WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Vulnweb.com

Report Date January 25, 2026
Recommendation
Proceed
Overall Summary
Safe
Why we think so

vulnweb.com is an intentionally vulnerable website created by Acunetix for security testing and education. It hosts deliberately insecure web applications for users to practice penetration testing techniques, including SQL injection and cross-site scripting (XSS). The site has moderate traffic, with about 157,000 monthly visits mostly from India, and is classified in the computer security category. It uses reputable technologies like Amazon hosting and nginx servers. No scam reports or legal disputes are linked to this site, as it is a known training platform rather than a commercial or consumer service.

Confidence Score
83%

Risk Insights

🛡️

Legitimate Security Testing Site

Active since 2010 with stable ownership
Regular traffic from security professionals mainly in India
Clean blacklist and phishing status
✅

No Scam or Legal Issues Found

No user complaints or scam reports in searches
No trademarks or brand conflicts noted
Used widely for ethical hacking education

Contradictory Signals

The site intentionally includes vulnerabilities for testing, causing false positives in some automated trust measures.

Signal A: Medium trust score flagged by some scam detectors due to intentional vulnerabilities

Signal B: No actual scam reports or phishing detections from Google Safe Browsing and crypto blacklists

Category Scores

Identity 80/100
Reputation 85/100
Technical 90/100
Content 75/100
Legal 90/100
Business Validity 80/100

Red Flags & Warnings

  • The site contains intentional security vulnerabilities which mimic real risks, resulting in a medium trust score in some scam detection tools; this is expected for a testing platform and not an actual scam.

🔎 Detailed Checks & Analysis

Domain Age & Ownership

Score: 90/100
Passed

"Long registration period and stable registrar, GANDI SAS, indicate a legitimate domain."

Reason: Domain was registered in 2010 and uses a reputable registrar with privacy protection.

Traffic & Engagement

Score: 80/100
Passed

"Most traffic comes from India and nearby regions, reflecting targeted audience for security training."

Reason: Monthly visits are moderate (~157k) with reasonable bounce rate and page depth, consistent with a specialized testing platform.

Technical Stack

Score: 85/100
Passed

"Technology choices reflect common and trusted components used in web applications."

Reason: Uses credible technologies including Amazon hosting, nginx web server, PHP, and standard web frameworks.

Contact Information

Score: 60/100
Passed

"Contact details are limited but presence of social media enhances legitimacy."

Reason: No email addresses listed but phone numbers and a Facebook page are available, providing some contact options.

Brand & Trademark

Score: 90/100
Passed

"Trademark search shows clean record."

Reason: No trademark conflicts or registrations for 'vulnweb' reduce risk of brand impersonation or confusion.

Blacklist & Security Checks

Score: 90/100
Passed

"Security scans confirm a clean reputation despite intentional vulnerabilities."

Reason: No listings on crypto scam blacklists or Google Safe Browsing flags show the site is not associated with malware or phishing.

Reputation & Media Mentions

Score: 75/100
Passed

"Recognized as a training platform rather than a commercial or fraudulent site."

Reason: News articles and web search results confirm education use and no scam reports or complaints.

Your Next Steps

  • 1
    Use vulnweb.com mainly for ethical hacking practice and security training, not for commercial transactions or personal data submission.
  • 2
    Exercise caution as the site deliberately includes security vulnerabilities by design.
  • 3
    Verify information with direct site inspection if using it to test security tools or teaching materials.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Vet another Website

Run another instant due diligence scan on any domain. Verify before you subscribe or shop!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Review emergency disaster charity sites

Right after storms or earthquakes, scammers stand up donation pages that copy legitimate NGOs and push crypto wallets. S...

Read playbook →