Question 1

How do I know if a website is safe to visit?

Accepted Answer

Run its domain through this scanner to check for HTTPS, a valid TLS certificate and key security headers like HSTS and CSP. A high grade means the transport layer is well configured, but always confirm the URL itself with the URL Reputation Checker before entering personal data.

Question 2

What does an HTTPS or SSL certificate warning mean?

Accepted Answer

It means the connection to the site isn't encrypted or the certificate is expired, self-signed or issued for a different domain. Data sent over such a connection — including passwords — can potentially be intercepted, so avoid logging in or paying on flagged sites.

Question 3

What are security headers and why do they matter?

Accepted Answer

Headers such as Strict-Transport-Security, Content-Security-Policy and X-Frame-Options tell browsers how to handle a site defensively — preventing downgrade attacks, script injection and clickjacking. Missing headers don't always mean a site is malicious, but they indicate weaker defence-in-depth.

Question 4

Does scanning a website tell me if its content is a scam?

Accepted Answer

No — this tool checks transport security and headers, not content. A scam page can still run on valid HTTPS. Pair this scan with the AI Phishing Detector or URL Reputation Checker to evaluate whether the page itself is trying to deceive you.

Question 5

Is it safe to scan any website with this tool?

Accepted Answer

Yes. The scan only requests the page's headers and certificate metadata from the server — it doesn't submit forms, click links or execute page scripts, so it's safe to run against unfamiliar domains.