domains from threat feeds or typo-squat monitoring.
- **Marketplace onboarding** — auto-screen new sellers' websites during KYC.
- **Scheduled monitoring** — re-check your partner/vendor list weekly and alert on score drops.

### Integrations & automation

- **API** — start runs and fetch results from any language ([Apify API](https://docs.apify.com/api/v2)); ideal for AI agents, LangChain/LlamaIndex tools and custom apps.
- **n8n / Make / Zapier** — plug the Actor into no-code workflows: check a domain whenever a new lead, order or form submission arrives.
- **MCP** — expose it to Claude, ChatGPT or any MCP-compatible agent through the Apify MCP server, so your assistant can verify websites mid-conversation.
- **Webhooks & schedules** — run on a schedule and push results to Slack, email, Google Sheets or your data warehouse.

### FAQ

**Do I need an account on any external service?**
No. You only need the list of websites you want to check.

**How many websites can I check in one run?**
Up to 1,000 per run. Duplicate domains are deduplicated automatically.

**Can it guarantee that a website is safe or a scam?**
No automated tool can give a legal guarantee. The trust score aggregates dozens of independently verifiable signals and is designed as a fast, reliable first line of screening — treat "high risk" results as a strong signal to investigate further.

**What happens if a website is offline?**
You still get a report: the site is marked unreachable, scored accordingly, and all signals that could be verified are included.

**Does it work on non-English websites?**
Yes — reports are produced for websites in any language.

### Related Actors

- [Lead Sonar — Website Contact & Company Intelligence](https://apify.com/lofomachines/lead-sonar) — turn website lists into enriched, sales-ready leads.
- [Extract Contacts & Social Links from Any Site](https://apify.com/lofomachines/contact-extractor) — pull every email, phone and social profile from a website.
- [Website Tech Profiler](https://apify.com/lofomachines/website-tech-profiler) — detect the full technology stack behind any website.
- [Email Data Breach Checker](https://apify.com/lofomachines/email-breach-checker) — check if email addresses appear in known data breaches.
- [Organization Registered Domain & Subdomain Scraper](https://apify.com/lofomachines/organization-registered-domain-subdomain-scraper) — discover every domain an organization owns.

# Actor input Schema

## `websites` (type: `array`):

Paste one website per line. You can enter plain domains (e.g. <code>example-shop.com</code>) or full URLs (e.g. <code>https://example-shop.com/product/123</code>) — each website is analyzed and receives its own trust report.

## `enableAiInsights` (type: `boolean`):

Adds an AI-generated plain-English verdict to every report: what the site is about, detected risk signals, and a clear recommendation. Keep it on for the richest results.

## Actor input object example

```json
{
  "websites": [
    "apify.com",
    "wikipedia.org"
  ],
  "enableAiInsights": true
}
```

# Actor output Schema

## `overview` (type: `string`):

No description

# API

You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup.

## JavaScript example

```javascript
import { ApifyClient } from 'apify-client';

// Initialize the ApifyClient with your Apify API token
// Replace the '<YOUR_API_TOKEN>' with your token
const client = new ApifyClient({
    token: '<YOUR_API_TOKEN>',
});

// Prepare Actor input
const input = {
    "websites": [
        "apify.com",
        "wikipedia.org"
    ]
};

// Run the Actor and wait for it to finish
const run = await client.actor("lofomachines/website-trust-scam-checker").call(input);

// Fetch and print Actor results from the run's dataset (if any)
console.log('Results from dataset');
console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
const { items } = await client.dataset(run.defaultDatasetId).listItems();
items.forEach((item) => {
    console.dir(item);
});

// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

```

## Python example

```python
from apify_client import ApifyClient

# Initialize the ApifyClient with your Apify API token
# Replace '<YOUR_API_TOKEN>' with your token.
client = ApifyClient("<YOUR_API_TOKEN>")

# Prepare the Actor input
run_input = { "websites": [
        "apify.com",
        "wikipedia.org",
    ] }

# Run the Actor and wait for it to finish
run = client.actor("lofomachines/website-trust-scam-checker").call(run_input=run_input)

# Fetch and print Actor results from the run's dataset (if there are any)
print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

```

## CLI example

```bash
echo '{
  "websites": [
    "apify.com",
    "wikipedia.org"
  ]
}' |
apify call lofomachines/website-trust-scam-checker --silent --output-dataset

```

## MCP server setup

```json
{
    "mcpServers": {
        "apify": {
            "command": "npx",
            "args": [
                "mcp-remote",
                "https://mcp.apify.com/?tools=lofomachines/website-trust-scam-checker",
                "--header",
                "Authorization: Bearer <YOUR_API_TOKEN>"
            ]
        }
    }
}

```

## OpenAPI specification

Download the OpenAPI definition: https://api.apify.com/v2/actors/3d54DAwWdSe5oJEe5/builds/SAQbkx0n5C5Uc4d9q/openapi.json