—
Build quality
What gives a scam away
The checks that separate a phishing or malware site from a badly built one.
How the site is built
Security hygiene: headers, TLS, cookies, exposed files and page code. This is what the grade measures.
Coverage
Nothing cost points on this page.
Findings
No findings match this filter.
Every check
Everything this report tested, most pressing first: failed checks (worst first), then warnings, then passes. "Not checked" means the check couldn't run on this page — it is not a pass.
How this report was made
Passive checks only. The FraudLens backend fetched this page once, read its headers, cookies and TLS certificate, and requested a short fixed list of well-known paths (for example /.git/HEAD, /.env, /.well-known/security.txt). The extension read the page as it was already rendered in your browser. Nothing was submitted, fuzzed or brute-forced.
Findings describe possible weaknesses. Anything that looks like an injection point needs authorized testing to confirm. The score starts at 100; each kind of problem costs 25 / 10 / 4 points (high / medium / low), repeats of the same kind count a quarter, no single category can cost more than 35, and informational notes cost nothing. A 90 / 75 / 60 / 40 or better earns A / B / C / D.