Put in a web address and see how old it is, who registered it, and whether the business behind it says who it is.
This will not tell you whether a site is safe. It shows you the facts so you can decide.
Plenty of sites will give you a trust rating out of a hundred. The trouble is that a number gets read as a verdict, and no automated check can actually tell you whether the people behind a website will send you what you paid for.
So this does not score anything. It tells you what it found and leaves the judgement with you, because you know things it does not: how you came across the site, what they are asking you to pay, and whether the price makes any sense.
Nothing here found means nothing here was found. It is not a clean bill of health. A careful fraudster can register a domain a year in advance and put a real company number on the page.
The single most useful thing on this page. Most fraudulent shops are only weeks old, because they get shut down and started again under a new name. A domain registered eleven days ago selling half-price branded goods tells you most of what you need.
If a page says “family run since 1998” and the web address was bought last month, one of those is wrong. Sometimes there is an innocent explanation. Sometimes there very much is not.
A UK business selling online has to publish its company number and a real address. Sites built to disappear skip it, because putting a real company on the page makes them findable afterwards.
Bank transfer has none of the protection a card gives you, and almost every fraud that ends badly involves one. A shop that will not take a card is telling you something.
A phone number, an email, a postcode. If the only way to make contact is a form, you have no way of chasing anybody when the parcel does not turn up.
A working certificate, a returns policy, terms and a privacy page. All legally expected of a UK site and all an afternoon's work, which is exactly why the throwaway ones do not bother.
If you paid by card, ring your bank now and ask about a chargeback. There are time limits and they are shorter than people expect. Do that before anything else.
Report it to Action Fraud on 0300 123 2040, or at actionfraud.police.uk. It feels pointless and it is not: that is how patterns get spotted and sites get taken down.
If you typed a password in, change it wherever else you have used it, starting with your email. That account is the one that resets all the others.
And if you would rather somebody just looked at it with you, ring me on 07904 633775. I will not charge you for ten minutes of telling you whether to worry.
Tell me what is playing up, or send me your web address. You get back one page: what is slow, what is insecure, and what Google cannot see. If the answer is that you do not need me, I will say so.