Skip to main content

Is hq-accounts.com a Scam? Security Check Results - Web Commerce Communications Limited dba WebNic.cc Reviews

hq-accounts.com favicon

Is hq-accounts.com Safe? Security Analysis for Web Commerce Communications Limited dba WebNic.cc

Check if hq-accounts.com is a scam or legitimate. Free security scan and reviews.

TechnologyN/asmall
HTML5CSS3JavaScriptjQueryBootstrap+4 more
Analyzed 8/2/2025Completed 6:25:01 PM
56
Security Score
MEDIUM RISK

AI Summary

The website hq-accounts.com operates as an e-commerce platform specializing in the sale of social media accounts across multiple platforms including Facebook, Twitter, Instagram, TikTok, and Gmail. The business targets individuals or entities seeking ready-made accounts for marketing, advertising, or other purposes. The market position is niche, focusing on providing accounts with various features such as two-factor authentication, verified emails, and geographic IP registration. The company behind the domain is registered as Web Commerce Communications Limited dba WebNic.cc, with the domain created in 2019, indicating a stable presence. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript with jQuery and Bootstrap frameworks, and integrates analytics tools like Google Analytics and Yandex Metrica. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and some security headers, but lacks comprehensive security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The business model involves selling digital assets that are often associated with illicit activities, which raises ethical and legal concerns. Overall, the website is functional and professionally designed but has notable gaps in privacy compliance and security transparency. Strategic improvements in these areas are recommended to enhance trustworthiness and regulatory adherence.

Detected Technologies

HTML5CSS3JavaScriptjQueryBootstrapGoogle FontsYandex MetricaGoogle AnalyticsCloudflare DNS

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The business operates in the technology and e-commerce sectors, focusing on the sale of social media accounts and related digital assets. Its competitive advantage lies in offering a wide variety of accounts with features like 2FA, verified emails, and geographic IP registration. Revenue streams are primarily from direct sales of these accounts. The target customer segments include marketers, advertisers, and possibly actors seeking to leverage social media accounts for various campaigns. The partnership ecosystem is not explicitly detailed, and no subsidiaries or related domains were identified. Growth indicators include a diverse product catalog and multi-language support (Russian and English). The business model is transactional with a focus on volume sales and niche digital goods.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (2)

e*****@navalcadets.com
m*****@firemail.de

Security Posture Analysis

Comprehensive Security Assessment

The security maturity level is moderate. The site uses HTTPS and some security headers but lacks a published security policy, incident response plan, or vulnerability disclosure program. No abuse or security contact emails are provided. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other data protection regulations. No explicit vulnerabilities or exposed sensitive data were detected in the HTML content. The use of analytics and tracking scripts suggests moderate user tracking without clear privacy controls. Overall, the security culture appears minimal, with room for significant improvement in transparency and compliance.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement and publish a comprehensive privacy policy and cookie policy with explicit user consent mechanisms.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Web Commerce Communications Limited dba WebNic.cc

Description:

High quality accounts for sale. Buy Facebook, Twitter, Instagram, TikTok, Gmail and other social media accounts for cheap price!

Key Services:
Sale of Facebook accountsSale of Facebook promoted accountsSale of Facebook Business Manager accountsSale of Gmail accountsSale of TikTok, Twitter, Instagram, LinkedIn, Reddit accountsSale of email accounts
Content Quality:

good

Branding:

moderate

Technical Stack

Technologies:
HTML5CSS3JavaScriptjQueryBootstrapGoogle FontsYandex MetricaGoogle AnalyticsCloudflare DNS
Frameworks:
Bootstrap
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
65/100
Best Practices:
  • Use of HTTPS
  • No exposed sensitive data in HTML
  • Use of 2FA mentioned for accounts sold

Analytics & Tracking

Services:
Google AnalyticsYandex Metrica
Tracking Level:moderate
Privacy Compliance:poor

Advertising & Marketing

Tracking Pixels:
Yandex Metrica
Marketing Tools:
Yandex Metrica
Transparency Level:basic

Website Quality Assessment

Design Quality:good
User Experience:good
Content Relevance:good
Navigation Clarity:good
Professionalism:good
Trustworthiness:moderate

Key Observations

1

Website is an e-commerce platform selling social media accounts and related digital assets.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

0/100
Score
Analysis failed - content could not be retrieved

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

Third-party services without privacy policy

HIGH

Detected services: Google Analytics, Facebook, Twitter, Google APIs

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy85% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

55/100
Score

DMARC not enforcing

MEDIUM

DMARC policy is set to "none"

No DMARC reporting

LOW

DMARC aggregate reports not configured

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:_spf.mx.cloudflare.net ~all
DNS Lookups:1/10
Policy:~all
DMARC Details
Policy:none

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

95/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 61 days

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:hq-accounts.com
Issuer:R10
Valid Until:10/3/2025 (61 days)
SANs:hq-accounts.com, www.hq-accounts.com

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

65/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Transfer Lock Not Enabled

MEDIUM

Domain can be transferred without authorization

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

DMARC Policy Set to None

LOW

DMARC is configured but not enforcing any policy

Domain Registration Details

Domain Age
5 years(mature)
Expiry Risk
medium(28 days)
Protection Level
noneDNSSEC OFF
Suspicious Indicators Detected
  • No domain protection locks enabled

DNS Records

A Records:87.120.205.187
Name Servers:
beth.ns.cloudflare.com
toby.ns.cloudflare.com
MX Records:
79: route2.mx.cloudflare.net
23: route3.mx.cloudflare.net
77: route1.mx.cloudflare.net
SOA:Serial: 2379148436, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:68ms

SPF Analysis

SPF Record:
v=spf1 include:_spf.mx.cloudflare.net ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a custom or unknown CMS with a modern front-end stack including Bootstrap and jQuery. Hosting is via Cloudflare, providing CDN and DNS services. Performance is moderate with asynchronous loading of analytics scripts. SEO is well addressed with meta tags, Open Graph tags, and canonical URLs. Mobile optimization is good, and navigation is clear with multi-language support. Technical debt appears low but the lack of CMS or platform identification limits deeper analysis. Opportunities exist to modernize JavaScript usage and improve accessibility compliance. No critical technical risks were identified that would impact business operations.
Analyze Another Website