Skip to main content

Is credbull.com a Scam? Security Check Results - Atom Reviews

credbull.com favicon

Is credbull.com Safe? Security Analysis for Atom

Check if credbull.com is a scam or legitimate. Free security scan and reviews.

E-commerceN/amedium
New Relic Browser monitoringIntercom chat widgetGoogle Tag ManagerBootstrap CSS frameworkCustom fonts (Product Sans, Plus Jakarta Sans)
Analyzed 9/6/2025Completed 5:00:54 PM
78
Security Score
LOW RISK

AI Summary

Atom operates a premium domain marketplace platform, offering curated brandable domain names such as CredBull.com for sale. The website targets domain investors and businesses seeking strong brand identities through premium domains. Atom positions itself as a professional and trusted marketplace with additional branding services like free logos. The technical infrastructure leverages modern web technologies including Bootstrap for responsive design, New Relic for performance monitoring, and Intercom for customer engagement. The site is well-optimized for mobile and desktop users, providing a smooth user experience. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and privacy policies are lacking. Overall, the site presents a professional front but could improve transparency around privacy and security policies. The absence of WHOIS data for the domain is a concern but does not detract significantly from the site's apparent legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response contacts to bolster trust and compliance.

Detected Technologies

New Relic Browser monitoringIntercom chat widgetGoogle Tag ManagerBootstrap CSS frameworkCustom fonts (Product Sans, Plus Jakarta Sans)

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

Atom's business model centers on domain brokerage and sales, targeting entrepreneurs, startups, and established companies looking for premium domain names. The marketplace offers a large inventory of curated domains, positioning itself competitively in the domain sales industry. Revenue streams likely include domain sales commissions and branding services. The presence of Trustpilot (though hidden) and multiple contact channels indicates a focus on customer trust and support. The company appears medium-sized with a focus on e-commerce and technology sectors. The platform's integration with analytics and marketing tools suggests a data-driven approach to customer engagement and sales optimization. No parent or subsidiary companies were identified from the data. The business ecosystem includes partnerships with helpdesk and chat service providers to enhance customer service.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

s*****@atom.com

Phone Numbers (1)

877*******

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to good security maturity level. HTTPS is enforced, and monitoring tools like New Relic are integrated for performance and error tracking. However, explicit security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options are not evident, which could expose the site to certain web-based attacks. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of published security policies or incident response contacts limits transparency and preparedness perception. GDPR compliance indicators are weak due to missing privacy and cookie policies. The site uses secure forms and does not expose sensitive information. Overall, the security posture is adequate but would benefit from enhanced policy disclosures and technical header implementations.

Strategic Recommendations

Priority Actions for Security Improvement

1

Publish comprehensive privacy and cookie policies with clear GDPR compliance statements.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Atom

Description:

CredBull.com is an 8-character, two-syllable domain name that exudes power, strength, and dynamism. The first syllable, Cred, is a play on the English word credence, which suggests trustworthiness and authority. The second syllable, Bull, is associated with strength and bullishness. The domain is offered for sale on Atom, a premium domain marketplace.

Key Services:
Domain salesDomain brokerageBranding services including free logo with purchase
Content Quality:

good

Branding:

consistent

Technical Stack

Technologies:
New Relic Browser monitoringIntercom chat widgetGoogle Tag ManagerBootstrap CSS frameworkCustom fonts (Product Sans, Plus Jakarta Sans)
Frameworks:
Bootstrap
Platforms:
Web
Performance:

fast

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
80/100
Best Practices:
  • HTTPS enforced
  • Use of security monitoring tools (New Relic)
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
New Relic BrowserGoogle Tag Manager
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
New Relic
Marketing Tools:
Intercom
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:high

Key Observations

1

Website is a premium domain marketplace page for CredBull.com domain sale

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

70/100
Score

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Weak Referrer-Policy configuration

LOW

Current value: "same-origin"

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

73/100
Score

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

47/100
Score

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

98/100
Score

No BIMI Record

LOW

BIMI displays brand logos in email clients

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:_spf.google.com include:_spf.chargedesk.com include:spf.mydomainprovider.com -all
DNS Lookups:3/10
Policy:-all
DKIM Selectors Found
Selector:google(1416-bit rsa)
Selector:k1(1472-bit rsa)
Selector:s1(1440-bit rsa)
DMARC Details
Policy:quarantine
Aggregate Reports:ea1422efa133.a@dmarcinput.com
Forensic Reports:ea1422efa133.f@dmarcinput.com
MTA-STS Details
Mode:testing
Max Age:1 days

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

75/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 38 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:atom.com
Issuer:WE1
Valid Until:10/14/2025 (38 days)
SANs:atom.com, *.atom.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

Domain Registration Details

Domain Age
30 years(mature)
Expiry Risk
none(651 days)
Protection Level
basicDNSSEC OFF

DNS Records

A Records:172.66.170.130, 104.20.26.89
AAAA Records:2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82
Name Servers:
frank.ns.cloudflare.com
kayleigh.ns.cloudflare.com
MX Records:
1: aspmx.l.google.com
10: alt3.aspmx.l.google.com
10: alt4.aspmx.l.google.com
5: alt1.aspmx.l.google.com
5: alt2.aspmx.l.google.com
SOA:Serial: 2382434951, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:68ms

SPF Analysis

SPF Record:
v=spf1 include:_spf.google.com include:_spf.chargedesk.com include:spf.mydomainprovider.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website uses a modern technology stack including Bootstrap for responsive design, New Relic for real-time monitoring, and Intercom for live chat support. It loads custom fonts and uses Google Tag Manager for analytics management. The site is optimized for mobile devices and demonstrates fast loading times. Accessibility features are basic but present. SEO optimization is good with proper meta tags and Open Graph data. No CMS was explicitly detected. Hosting provider details are not available from the content. The site uses multiple external domains for assets and analytics, all reputable. Technical debt appears low, but improvements in accessibility and security headers could enhance overall robustness.
Analyze Another Website