Website Trust Inspector
Look at the technical signals behind a website before you trust it
- HTTPS on the final page
- Cross-domain redirects
- Security headers
About Website Trust Inspector
Enter a URL to check whether the page is served over HTTPS, whether its redirects switch domain or drop back to plain HTTP, and which of five common security headers it sends. Each finding shows the evidence, when it was observed and how confident the check is, and a technical trust score out of 100 sums up the setup. It describes how a website is configured, not whether the people behind it are honest, and it doesn't check phishing or malware blocklists. Requires a free account.
What is checked
The inspector requests the page from MemonaIQ’s servers and records what it can observe from outside. It needs a free account, and each inspection uses one check from your daily allowance.
- Whether the final page is served over HTTPS, and whether any redirect drops back to plain HTTP
- Where redirects lead, including jumps to other domains
- Whether five common security headers are sent: Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy and Permissions-Policy
- Whether the hostname uses internationalized (Punycode) characters, which look-alike domains sometimes rely on
Reading the score
Each finding carries the evidence behind it, when it was observed and how confident the check is. The technical trust score out of 100 combines internal checks of the connection, headers, redirects, URL structure and page content, and not every input appears as a separate finding, so treat the score as a rough comparison and act on the findings.
Technical signals can be misleading in both directions. A new, legitimate shop may have a young domain and few headers; a scam can run on a well-configured site. Use the results alongside other checks, such as reviews, company registration and how you found the site.
Further reading
Questions people ask
- Does a high score mean a website is safe?
- No. It means these technical checks found no warning signs. It can’t judge whether a business is honest or whether a purchase will arrive.
- Does MemonaIQ visit the site on my behalf?
- Yes. The inspection is run from MemonaIQ’s servers, so the website sees a request from MemonaIQ rather than from your device.
- Why do some checks say “unknown”?
- Some sites block automated requests. Checks that couldn’t run are marked unknown and left out of the score rather than guessed.
- Does it check phishing or malware blocklists?
- No. External threat-intelligence lookups aren’t configured, and the report says so. To see whether a URL is on a blocklist, check it with a reputation service such as Google Safe Browsing’s site status page.