Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://example.com

67%

Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

example.com security check

Name: example.com security check — Caution advised | Wordle
Item: example.com
Rating: 67
Author: Wordle

Interactive passive security check for example.com: grade C (67/100). Public OSINT only · inventKeys=false.

/100

Grade C

Company website · Services · Social

Company website

https://example.com

Services & products

No service or product links found on the scanned pages.

Social & LinkedIn

No social or LinkedIn company links found on the scanned pages.

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Wordle Official Security Report badge -->
<a href="https://wordle.review/example.com/#security-report" title="Wordle Official Security Report for example.com" rel="noopener"><img src="https://wordle.review/security-check/assets/official-security-report-seal-v20261102w.png" alt="Wordle Official Security Report · score 67/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for example.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP172.66.147.243
ASNAS13335
HostingCloudflare, Inc.
GeoSan Francisco, California, United States
PTR—
Nameservershera.ns.cloudflare.com, elliott.ns.cloudflare.com
MX0
SPF"v=spf1 -all"

Map pending — IP geolocation not available (inventKeys=false).

Query
example.comRequested hostname
IP
—Resolved A record
ASN
—Hosting org
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · MX/SPF/PTR · ipwho.is · OpenStreetMap · hosting-check · tool=vendor.hosting_check (passive only). Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

Domain age · domain-age-checker · vendor.domain_age

31 years, 2 months, 29 days

Veteran (10+ years)

Registrar—

Registered—

Domain age31 years, 2 months, 29 days

Age bandVeteran (10+ years)

Registry / location—

Public RDAP / WHOIS only · domain-age-checker · tool=vendor.domain_age. Soft-fail when WHOIS is blocked — we never invent registrar or age.

Website worth · free TLDs · age

Est. midpoint$115,911,000

Range$4,374,000 – $227,448,000

Confidencehigh

Traffic (est.)2,430,000 – 8,100,000 / mo

RPM$18–$78

MonetizationHigh

Adapted from olivernashivy/site-worth · tool=vendor.site_worth · indicative only · inventKeys=false.

Same-name free extensions

example.app · available
example.dev · available
example.info · available
example.me · available
example.xyz · available
example.online · available
example.site · available
example.tech · available
example.cloud · available
example.store · available

Checked 21 TLDs for “example” · 8 registered · 3 unknown · DNS + RDAP only · tool=vendor.domain_scanner · inventKeys=false.

Highlights

Positive Highlights

Final URL is served over HTTPS.
Domain registration age is mature (31+ years via RDAP).

Negative Highlights

No HSTS header: Browsers will not force HTTPS on return visits without Strict-Transport-Security.
No Content-Security-Policy: CSP helps limit XSS and unwanted script loads.
No X-Content-Type-Options: nosniff reduces MIME-sniffing attacks.
No clickjacking protection: Set X-Frame-Options or CSP frame-ancestors.
No privacy policy found: Sites that collect data should publish a privacy policy.
No returns or refund policy found: Legitimate shops publish how to return goods and get money back.

Derived from this scan’s findings, RDAP, TLS, and enrichment only · tools=vendor.site_worth,vendor.domain_age,vendor.hosting_check,vendor.domain_scanner · inventKeys=false.

Review Details

Company Evaluation

Company identity from public registration is limited in this pass. Confirm ownership through official channels before high-stakes trust. Domain age from RDAP is about 31 year(s) (11404 days).

Webshop Evaluation

Heuristic site-worth model (inventKeys=false) estimates midpoint value around $115,911,000 with monetization potential “High”. This is not an appraisal.

Technical Evaluation

TLS details were incomplete or failed in this passive pass — confirm certificate validity manually. Hosting/ASN signal points to Cloudflare, Inc. (passive IP geolocation / DNS).

How we scored example.com

Positive signals

No Content-Security-Policy: CSP helps limit XSS and unwanted script loads.
No X-Content-Type-Options: nosniff reduces MIME-sniffing attacks.
No Referrer-Policy: A Referrer-Policy limits leakage of path/query in Referer headers.
No Permissions-Policy: Permissions-Policy can disable unused powerful browser features.
Server header discloses software: Version banners help attackers fingerprint the stack.
No privacy policy found: Sites that collect data should publish a privacy policy.

Risk signals

No HSTS header: Browsers will not force HTTPS on return visits without Strict-Transport-Security.
No clickjacking protection: Set X-Frame-Options or CSP frame-ancestors.

Findings

No HSTS header: Browsers will not force HTTPS on return visits without Strict-Transport-Security.
No Content-Security-Policy: CSP helps limit XSS and unwanted script loads.
No X-Content-Type-Options: nosniff reduces MIME-sniffing attacks.
No Referrer-Policy: A Referrer-Policy limits leakage of path/query in Referer headers.
No Permissions-Policy: Permissions-Policy can disable unused powerful browser features.
No clickjacking protection: Set X-Frame-Options or CSP frame-ancestors.
Server header discloses software: Version banners help attackers fingerprint the stack.
No privacy policy found: Sites that collect data should publish a privacy policy.
No terms of service found: Terms help visitors understand the commercial relationship.
No returns or refund policy found: Legitimate shops publish how to return goods and get money back.
No security.txt: RFC 9116 security.txt helps researchers report issues. Optional but recommended.

Technical details

Analyzed 2026-11-03T10:42:06Z interactive_secscan More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com