What it is
Checks the domain against public malware and phishing feeds, currently URLHaus and PhishTank, both community-reported and updated continuously.
Why it matters
A listing is strong evidence. An absence is weak evidence, since these feeds only know what somebody has reported. Freshly registered phishing domains routinely appear on no list at all for their first few days, which is exactly when they do their work.
How this assessment works
Skopeon Labs queries public infrastructure signals and authoritative network protocols directly from external sensor nodes. All evaluations are completely non-invasive and agentless, assessing observable configurations without sending malicious payloads or disrupting service.
Operational Scope & Limitations
This check evaluates public perimeter responses observable at the time of inquiry. Endpoints protected behind third-party reverse proxies or CDNs reflect the edge configuration of the proxy layer.