The mechanism

Four steps, and the numbers behind each one.

Nothing here is a black box. If a claim on this page cannot be measured, it is not on this page.

  1. 01

    A certificate appears

    Every site that turns on HTTPS gets a TLS certificate, and every certificate is published to a public append only log within seconds of issuance. We read that stream continuously.

    18.5 million entries a day in one Google log alone, measured 18 August 2026

  2. 02

    We throw most of it away

    Parked domains, marketplace listings, unconfigured templates and default installs are rejected before they reach the feed. This is the part that decides whether the product is worth anything.

    3.3 to 4.2 percent survive, measured across 6,020 names in two runs

  3. 03

    We read the page and record what is missing

    We fetch what is left the way a browser would, respecting robots rules and rate limits, and record the trade, the platform, the tech stack, where the business is, and roughly thirty things that are wrong with the site.

    About 30 checks per site, grouped by the trade each one serves

  4. 04

    You unlock, and it is verified right then

    The address is checked at the moment you spend a contact, not weeks earlier when it was scraped. If the check fails you are not charged for it, and we say so plainly rather than handing you a dead address.

    Verification runs at unlock, never from a cache older than 30 days

The thirty checks, grouped by who they matter to.

A designer and an ads buyer look at the same business for completely different reasons. Filter to the gap you fix and the rest disappears.

Marketing

For ads buyers and marketers
No pixelNo analyticsNo conversion trackingNo retargeting tagNo email captureNo offer above the fold

SEO

For SEO people
No title tagThin copyNo meta descriptionNo sitemapNo structured dataBroken links

Design and age

For designers
Not responsiveBreaks under 400pxStock photography onlyNo faviconText over imageDated layout

Build quality

For developers
No SSL redirectSlow on mobileRender blocking scriptsUnoptimised imagesNo caching headersConsole errors

Commercial

For anyone selling to the business
No prices shownNo booking formNo contact formNo address or mapNo opening hoursNo social links

Where the data comes from.

Certificate Transparency logs

Public by design. Certificate authorities are required to publish every certificate they issue, and the logs are append only.

The business own homepage

Fetched the way a browser fetches it, respecting robots rules and rate limits. Everything we record about a site comes from that site.

A deliverability check at unlock

A third party checks the address at the moment you spend a contact. We store the result, not a guess.

What we never do

No purchased broker lists. No LinkedIn scraping. No personal profiles. No guessing an address a business has not published.

We offer LinkedIn sign in, and we never read anyone else LinkedIn profile as lead data. Those are opposite things and both are true. A buyer may choose to authenticate with their own account. We do not go and read other people profiles to build a list. If both appear on a site without the distinction stated, the trust claim reads as a lie, so it is stated here.

Sign in or join

No password to remember, and we never see one.

By continuing you agree to the terms and the privacy policy.