Frequently Asked Questions

LunarTrust is a free URL scanner that tells you whether a website is safe to visit. Paste any URL and get a clear verdict (green, yellow, or red). No account needed, no data stored.

Anyone who wants a quick second opinion before clicking a link or buying from an unknown shop. You do not need to be a Webdeveloper. The result is designed to be understood at a glance.

Yes, completely free. There are no plans, no subscriptions, and no hidden costs.

Every scan runs five checks in parallel:

• SSL Certificate — is the connection encrypted and valid?
• Google Safe Browsing — is the URL flagged as malware or phishing?
• Domain Age — how long has this domain existed?
• Wayback Machine — does this site have a recorded history?
• URL Analysis — does the URL contain suspicious patterns like brand impersonation or dangerous file types?

Usually between 2 and 5 seconds. All checks run at the same time and the result appears as soon as the slowest check finishes.

• Green (Trusted) — no threats or warning signs detected.
• Yellow (Warning) — at least one check raised a concern. Proceed carefully and read the details.
• Red (Danger) — a serious threat was detected, such as malware, phishing, or an invalid SSL certificate. We recommend not visiting the site.

You can scan any publicly accessible URL. The input accepts full URLs (https://example.com) and bare domains (example.com). The https:// is added automatically if missing.

A Warning does not mean the site is dangerous. It means one check raised a concern worth knowing about. A recently registered domain or a site without Wayback Machine history will trigger a Warning even if it is perfectly legitimate. Always read the individual check results, not just the overall score.

No. URLs are processed in memory during the scan and never written to a database or disk. Once the scan completes, the URL is gone.

No cookies, no analytics, no tracking of any kind. The only thing stored in your browser is your theme preference (dark or light mode).

Yes, one of the checks uses the Google Safe Browsing API, which means Google receives the URL. This is explained in detail in the Privacy Policy. If you consider a URL sensitive, be aware of this trade-off. The other four checks do not involve Google.

Yes. The full source code is available on GitHub under the MIT License. You can read exactly how the scoring works, verify what data is sent where, and contribute improvements.

LunarTrust gives you a fast, honest signal, !not a guarantee!. No tool can catch every threat. If a site gets a green result, it means no known threats were detected, not that the site is unconditionally safe. We are transparent about what each check does and does not cover.

LunarTrust is an independent project built by a solo developer who wanted a privacy-first alternative to commercial URL scanners. It is not affiliated with Google or any of the third-party services it uses.

Some domain registries do not provide public registration data. German .de domains, for example, do not disclose the registration date through RDAP. When data is unavailable, the check is marked as unknown and does not affect the overall score.

The Wayback Machine does not archive every website. New sites, private tools, and regional sites are frequently not archived. A missing entry does not mean the site is new or suspicious. It is marked as unknown and excluded from the score.

URL Analysis is a local heuristic check. It runs entirely without contacting any external service. It looks for structural patterns associated with phishing and malware: brand impersonation, suspicious TLDs, dangerous file extensions, typosquatting, and more. Because it is fully local, your URL never leaves the scan function for this check.