How the score works
A 0-100 heuristic from public data. It reads the homepage only.
| Factor | Weight | Source |
|---|---|---|
| Domain age | 15 | RDAP / WHOIS |
| Site popularity | 15 | Tranco top 1M list |
| Site basics (HTTPS, terms, team page) | 15 | Homepage fetch |
| Docs or audit links | 10 | Homepage links |
| Official socials | 10 | Homepage links |
| GitHub activity | 10 | GitHub API |
| Token contract flags | 20 | GoPlus (when an address is known) |
Domains listed on the MetaMask eth-phishing-detect blocklist are marked HIGH RISK immediately. Any score under 45 is HIGH RISK even when data is thin.
Limits
The score does not verify audits, the team, or smart contract code. A high score is not an endorsement and a low score is not proof of fraud. In our test, 15 of 15 randomly picked live phishing domains scored HIGH RISK, but look-alike scams that copy a legitimate project well are the hard case and are not yet proven.
Our rules
We do not accept payment in tokens. Sponsored posts carry a SPONSORED label and the score is not changed by payment. We never ask you to connect a wallet or sign anything.