01
What an Evidence Check may examine
The exact checks depend on what you submit. SafeResponses separates direct observations, technical signals, pattern analysis, and unknowns instead of presenting a guess as a verified fact.
Websites and links
- Submitted destination and HTTPS formatting
- Public DNS availability
- Public RDAP registration date when available
- Punycode, numeric-address, and domain-pattern warnings
- Comparison with the claimed sender name
Email and phone
- Email syntax and public MX records
- Supplied From, Reply-To, SPF, DKIM, and DMARC header signals
- Phone format, carrier, and line type when lookup is available
- Explicit warnings that caller ID and supplied headers can be forged
Offers and payments
- Urgency, secrecy, credential, and remote-access requests
- Payment-method reversibility and purchase protection clues
- Off-platform and advance-payment patterns
- Category-specific seller and job-offer warning signs