| ✔️ ✅ | Red Flag | Why it matters | |------|----------|----------------| | ✔️ | | Data sent over the connection can be intercepted. | | ✔️ | Domain age < 6 months | New domains are often used for short‑term scams. | | ✔️ | Listed on any blacklist (Spamhaus, PhishTank, etc.) | Indicates known malicious activity. | | ✔️ | Multiple unrelated sites on same IP | Suggests a shared host used for disposable sites. | | ✔️ | Content requiring you to download executables, installers, or “cracks” | Classic malware distribution technique. | | ✔️ | Requests for personal credentials or payments without clear business identity | Likely phishing or fraud. | | ✔️ | Obfuscation (JavaScript that hides URLs, encoded strings) | Attackers try to hide malicious code. | | ✔️ | Pop‑ups that mimic system warnings | Social‑engineering attempts. |
If you need help with: