CheckURL Terms of Service

These Terms are a binding agreement between you and PWN-ALL Auditing, Reviewing & Testing Cyber Risks CO. L.L.C, registered at 145, Al Mustaqbal Street, Iris Bay Tower 2101-11, Business Bay, Dubai, United Arab Emirates ("PWN-ALL", "we", "us"). "CheckURL" or the "Service" means the public URL-reputation scanner at scan.pwn-all.com, its reports and APIs.

These product terms supplement PWN-ALL's general Terms of Use. These Terms control for CheckURL-specific matters; a separately signed agreement controls to the extent it expressly conflicts. Mandatory rights under applicable law are unaffected.

You must be at least 18 and legally capable of entering this agreement. If you use CheckURL for an organization, you represent that you can bind it. You are responsible for activity through an allocated account and must protect its credentials and promptly report suspected compromise.

Raw reports are publicly accessible without authentication during the configured retention period (currently 40 days). They can include full submitted/normalized/final URLs, screenshots, stored HTML, request URLs and limited captured text bodies, redirects, headers, scores, classifications and findings. noindex is not privacy or access control.

Redacted domain history, aggregate scores, classifications and security signals may remain public indefinitely, and privacy-preserving reviewed threat fingerprints may remain internally. The Privacy Policy describes the exact layers and user controls.

You must not submit a URL containing a secret, token, private document or personal data unless you have authority and a lawful basis for that public processing. If confidentiality is required, do not use the public Service.

You may use CheckURL only for lawful, good-faith defensive analysis and only where you have every permission legally required to submit and scan the target.

You must not:

• use the Service to attack, exploit, disrupt, overload, harass, surveil, evade access controls, discover private infrastructure, or facilitate phishing, malware, fraud or other harm;
• submit internal, private, authenticated or secret-bearing resources, or content you are not permitted to disclose and have processed publicly;
• circumvent proof of work, quotas, rate limits, technical restrictions, account controls, blocked destination ranges or suspension;
• scrape the Service at scale, reverse engineer proprietary scoring thresholds, copy the service or falsely imply that a report is a certification, endorsement or guarantee;
• alter, misrepresent or selectively present a report to deceive, defame or make an unlawful high-impact decision; or
• violate law, contract, intellectual-property, privacy, confidentiality or other third-party rights.

A publicly reachable target is not by itself proof that your proposed scanning or publication is authorized. You are responsible for your target selection and use of results.

CheckURL loads the target in an isolated automated browser, follows redirects and resources, records observable page/network behavior, and may query independent reputation, DNS and registry services. The target, its dependencies and any configured proxy receive requests from scanner infrastructure. The Service validates and blocks private/reserved destinations but can refuse any target or stop a scan.

CheckURL does not provide real credentials, intentionally complete target forms, fuzz, exploit or bypass access controls. Safety probes can dispatch synthetic browser events while blocking resulting requests. A target page can still initiate its own requests during ordinary rendering. You must not treat these controls as authorization for testing beyond the Service.

Reports are automated, point-in-time security opinions based on the evidence providers and target made available. Sites change; providers fail or lag; attackers cloak; heuristics have false positives and false negatives. A high score does not prove safety, and a low score does not prove unlawful or malicious conduct. Confidence describes coverage, not certainty.

An "Official" brand indicator means only that the scanned hostname matches CheckURL's maintained ownership registry; it is not approval, sponsorship or a safety warranty by that brand. Popularity, DNS mail records, TLS, legal identifiers and third-party reputation are contextual signals with the meanings shown in the report.

Do not rely on CheckURL as your only malware/phishing control, due-diligence process, professional advice, regulatory determination or basis for a legal or similarly significant decision. Independently verify important findings and use layered security.

Site owners and affected people may request a correction, fresh scan, raw-report removal or public domain-report opt-out by contacting privacy@pwn-all.com. Include the report URL/ID, the requested correction and evidence of your relationship to the site or data. We may verify authority and may preserve information where law, security or legal claims require it.

Nobody can pay for a better score, correction, review or removal. Republishing a report does not transfer ownership, eliminate context or make you our agent. You are responsible for ensuring your use is accurate, current, fair and lawful.

Public registration is not offered. Existing accounts can receive quotas different from anonymous use. We may change quotas, proof-of-work difficulty, supported checks and access controls; reject or deduplicate scans; or suspend access immediately to protect targets, users, providers or the Service, investigate misuse, comply with law, or enforce these Terms. You may stop using the Service at any time.

The CheckURL software, interface, branding, report design, detection methods and original content are owned by PWN-ALL or its licensors. We grant you a limited, revocable, non-exclusive, non-transferable right to use the Service and link to unmodified public reports in accordance with these Terms. No source-code, trademark, bulk-data or methodology rights are granted.

Target-site content remains the property of its owner. To the extent you control any rights in a submitted URL or material it exposes, you grant PWN-ALL a worldwide, royalty-free license to fetch, reproduce, analyze, hash, display and retain it only as needed to operate, secure and improve CheckURL, publish reports, and enforce rights. You represent that you can grant this license. Security facts, non-personal aggregate data and privacy-preserving fingerprints may be used to improve detection.

The CheckURL Privacy Policy explains public exposure, data sources, automated scoring, providers, transfers, retention and rights. Target sites, threat-intelligence sources, registries, proxies and linked sites operate under their own terms and privacy practices. We do not control or endorse third-party content merely because a report links to or describes it.

To the maximum extent permitted by law, CheckURL is provided "as is" and "as available". We do not promise uninterrupted operation, complete detection, error-free output, fitness for a particular purpose, non-infringement, or that a site or download is safe. We may change, suspend or discontinue all or part of the free Service without liability. Nothing here excludes any warranty or duty that applicable law does not allow us to exclude.

To the maximum extent permitted by applicable law, PWN-ALL and its directors, employees and affiliates are not liable for indirect, incidental, special, exemplary or consequential loss, including lost profits, business, goodwill or data, arising from CheckURL, a target, a missed threat, an incorrect classification, public disclosure caused by your submission, or reliance on a report. Our aggregate liability for a claim will not exceed the fees you paid PWN-ALL for the specific CheckURL service giving rise to it.

You will indemnify and hold those parties harmless from third-party claims and reasonable costs caused by your unlawful or unauthorized submission or use, breach of these Terms, or infringement of another person's rights. This obligation does not apply to the extent prohibited by law or caused by PWN-ALL's own conduct. Nothing limits liability for fraud, gross negligence, willful misconduct or any liability that cannot lawfully be limited.

We may revise these Terms by posting an updated version and date. We will give reasonable prominent notice before a material change when practicable. Changes apply prospectively; if you disagree, stop using the Service. Continued use after the effective date accepts the revised Terms.

These Terms and incorporated policies are the entire agreement for the public CheckURL Service. If a provision is unenforceable, it will be limited to the minimum necessary and the rest remains effective. A failure to enforce is not a waiver. You may not assign these Terms without our consent; we may assign them as part of a restructuring, sale or transfer of the Service. Events beyond reasonable control can excuse delay or nonperformance.

These Terms are governed by the laws of the United Arab Emirates and the Emirate of Dubai, without regard to conflict-of-law rules. Subject to mandatory consumer or other jurisdictional rights, the courts of Dubai, UAE have exclusive jurisdiction. Before filing a claim, contact us and allow a reasonable opportunity to resolve it informally.

PWN-ALL Auditing, Reviewing & Testing Cyber Risks CO. L.L.C
145, Al Mustaqbal Street, Iris Bay Tower 2101-11, Business Bay, Dubai, United Arab Emirates
DET licence 1324553
Legal: legal@pwn-all.com
Product/privacy: privacy@pwn-all.com