Skip to main content

Is script.ac a Scam? Security Check Results - HUMAN Security Inc. Reviews

H

Is script.ac Safe? Security Analysis for HUMAN Security Inc.

Check if script.ac is a scam or legitimate. Free security scan and reviews.

TechnologyUnited Statessmall
Analyzed 9/5/2025Completed 12:41:32 AM
50
Security Score
MEDIUM RISK

AI Summary

The domain script.ac is registered to HUMAN Security Inc., a US-based technology company founded in 2020. The website content is currently inaccessible due to an Access Denied error likely caused by Cloudflare's Web Application Firewall (WAF), preventing any direct analysis of the site's content, metadata, or business information. The domain registration data is consistent and legitimate, with no privacy protection used, indicating transparency in ownership. However, the lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. Technically, the domain uses Cloudflare DNS services, suggesting a standard security infrastructure, but no further details on SSL configuration, security headers, or technology stack are available. The absence of visible content or metadata means no information on privacy policies, cookie consent, terms of service, or contact details can be extracted. This lack of transparency impacts the overall trust and credibility assessment. From a security perspective, the presence of a WAF blocking access may indicate proactive security measures, but it also restricts external security evaluation. No vulnerabilities or security best practices can be confirmed or denied. The domain age and registrant information support legitimacy, but the inability to review the website content or policies limits risk assessment. Overall, the site is rated low in content quality, technical implementation, security posture, privacy compliance, and business credibility due to blocked access. Strategic recommendations focus on enabling controlled access for security and compliance audits and publishing essential policies and contact information to improve trust and transparency.

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

HUMAN Security Inc. operates in the technology sector with a domain registered in 2020, indicating a relatively new company. The lack of accessible website content prevents detailed insights into their market positioning, business model, or key services. The use of Cloudflare DNS suggests a focus on security and performance. No partnerships, subsidiaries, or additional business relationships are identifiable from the data. The company appears to maintain standard domain registration practices without privacy protection, which supports legitimacy. However, the absence of public-facing information limits competitive analysis and growth indicators.

Security Posture Analysis

Comprehensive Security Assessment

The security posture cannot be fully assessed due to the website being blocked by Cloudflare's WAF, resulting in an Access Denied error. While this indicates some level of security control, no details on SSL configuration, security headers, or vulnerability management are available. There is no evidence of privacy policies, incident response contacts, or certifications. The domain registration is consistent and transparent, which is a positive trust indicator. The inability to access the site content or metadata is a significant gap in evaluating compliance with GDPR or other regulations. Incident response readiness and security culture indicators remain unknown.

Strategic Recommendations

Priority Actions for Security Improvement

1

Enable controlled access or whitelist security audit IPs to allow external security and compliance assessments.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Cloudflare Detected

Access Denied error page detected with Cloudflare nameservers indicating WAF blocking or restricted access.

Analysis results may be incomplete. For accurate analysis, please contact guard@offseq.com

Business Insights

Company:

HUMAN Security Inc.

Content Quality:

poor

Technical Stack

Security Assessment

0

Analytics & Tracking

Advertising & Marketing

Website Quality Assessment

Design Quality:poor
User Experience:poor
Content Relevance:poor
Navigation Clarity:poor
Professionalism:poor
Trustworthiness:low

Key Observations

1

Website content is inaccessible due to Access Denied error likely caused by Cloudflare WAF or security restrictions.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

15/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

50/100
Score

No Privacy Policy found

HIGH

GDPR requires a clear and accessible privacy policy

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

GDPR Compliance Analysis

Privacy Policy0% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
phone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

2/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Critical sector without clear security compliance

HIGH

Detected sectors: digital

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

40/100
Score

No SPF record found

HIGH

SPF helps prevent email spoofing

No DKIM record found

MEDIUM

DKIM adds cryptographic signatures to emails

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

No email authentication configured

CRITICAL

Domain is vulnerable to email spoofing

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

95/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 72 days

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:script.ac
Issuer:Amazon RSA 2048 M03
Valid Until:11/16/2025 (72 days)
SANs:script.ac

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

70/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Delete Lock Not Enabled

LOW

Domain can be deleted without additional verification

No DMARC Record

MEDIUM

DMARC policy not configured

Domain Registration Details

Domain Age
5 years(mature)
Expiry Risk
low(193 days)
Protection Level
basicDNSSEC OFF

DNS Records

A Records:108.157.214.122, 108.157.214.126, 108.157.214.11, 108.157.214.117
AAAA Records:2600:9000:2334:6c00:4:7130:f100:93a1, 2600:9000:2334:9c00:4:7130:f100:93a1, 2600:9000:2334:9e00:4:7130:f100:93a1, 2600:9000:2334:ba00:4:7130:f100:93a1, 2600:9000:2334:200:4:7130:f100:93a1, 2600:9000:2334:1c00:4:7130:f100:93a1, 2600:9000:2334:2200:4:7130:f100:93a1, 2600:9000:2334:6200:4:7130:f100:93a1
Name Servers:
algin.ns.cloudflare.com
marge.ns.cloudflare.com
SOA:Serial: 2381419433, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:44ms

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The technical infrastructure is partially visible through DNS data showing Cloudflare as the hosting provider, indicating use of a CDN and security services. However, no HTML content beyond an Access Denied error page is available, preventing analysis of the technology stack, frameworks, CMS, or performance characteristics. No scripts, meta tags, or SEO elements are detectable. The lack of accessible content suggests potential technical restrictions or security configurations that limit external visibility. Modernization opportunities include improving content accessibility and publishing technical metadata to support SEO and compliance.
Analyze Another Website