Unable to find manual contract audit (e.g. Certik, PeckShield, Solidity...)
Unable to fetch contract code from blockchain explorer. In most cases it indicates a scam (which tries to hide intentions by not verifying contract code). Can be ignored for newborn (0-3 days) tokens. Can be ignored for coins (e.g. Harmony) and non-main contracts in case of multi-chain projects.
Additional information: link
Contract creator or owner is blacklisted for past scams
Contract ownership is not renounced (belongs to a wallet)
Contract name (Milkyswap.io) contains non-alphanumeric characters.
Not a direct threat, but may indicate unreliable intentions of developer. Non-alphanumeric chars (,.;!#*&") are extremely rare among low risk tokens.
Token seems to be untradeable: there is no PancakeSwap trading pair and no trading volumes. Ignore for presale.
Token makes many airdrops and seems to be a phishing / airdrop scam
Additional information: link
Unable to find website, listings and other project-related information
Token has a considerable age, but we're still unable to find its website
Token is marked as scam (rug pull, honeypot, phishing, etc.)
Additional information: link
Token has a considerable age, but contract code still is not verified
Token has no active CoinGecko listing / rank
Token has a considerable age, but social accounts / website are missing or have few users
Token has a considerable age, but average PancakeSwap 30d trading volume is low
Token has no active CoinMarketCap listing / rank
Unable to find Telegram and Twitter accounts