Current product and payment parameters
- Free check
- Reads public DNS and HTTPS policy data and shows a score, grade, and check summaries without a login.
- Complete report
- 5 USDC per report, including full evidence, prioritized remediation actions, and a printable delivery page.
- Network
- Base Mainnet only. The wallet also needs a small amount of Base ETH for gas.
- Token
- Native USDC on Base at
0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913. - Confirmation
- The system checks the recipient, contract, exact amount, and transaction state, then waits for 2 block confirmations.
- Access
- Unpaid sessions normally remain for 7 days. A verified report remains accessible for 30 days; the expiry shown in the product controls.
Complete an onchain payment
- Run the free check, then select “Unlock complete report.” The system creates a dedicated payment session and recipient address for that report.
- Use the browser-wallet button, or send the exact amount from any wallet to the address shown in the active session.
- For a manual transfer, paste the 66-character transaction hash and select “Verify and deliver.” The report appears automatically after confirmation.
Use only the network, USDC contract, recipient, and amount shown in the current payment session. The voluntary-support address does not unlock a report.
Recover a payment session or report
When a payment session is created, the tool automatically places a private credential in the current address as a #report=... fragment and stores it in the local browser. Reopening the complete recovery link lets the tool retrieve the payment state and report automatically.
A URL fragment is handled by the browser and is not sent with the initial page URL. The tool then submits the credential only in an HTTPS request body to retrieve the report, keeping it out of API query strings. This follows the URI standard's client-side handling of fragments.
The recovery link is the report-access credential. Anyone who has it can view the report, so do not publish, forward, or paste it into another website. A public transaction hash cannot replace the link because it does not prove report-access rights.
Status guide
Waiting for payment or confirmation
Keep the recovery link. After sending a transaction, reopen the link, enter its hash, and verify again if needed. Rechecking the same transaction does not charge it twice.
Paid
Full evidence and remediation actions unlock immediately. The recovery link continues to work during the report-access period, and the report can be printed from the same page.
Session expired
An expired unpaid session no longer accepts verification. Run a new check and create a new session to receive a new recipient and recovery link.
Wrong network, token, recipient, or amount
The report does not unlock. This site cannot reverse a confirmed onchain transfer or automatically recover assets sent through the wrong network, contract, recipient, or amount.
Security and data boundaries
- The tool never needs a wallet seed phrase, private key, or exchange password.
- A browser wallet signs only the transaction the buyer confirms; the site never receives wallet keys.
- Free analytics do not retain domains or sending IPs. Report data is retained only for the checkout and access periods.
- Never send the recovery link or wallet secrets to a third party claiming to offer “manual recovery.”