Is This a Safe WebsiteStart with the vendor relationship
A website is one piece of vendor evidence. Record the legal business name, expected official hostname, contact obtained independently, intended data access, and payment purpose. Do not treat a polished site or a clean URL result as approval to send funds or customer data.
Identity, technical and reputation evidence
Check the relevant public business registry and compare the registered entity with the contract and invoice. Registration age and registrant visibility are contextual evidence, not a safety score. Inspect certificates in the browser and request security documentation through a known contact. Current reputation checks require an external service and are not performed here.
Printable review record
Use fields: vendor; expected hostname; independent contact; registry evidence and date; certificate observations; reputation source and time; payment-verification contact; unresolved issues; reviewer; decision; next review date. A fictional vendor asking for a new bank account fails the independent payment-verification step even if its website looks unchanged.