Security & Transparency
Don’t take our word for it. Below are the independent services that check whether a website is safe, what each one reports about utilitiesbunker.com, and a link to see the current result yourself.
What we will never do
- Ask you to download or run a program. Every tool works inside your browser; there is nothing to install.
- Ask for a password, account or payment details. The site has no accounts and sells nothing.
- Contact you to say your computer or this site has a problem you must fix by installing something.
Our only website is utilitiesbunker.com. If someone sends you a file or a link “from Utilities Bunker”, it isn’t from us: please let us know.
Site facts
From the public domain registry and the site’s live certificate. Anyone can confirm them in the public record links below.
- Domain registered
- 29 September 2025
- Registered until
- 29 September 2029
- Registrar
- Cloudflare, Inc. (transfer lock on)
- HTTPS certificate
- Google Trust Services, renewed automatically
- Served through
- Cloudflare
- Official website
- utilitiesbunker.com only
Reputation and blocklist checks
These services decide whether browsers, antivirus programs and company firewalls warn people away from a website. Each link opens that service’s own, current report on utilitiesbunker.com.
-
Google Safe BrowsingMalware and phishing warnings in Chrome, Firefox and SafariPassNo unsafe content foundchecked 15 Oct 2026View report → (Google Safe Browsing, opens in a new tab)
-
Microsoft SmartScreenWarnings in Edge and WindowsPassNo warning shownchecked 15 Oct 2026View report → (Microsoft SmartScreen, opens in a new tab)
Microsoft has no public lookup page; the link is its site-review form.
-
VirusTotalDozens of antivirus and URL-scanning engines at oncePassNo security vendor flags itchecked 15 Oct 2026View report → (VirusTotal, opens in a new tab)
-
Norton Safe WebNorton’s website ratingsPassNo issues foundchecked 15 Oct 2026View report → (Norton Safe Web, opens in a new tab)
-
McAfeeMcAfee web reputation and categoriesPassNo issues foundchecked 15 Oct 2026View report → (McAfee, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
Kaspersky Threat IntelligenceKaspersky’s domain reputationPassNo issues foundchecked 15 Oct 2026View report → (Kaspersky Threat Intelligence, opens in a new tab)
-
BitdefenderBitdefender web protectionPassNo issues foundchecked 15 Oct 2026View report → (Bitdefender, opens in a new tab)
Bitdefender has no public report page; the link explains its browser checker.
-
Trend Micro Site SafetyTrend Micro web reputationPassNo issues foundchecked 15 Oct 2026View report → (Trend Micro Site Safety, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
Cisco TalosReputation used by Cisco firewalls and e-mail securityPassNo issues foundchecked 15 Oct 2026View report → (Cisco Talos, opens in a new tab)
-
Fortinet FortiGuardWeb filter category and rating used by Fortinet firewallsPassNo issues foundchecked 15 Oct 2026View report → (Fortinet FortiGuard, opens in a new tab)
-
Palo Alto NetworksURL filtering category used by Palo Alto firewallsPassNo issues foundchecked 15 Oct 2026View report → (Palo Alto Networks, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
Broadcom WebPulse (Symantec / Blue Coat)Website category used by Symantec and Blue Coat web gateways and filtersPassCategorized as Technology/Internetchecked 15 Oct 2026View report → (Broadcom WebPulse (Symantec / Blue Coat), opens in a new tab)
Confirmed by Broadcom's Site Review team after a review request on 15 October 2026.
-
Check PointURL category used by Check Point firewallsPassNo issues foundchecked 15 Oct 2026View report → (Check Point, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
IBM X-Force ExchangeIBM’s threat-intelligence risk scorePassNo issues foundchecked 15 Oct 2026View report → (IBM X-Force Exchange, opens in a new tab)
-
Sucuri SiteCheckMalware, injected code and blocklistsPassNo malware or blocklisting foundchecked 15 Oct 2026View report → (Sucuri SiteCheck, opens in a new tab)
-
URLVoidMany blocklists at oncePassNo engine lists itchecked 15 Oct 2026View report → (URLVoid, opens in a new tab)
-
URLhaus (abuse.ch)Known malware-distribution addressesPassNot listedchecked 15 Oct 2026View report → (URLhaus (abuse.ch), opens in a new tab)
-
SpamhausSpam and abuse domain blocklistsPassNot listedchecked 15 Oct 2026View report → (Spamhaus, opens in a new tab)
-
MXToolbox blacklist checkDNS-based blocklists used by mail serversPassNot listedchecked 15 Oct 2026View report → (MXToolbox blacklist check, opens in a new tab)
-
AlienVault OTXCommunity threat reportsPassNo threat reportschecked 15 Oct 2026View report → (AlienVault OTX, opens in a new tab)
-
urlscan.ioPublic scans of the live pagesPassNo malicious verdictschecked 15 Oct 2026View report → (urlscan.io, opens in a new tab)
-
ScamAdviserTrust score for shoppersPassNo issues foundchecked 15 Oct 2026View report → (ScamAdviser, opens in a new tab)
-
IPQualityScoreDomain risk scorePassNo issues foundchecked 15 Oct 2026View report → (IPQualityScore, opens in a new tab)
-
Web of TrustCommunity ratingsPassNo issues foundchecked 15 Oct 2026View report → (Web of Trust, opens in a new tab)
-
zveloWebsite categories and phishing detection used by many web filtersPassTechnology; phishing not detectedchecked 15 Oct 2026View report → (zvelo, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
PhishTankCommunity database of phishing sitesPassNot in the databasechecked 15 Oct 2026View report → (PhishTank, opens in a new tab)
Enter https://utilitiesbunker.com/ in the search box.
-
CRDF Threat CenterConfirmed malicious-site blocklistPassNo listing foundchecked 15 Oct 2026View report → (CRDF Threat Center, opens in a new tab)
Enter utilitiesbunker.com on the lookup page.
-
QutteraMalware scan of the live site plus nine blocklistsPass0 malicious files; not blacklistedchecked 15 Oct 2026View report → (Quttera, opens in a new tab)
Blocklists it checked: Quttera Labs, Spamhaus (ZRD, Zen, CSS), Yandex Safe Browsing, PhishTank, Google Safe Browsing, URLhaus and QBMA — all clean.
-
Cloudflare Radar URL ScannerFull scan of the live homepage: requests, scripts, certificates, risksPassNo security classification; 0 riskschecked 15 Oct 2026View report → (Cloudflare Radar URL Scanner, opens in a new tab)
It also listed one “security violation”: Cloudflare’s own analytics script refused the scanner’s request because the scanner sends an extra header (signature-agent) that the analytics server does not accept. That is between the scanner and Cloudflare’s analytics server; nothing on our pages caused it, and it is not a risk to visitors.
-
BrightCloud (OpenText)Web reputation used by several firewall and router makersPartialModerate risk, 50 / 100checked 15 Oct 2026View report → (BrightCloud (OpenText), opens in a new tab)
It found no infections in the past 12 months. The score is held down by low popularity and by a domain age it lists as one month, although its own WHOIS section, and the registry record below, show the domain was registered on 29 September 2025. We have asked BrightCloud to update it.
-
Scam DetectorAutomated trust scorePartial45.5 / 100checked 15 Oct 2026View report → (Scam Detector, opens in a new tab)
Its report shows no phishing, malware or spam findings. The low score is because its crawler could not read our pages, so it scored our privacy policy, terms and contact page as missing. All three exist (linked at the bottom of every page). We have asked Scam Detector to re-scan.
Security configuration tests
These tests grade how the site is set up: encryption, the security headers sent with every page, and the public certificate record. Anyone can re-run them.
-
Qualys SSL LabsHTTPS encryption and certificate setupPassGrade A+ on all 6 addresseschecked 16 Oct 2026View report → (Qualys SSL Labs, opens in a new tab)
The site is reached through three IPv4 and three IPv6 addresses; each one was graded separately.
-
Internet.nlModern standards: HTTPS, IPv6, DNSSEC, security optionsPartialScore 98%checked 16 Oct 2026View report → (Internet.nl, opens in a new tab)
IPv6, DNSSEC, route security (RPKI), CAA, security.txt, ciphers and certificate all pass. The one remaining item is that the network edge still accepts an older SHA-1 signature during the encryption handshake for very old devices; that setting belongs to Cloudflare, which serves the site, and cannot be changed by site owners.
-
Mozilla ObservatorySecurity headers and cookie settingsPartialGrade B, 75 / 100 (10 of 12 tests pass)checked 16 Oct 2026View report → (Mozilla Observatory, opens in a new tab)
Cookies, HSTS, framing, redirection and the other header tests pass. Two points are taken off: our Content Security Policy still allows inline scripts, which Google’s advertising and several tools need, and Google’s analytics and advertising scripts cannot carry Subresource Integrity hashes because Google updates them continually.
-
SecurityHeaders.comSecurity headersPassGrade Achecked 16 Oct 2026View report → (SecurityHeaders.com, opens in a new tab)
All six recommended headers are present. A+ would need a policy without inline scripts (see Mozilla Observatory above).
Public record
Facts about the domain and its certificates that are kept in public registries, so anyone can confirm them.
-
ICANN registration lookupWho registered the domain, when, and until whenRecordRegistered 29 Sep 2025; paid until 29 Sep 2029checked 15 Oct 2026View report → (ICANN registration lookup, opens in a new tab)
-
crt.shEvery HTTPS certificate ever issued for the domain (Certificate Transparency logs)RecordIssued by Google Trust Serviceschecked 15 Oct 2026View report → (crt.sh, opens in a new tab)
-
Internet ArchivePublic snapshots of the site over time (Wayback Machine)RecordFirst snapshot 15 Oct 2026checked 15 Oct 2026View report → (Internet Archive, opens in a new tab)
-
Cloudflare Radar (new scan)Run a fresh scan of the live site yourselfRecordRun a scanView report → (Cloudflare Radar (new scan), opens in a new tab)
Your files and inputs stay on your device
Every tool runs in your browser. Files you open, numbers you type and results you get are processed on your own computer and are never uploaded to us; there are no accounts and nothing to sign in to. The privacy policy explains the details, including the analytics and advertising cookies.
A few tools exist to look something up on the internet, so they contact another service, and only when you use them:
| Tool | Contacts | Why |
|---|---|---|
| IP Lookup | ipapi.co, get.geojs.io, api.ipapi.is, ipinfo.io, OpenStreetMap tiles | To find where an IP address is and draw it on a map |
| DNS Lookup, Ping, Traceroute, HTTP and port checks | cloudflare-dns.com, dns.google, api.globalping.io | To ask public DNS servers and measurement probes, when you press the button |
| Map Measuring Tool | OpenStreetMap / Esri map tiles, nominatim.openstreetmap.org | To show the map and find the address you type |
| Code Editor, JavaScript and Python obfuscators | cdn.jsdelivr.net | To load the editor and language engines (code you type is not sent) |
These are the only outside addresses the site’s security policy lets those pages reach; on every other page, scripts and data requests are limited to this site, Google Fonts, Google’s analytics and advertising services, and OpenStreetMap’s address search.
Protections sent with every page
| Protection | What it does for you |
|---|---|
| HTTPS everywhere (HSTS) | Your browser always uses an encrypted connection to this site, even if you type “http://”. |
| Content Security Policy | Pages may load code only from this site and a short list of named services, which blocks injected scripts. |
| Framing protection | Other sites can’t show our pages inside theirs to trick you into clicking. |
| Camera, microphone and location locked | Only the tools that need them (such as the webcam and microphone tests, or the map) may ask, and only on their own page. |
| Secure cookies | Cookies set by our server are HTTPS-only and can’t be read by page scripts. |
Security changes
- Older, weaker encryption methods switched off (only modern ciphers are accepted), CAA records added so only the certificate authorities we use can issue certificates for the site, and the security.txt contact file published in its standard /.well-known/ location.
- Security headers (Content Security Policy, HSTS, framing and MIME-sniffing protection) and secure cookie settings now sent with every page.
- This page published, with links to every independent check.
Report a security problem
Found a vulnerability, or a page that looks wrong? E-mail [email protected]. We read every report and reply to genuine ones. Our contact details are also published in the standard security.txt file.
If a browser or antivirus program ever warns you about this site, please tell us which one and what it said: it helps us get any mistake corrected quickly.
About this page
Each result is what that service reported on the date shown; click “View report” for its current result, which is always the authority. Service and company names are trademarks of their owners and are used only to identify who performed each check. Listing a service does not mean it endorses, certifies or partners with Utilities Bunker.