Skip to main content

Is tagtoday.net a Scam? Security Check Results - Trustworthy Accountability Group Reviews

tagtoday.net favicon

Is tagtoday.net Safe? Security Analysis for Trustworthy Accountability Group

Check if tagtoday.net is a scam or legitimate. Free security scan and reviews.

MediaN/alarge
HubSpot CMSjQuery 1.7.1Font Awesome 4.6.1Google Fonts (Montserrat)HubSpot Analytics
Analyzed 9/5/2025Completed 8:48:00 AM
69
Security Score
MEDIUM RISK

AI Summary

Trustworthy Accountability Group (TAG) operates as a leading global initiative dedicated to combating criminal activity and enhancing trust and transparency within the digital advertising ecosystem. The organization provides industry-wide certification programs, threat intelligence sharing, and brand safety initiatives, positioning itself as a key player in the media sector. TAG's website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at industry stakeholders including brands, agencies, publishers, and ad tech providers. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies such as jQuery and Google Fonts, and incorporates HubSpot analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and a published security policy or vulnerability disclosure framework. The absence of WHOIS registration data is a notable concern, as it conflicts with the otherwise professional and transparent nature of the site. This discrepancy suggests either privacy protection or a domain registration anomaly, which impacts the overall trust score. No direct company contact emails or phone numbers are publicly listed, with contact primarily facilitated through web forms. The site contains no adult or questionable content and is fully accessible without WAF or security challenges. Overall, TAG's website is a well-executed digital platform serving an essential role in the digital advertising industry, but improvements in transparency regarding domain registration and enhanced security practices are recommended to bolster trust and compliance.

Detected Technologies

HubSpot CMSjQuery 1.7.1Font Awesome 4.6.1Google Fonts (Montserrat)HubSpot Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

TAG holds a strong market position as a non-profit industry initiative focused on digital advertising integrity. Its competitive advantage lies in its comprehensive certification programs and threat intelligence sharing that address fraud, malware, brand safety, and transparency. The business model revolves around membership and certification services, targeting large enterprises, brands, agencies, and technology providers in the media sector. The presence of numerous high-profile platinum members and partner logos indicates a robust partnership ecosystem and industry acceptance. Growth indicators include frequent press releases, data reports, and active community engagement. Strategic observations highlight the importance of maintaining domain registration transparency and expanding direct contact channels to enhance stakeholder trust.

Security Posture Analysis

Comprehensive Security Assessment

The website demonstrates a moderate to good security maturity level with enforced HTTPS, cookie consent, and no visible exposure of sensitive data. However, the lack of security headers such as Content Security Policy (CSP), HSTS, and X-Frame-Options reduces its defense-in-depth posture. No vulnerability disclosure policy or security.txt file is published, limiting external security collaboration. Compliance with GDPR is indicated through privacy and cookie policies. Incident response readiness and security culture indicators are not explicitly documented. The domain registration opacity is a significant compliance and trust gap. Overall, the security posture is adequate but would benefit from enhanced header implementation, explicit security policies, and improved transparency.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement comprehensive security headers including CSP, HSTS, X-Frame-Options, and X-XSS-Protection to strengthen site security.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

Trustworthy Accountability Group

Description:

Trustworthy Accountability Group (TAG) is the leading global initiative fighting to stop criminal activity and increase trust and transparency in digital advertising.

Key Services:
Anti-Fraud programsThreat Intelligence sharingBrand Safety initiativesTransparency programsCertification programsData and Insights reports
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
HubSpot CMSjQuery 1.7.1Font Awesome 4.6.1Google Fonts (Montserrat)HubSpot Analytics
Platforms:
HubSpot
Performance:

moderate

Mobile:

good

Accessibility:

basic

SEO:

good

Security Assessment

Security Score:
85/100
Best Practices:
  • HTTPS enforced
  • Cookie consent banner implemented
  • No exposed sensitive data in HTML

Analytics & Tracking

Services:
HubSpot Analytics
Tracking Level:moderate
Privacy Compliance:good

Advertising & Marketing

Tracking Pixels:
HubSpot Analytics
Marketing Tools:
HubSpot
Transparency Level:good

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is a professional industry initiative focused on digital advertising trust and anti-fraud.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

45/100
Score

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Weak Referrer-Policy configuration

LOW

Current value: "no-referrer-when-downgrade"

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

68/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:spf.protection.outlook.com include:spf.mtasv.net include:2848641.spf01.hubspotemail.net ~all
DNS Lookups:3/10
Policy:~all
DKIM Selectors Found
Selector:selector1(1296-bit rsa)
DMARC Details
Policy:reject
Subdomain Policy:none
Aggregate Reports:dmarc@tagtoday.net
Forensic Reports:dmarc@tagtoday.net

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

75/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 84 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

Partial SSL/TLS Assessment

LOW

Completed 2 of 4 security checks due to time constraints

Certificate Details

Subject:www.tagtoday.net
Issuer:WE1
Valid Until:11/29/2025 (84 days)
SANs:www.tagtoday.net

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

Domain Registration Details

Domain Age
10 years(mature)
Expiry Risk
medium(57 days)
Protection Level
strongDNSSEC OFF

DNS Records

A Records:209.97.148.2
Name Servers:
ns03.domaincontrol.com
ns04.domaincontrol.com
MX Records:
0: tagtoday-net.mail.protection.outlook.com
SOA:Serial: 2025041500, TTL: 600s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:79ms

SPF Analysis

SPF Record:
v=spf1 include:spf.protection.outlook.com include:spf.mtasv.net include:2848641.spf01.hubspotemail.net ~all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on the HubSpot CMS platform, leveraging standard web technologies such as jQuery 1.7.1 and Google Fonts for typography. It uses HubSpot's analytics and marketing tools, including cookie consent banners, indicating a mature marketing infrastructure. Performance is moderate with room for optimization, particularly in loading speed and accessibility compliance. The site is mobile responsive and SEO optimized with proper meta tags and Open Graph data. However, the use of an older jQuery version may pose security risks and modernization opportunities exist. The hosting and platform choice provide stability but limit customization. Overall, the technical infrastructure supports the business needs effectively but could be improved with updated libraries and enhanced security configurations.
Analyze Another Website