Safety & Verification Methodology

Safety Checker Methodology & Threat Scoring

We maintain rigorous transparency regarding how our automated security scanner evaluates sports streaming domains and why specific verdicts are rendered.

The 6 Inspection Layers

1. Network Boundary & SSRF Validation: Every submitted host is resolved and evaluated against RFC1918 private IP subnets, loopback interfaces (127.0.0.1), link-local metadata addresses (169.254.169.254), and restricted non-web ports before any network request is initiated.
2. Cryptographic IDN / Punycode Analysis: The scanner inspects domain labels for internationalized characters (`xn--`) and visual homoglyphs (such as Cyrillic lookalikes) used to mimic trusted brands.
3. SSL/TLS Handshake & Certificate Verification: Validates certificate expiration dates, trusted root Certificate Authorities (CAs), and encrypted port 443 availability.
4. HTTP Security Headers: Audits the presence of essential defenses:
   • Strict-Transport-Security (HSTS) — Enforces encrypted communication and defeats SSL-stripping attacks.
   • Content-Security-Policy (CSP) — Restricts malicious cross-site scripting (XSS) and rogue ad frames.
   • X-Frame-Options — Blocks clickjacking overlays.
   • X-Content-Type-Options — Prevents MIME-type sniffing.
5. Brand Impersonation Heuristics: Detects unauthorized combinations of trademarked keywords designed to deceive consumers.
6. Threat Intelligence Matching: Evaluates target host reputations against public databases and real-time blacklists.

Verdict Definitions

• No Major Issues Detected: Valid HTTPS, clean ASCII domain syntax, standard security headers, and no negative threat feed reports.
• Caution Advised: Missing essential security headers, suspicious top-level domain (.xyz, .top), or unofficial brand name usage.
• High Risk Warning: Identified homoglyph spoofing, malicious threat feed records, or deceptive phishing indicators.