Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 549 of 579|Showing 27401-27450 of 28928
alpinef1.com favicon

BWT Alpine Formula One Team

alpinef1.com

0
TransportationN/alargeMEDIUM

The BWT Alpine Formula One Team website serves as the official digital presence for the Alpine F1 racing team, providing comprehensive information about the team, drivers, race calendar, standings, and fan engagement initiatives. The site targets motorsport enthusiasts, sponsors, and fans, offering news, media, merchandise, and interactive content. The business model revolves around brand promotion, sponsorship, merchandising, and fan community building within the competitive Formula One industry. Technically, the website employs modern web technologies including the Nuxt.js framework with Vue.js, Tailwind CSS for styling, and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good accessibility and SEO practices, delivering a professional user experience with fast and responsive design. From a security perspective, the site enforces HTTPS and uses modern frameworks, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain registration trust assessment, though the professional site and official social media presence support legitimacy. Overall, the website is well-designed and functional with strong business credibility but would benefit from enhanced privacy compliance, security transparency, and clearer contact information to improve user trust and regulatory adherence.

30
53
2
80
75
85
100
formulaonemotorsportsportsteamalpinef1+1 more
Tailwind CSSVue.js (Nuxt.js framework)Google Tag ManagerFacebook Pixel+1

Partner Domains:

alpinecars.com
partner
media.alpinecars.com
partner

+2 more partners

2025-06-23T12:10:30.134Z
C

CSS*GG • The CSS Icon Library

css.gg

0
TechnologyN/asmallMEDIUM

CSS*GG is an open-source CSS icon library offering over 700 pure CSS, SVG, and Figma UI icons, along with extensive glyphs, patterns, colors, and layouts. It targets developers and designers seeking lightweight, scalable iconography solutions. The website demonstrates a strong market position within the niche of frontend design assets, supported by a popular GitHub repository and a large Figma community presence. The business model appears to be primarily open-source with optional Pro features. Technically, the site is built on modern web technologies including React and Next.js, with a focus on performance, mobile optimization, and accessibility. It uses Google Tag Manager for analytics and Carbon Ads for monetization. The site is fast, well-structured, and SEO optimized, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers, privacy and cookie policies, and incident response information, which are areas for improvement. No vulnerabilities or suspicious patterns were detected. Overall, the security posture is good but could be enhanced with additional policies and headers. The overall risk is moderate with no critical issues detected. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing clear contact and incident response channels to improve trust and compliance.

15
35
17
40
72
60
100
cssiconsopensourcesvgfigma+2 more
ReactNext.jsVanilla CSSSVG+2

Partner Domains:

slant.so
partner
glyf.app
partner

+2 more partners

2025-06-23T12:10:15.094Z
subscribepage.com favicon

MailerLite

subscribepage.com

0
TechnologyN/amediumLOW

MailerLite is a technology company specializing in email marketing and landing page building solutions primarily targeting small businesses, creators, and e-commerce operators. The company offers a SaaS platform with a free tier and paid subscription plans, providing tools such as email marketing, automation, landing pages, website building, and integrations with popular e-commerce and marketing platforms. The website demonstrates a professional and consistent brand presence with comprehensive content and clear navigation, supporting a positive user experience and strong market positioning. Technically, the website employs modern JavaScript frameworks including Alpine.js and jQuery, integrates Google Tag Manager and GrowthBook for analytics and experimentation, and uses Cookiebot for consent management. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policy and incident response information are not publicly available. The security posture is strong with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS domain registration details introduces some uncertainty regarding domain legitimacy. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Business credibility is supported by verified contact emails, social media presence, and professional content, though the lack of detailed WHOIS data and security disclosures slightly reduce trust. Overall, MailerLite presents as a credible and professional service provider with a solid technical foundation and good security hygiene. Strategic improvements include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trustworthiness.

65
95
17
82
75
85
100
emailmarketinglandingpagesautomationsaassmallbusiness+2 more
JavaScriptjQueryAlpine.jsGoogle Tag Manager+2

Partner Domains:

academy.mailerlite.com
service
accounts.mailerlite.com
service
2025-06-23T11:02:32.258Z
duckdiverllc.com favicon

Duck Diver Marketing

duckdiverllc.com

0
OtherN/asmallHIGH

Duck Diver Marketing is a specialized marketing agency offering on-demand marketing services primarily targeting the dive industry. Their key offerings include social media management, SEO services, website creation, and online advertising management. The company positions itself as a flexible marketing partner for small to medium businesses, providing à la carte and full-service marketing solutions. The website content and branding are consistent and professional, reflecting a niche market focus with a history dating back to at least 2011. Technically, the website is built on WordPress using CherryFramework and Bootstrap, integrating WooCommerce and popular plugins like Contact Form 7 and Yoast SEO. The site employs Google Analytics and Jetpack for tracking, indicating moderate digital maturity. Performance and mobile optimization are good, though accessibility features are basic. The site uses HTTPS but lacks advanced security headers, which could be improved to enhance security posture. From a security perspective, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, raises concerns about compliance and domain legitimacy. No incident response or security policy information is provided, limiting transparency. Overall, the security posture is moderate but could benefit from enhancements in policy visibility and technical safeguards. The domain WHOIS data is unavailable or unregistered according to the raw WHOIS output, which is inconsistent with the active website presence. This discrepancy reduces trustworthiness and suggests the need for further verification. The website is accessible without WAF or security challenges, allowing full content analysis. Strategic recommendations include implementing privacy and cookie policies, improving security headers, verifying domain registration, and enhancing accessibility and compliance measures.

15
50
17
85
62
75
20
marketingseosocialmediawebsitecreationdiveindustry+1 more
WordPressWooCommercejQueryBootstrap+3
2025-06-23T10:21:25.258Z
ucimtbworldseries.com favicon

WHOOP UCI Mountain Bike World Series

ucimtbworldseries.com

0
OtherN/asmallMEDIUM

The WHOOP UCI Mountain Bike World Series website serves as the official digital hub for the UCI Mountain Bike World Series, providing event calendars, news, results, rankings, and rider registration. The site targets mountain bike enthusiasts, athletes, and fans, positioning itself as a key information source within the mountain biking sports domain. The business model revolves around event promotion and community engagement within the mountain biking sport sector. Technically, the website employs modern web technologies including Tailwind CSS, Alpine.js, and Vite, hosted on AWS infrastructure, with Google Analytics and OneTrust for tracking and cookie consent respectively. The site is mobile optimized and features good SEO practices. Security posture is solid with HTTPS, CSRF tokens, and content security policies, though it lacks some advanced security disclosures such as a security.txt file or explicit incident response contacts. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration is consistent and legitimate, with no suspicious indicators. Strategic recommendations include publishing comprehensive privacy and terms policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.

65
88
2
85
67
85
100
uciucimtbworldseriesewsenduroworldseries+3 more
JavaScriptTailwind CSSAlpine.jsGoogle Tag Manager+1
2025-06-23T10:21:20.216Z
proticketing.com favicon

Onebox | Ticket DIstribution System

proticketing.com

0
TechnologyN/asmallMEDIUM

The website proticketing.com represents a ticket distribution system branded as ONEBOX, likely targeting event organizers and ticket sellers. The domain is mature, registered since 2011, and hosted using Cloudflare and Amazon S3 infrastructure. However, the website content is minimal and largely inaccessible due to Cloudflare's WAF challenge mechanisms, limiting the ability to fully assess the business and technical details. The site lacks essential compliance documents such as privacy and cookie policies, as well as contact information, which impacts trust and transparency. Technically, the site uses modern CDN and security services but lacks DNSSEC and security headers, which are recommended for enhanced security. Analytics are limited to Cloudflare Insights with minimal tracking. The website's design and content quality are poor due to the minimal content and lack of navigation or user engagement elements. Security posture is moderate with HTTPS enabled but missing key security headers and DNSSEC. The absence of privacy and security policies and contact details indicates compliance gaps. Overall, the site presents a low trustworthiness profile primarily due to content blocking and lack of transparency. Strategic recommendations include enabling DNSSEC, adding comprehensive privacy and cookie policies, publishing contact and incident response information, and improving website content and navigation to enhance user experience and trust.

90
50
2
70
57
70
100
ticketingdistributioncloudflareoneboxtechnology
CloudflareAmazon S3 (for static resources)JavaScript
2025-06-23T10:21:00.113Z
Z

Zoomex

zoomex.com

0
FinanceN/amediumMEDIUM

Zoomex is a cryptocurrency trading platform offering both centralized and decentralized exchange services, including derivatives trading such as Inverse Perpetual and USDT Perpetual contracts. The platform targets global cryptocurrency traders and investors, boasting over 2 million registered users and a presence in more than 30 nations. It maintains a notable partnership with the MoneyGram Haas F1 Team, enhancing its brand credibility and market positioning. The business model revolves around providing a secure, reliable, and fast trading environment with additional services like express fiat-to-crypto purchases, copy trading, and affiliate programs. Technically, Zoomex employs modern web technologies including Vue.js and Element UI frameworks, supported by extensive analytics and tracking tools such as Google Analytics, Google Tag Manager, and various ad/tracking pixels. The platform is mobile-optimized with dedicated iOS and Android apps, ensuring accessibility and usability across devices. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and claims robust asset protection via multi-signature cold/hot wallet systems. However, it lacks visible security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no cookie consent mechanism is evident despite extensive tracking. Overall, Zoomex presents a professional and functional cryptocurrency trading platform with moderate trustworthiness. The absence of WHOIS registrant data and some security best practices slightly reduce confidence. Strategic improvements in security headers, privacy consent, and transparency around incident response would enhance its security posture and user trust.

15
58
17
85
95
85
100
cryptocurrencycryptoexchangebitcointradingderivativesfinance+1 more
JavaScriptVue.jsGoogle Tag ManagerGoogle Analytics+1

Partner Domains:

zoomex.finance
partner
affiliates.zoomex.com
partner

+1 more partners

2025-06-23T10:20:55.102Z
J

DNS points to prohibited IP | joma-sport.com | Cloudflare

joma-sport.com

0
OtherN/asmallHIGH

The website joma-sport.com is currently inaccessible due to a Cloudflare error 1000 indicating that the DNS resolves to a prohibited IP address. This prevents any meaningful content from being served to visitors, resulting in a complete block of the website's front-end. The domain is registered since 1997 with Acens Technologies, S.L.U. as the registrar, indicating a long-standing domain ownership. However, the current DNS misconfiguration severely impacts the website's availability and trustworthiness. From a technical perspective, the site relies on Cloudflare for DNS and security services, but the misconfiguration causes a critical failure. No content, metadata, or business information is accessible, and no privacy or security policies are published. The lack of security headers and absence of SSL configuration details further highlight the immature security posture, although this cannot be fully assessed due to the block. Security-wise, the primary issue is the DNS misconfiguration causing Cloudflare to block access. This is a critical vulnerability that must be resolved immediately to restore service. No other security or compliance information is available. Overall, the website's risk profile is high due to unavailability and lack of transparency. Strategic remediation should focus on correcting DNS settings, enabling DNSSEC, publishing privacy and security policies, and implementing standard security headers to improve trust and compliance.

15
35
2
60
57
80
100
Cloudflare
2025-06-23T10:20:40.044Z
yaycommerce.com favicon

YAYCOMMERCE COMPANY LIMITED

yaycommerce.com

0
E-commerceN/asmallMEDIUM

YayCommerce is a specialized provider of WooCommerce plugins, serving over 100,000 WordPress websites. The company offers a suite of products designed to enhance e-commerce functionality, including email customization, multi-currency switching, SMTP integration, dynamic pricing, variation swatches, and extra product options. Their market position is that of a trusted, niche player in the WooCommerce ecosystem, targeting online store owners and WordPress users seeking enhanced e-commerce capabilities. The business model is primarily product sales supplemented by an affiliate program to expand reach. Technically, the website is built on a modern WordPress stack utilizing popular plugins such as Elementor for design, Easy Digital Downloads for commerce, and WP Rocket for performance optimization. The site is hosted with domain registration via GoDaddy and DNS managed by Cloudflare, indicating a reliable infrastructure. Performance and mobile optimization are good, with SEO best practices implemented through Yoast SEO. From a security perspective, the site employs HTTPS with good SSL configuration and some security best practices. However, it lacks explicit security headers like Content-Security-Policy and does not publish a dedicated security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, YayCommerce presents a professional and trustworthy online presence with solid technical foundations. The main areas for improvement include enhancing privacy compliance by publishing a dedicated privacy and cookie policy with consent mechanisms, and strengthening security posture by adding security headers and incident response information.

45
50
17
85
75
85
100
woocommercewordpresse-commercepluginssaas+1 more
WordPressWooCommerceElementorEasy Digital Downloads+3
2025-06-23T09:09:39.334Z
alpcot.se favicon

alpcot.se

alpcot.se

0
OtherN/asmallMEDIUM

The website www.alpcot.se currently presents minimal accessible content, displaying an error message indicating the page could not be loaded. The site is built using modern technologies such as Blazor server-side framework, Radzen components, and Bootstrap CSS for styling. PostHog analytics is integrated for user behavior tracking. However, the lack of visible business information, contact details, and policy documents significantly limits the ability to assess the company's market position or business model. The domain queried (www.alpcot.se) is a subdomain, with no WHOIS data found, which reduces trustworthiness and raises questions about domain registration consistency. From a technical perspective, the site implements a Content-Security-Policy header and enforces HTTPS, which are positive security indicators. Nevertheless, the absence of privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms highlights compliance gaps. The user experience is poor due to the error page and lack of navigable content, and SEO and accessibility optimizations are minimal. Security posture is moderate with basic best practices in place but lacks comprehensive policies and contact channels for security incidents. Overall, the website's risk profile is elevated due to minimal content, lack of transparency, and incomplete compliance documentation. Strategic improvements are needed to enhance trust, compliance, and user experience.

30
10
17
70
82
75
100
blazorradzenposthogbootstrapanalytics+2 more
BlazorRadzen.BlazorBootstrapPostHog
2025-06-23T09:09:29.293Z
T

triggle.app

triggle.app

0
OtherN/asmallHIGH

The website at triggle.app is currently inaccessible or blocked, displaying only a minimal JSON error message indicating a missing authentication token. This suggests the URL may be an API endpoint or a backend service requiring authentication rather than a public-facing website. Due to the lack of accessible content, no business description, contact information, or policies are available for analysis. The technical infrastructure cannot be assessed beyond the indication that the site is not publicly accessible without credentials. From a security perspective, the absence of HTTPS confirmation, security headers, and any visible security or privacy policies indicates a very low security posture. The lack of accessible content also prevents evaluation of compliance with GDPR or other regulations. The domain's WHOIS data is privacy protected, which is common but, combined with the lack of public business information, reduces trustworthiness. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. The primary risk is the inability to verify the legitimacy or security of the service behind the domain. Strategic recommendations include enabling public access to a landing page with business and compliance information, implementing HTTPS and security headers, and publishing privacy and cookie policies to improve trust and compliance.

-
40
17
-
77
85
100
2025-06-23T07:43:06.628Z
igc.services favicon

iGaming Content Services

igc.services

0
OtherN/asmallMEDIUM

iGaming Content Services is a specialized B2B agency focused exclusively on providing content, SEO, translations, localisation, and outreach services tailored for the iGaming industry. Established in 2016, the company leverages native language experts and industry veterans to deliver high-quality, non-AI-generated content across over 40 languages and multiple global markets. Their market position is that of a niche expert with a strong reputation for transparency, efficiency, and long-term client relationships. Technically, the website is built on WordPress using Oxygen Builder, enhanced with modern tools such as Google Tag Manager, Google Analytics, and GDPR-compliant cookie management via Complianz. The site features interactive elements like Lottie animations and uses CAPTCHA for form security, reflecting a mature digital infrastructure. Performance and mobile optimization are good, though accessibility could be improved. From a security perspective, the site enforces HTTPS and employs consent mechanisms for cookies, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Business credibility is supported by professional content, consistent branding, and social media presence, though direct contact emails and phone numbers are not publicly listed. Overall, the website presents a low-risk profile with solid security and privacy practices, a clear business focus, and a professional digital presence. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance trust and compliance.

70
80
17
85
75
85
100
igamingcontentservicesseotranslationslocalisation+2 more
WordPressOxygen BuilderGoogle Tag ManagerGoogle Analytics+4
2025-06-23T07:42:51.587Z
ungm.org favicon

United Nations Global Marketplace

ungm.org

0
GovernmentN/aenterpriseMEDIUM

The United Nations Global Marketplace (UNGM) serves as the official procurement platform for the UN system, connecting suppliers, consultants, and various UN and international organizations. It facilitates access to procurement opportunities, contract awards, and provides a knowledge center for market research and procurement data. The platform targets a broad audience including companies, independent professionals, NGOs, trade promotion organizations, and UN staff members. The business model centers on a centralized digital marketplace enabling efficient procurement processes across multiple UN entities. Technically, the website employs modern frontend technologies such as Tailwind CSS for styling, Alpine.js for interactivity, and jQuery. It integrates Google Tag Manager for analytics and is designed with responsive and accessible features, ensuring good user experience across devices. Performance is moderate with well-structured content and clear navigation. From a security perspective, the site uses HTTPS and sets secure cookie flags for analytics. However, it lacks visible security headers and does not publish explicit security policies or incident response contacts. There is no evidence of a vulnerability disclosure program or security.txt file. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the website is a professional and trustworthy platform with strong business credibility and excellent content quality. The main risks relate to privacy compliance and security best practices, which could be improved to enhance user trust and regulatory adherence.

-
-
-
75
72
90
100
unprocurementglobalmarketplacesuppliersconsultants+5 more
jQueryAlpine.jsTailwind CSSGoogle Tag Manager
2025-06-23T06:39:59.246Z
C

Access Denied

carwise.com

0
OtherN/asmallCRITICAL

The website carwise.com is currently inaccessible due to a security block or Web Application Firewall (WAF) restriction, as evidenced by the 'Access Denied' page and reference to errors.edgesuite.net. This prevents any meaningful extraction of business, technical, or security information from the site content. Consequently, no metadata, structured data, contact details, or policy documents are available for analysis. The lack of accessible content severely limits the ability to assess the company's market position, services, or compliance posture. From a technical perspective, the site appears to be protected by a generic WAF or security mechanism, which is effectively blocking access. No information about the technology stack, hosting provider, or performance characteristics can be determined. Security headers, SSL configuration, and other best practices cannot be evaluated due to the absence of accessible content. Security posture evaluation is constrained by the lack of data. No vulnerabilities, incident response contacts, or certifications are visible. The domain's WHOIS data is privacy protected, which is common but limits trust assessment. Overall, the site scores very low on all AI scoring metrics due to inaccessibility. Given these limitations, the overall risk assessment is that the site cannot be reliably analyzed in its current state. Strategic recommendations include working with the hosting or security provider to allow safe access for analysis and ensuring that public-facing content is accessible for transparency and trust building.

-
-
-
-
-
-
-
2025-06-23T06:39:29.194Z
gutor.com favicon

Gutor

gutor.com

0
EnergyN/amediumCRITICAL

Gutor is a well-established company specializing in manufacturing uninterruptible power supply (UPS) systems for industrial applications, with a strong focus on sectors such as Oil & Gas, Power & Grid, and Nuclear. The company boasts 75 years of experience and a global team of experts, positioning itself as a reliable and quality-driven brand in the critical power solutions market. Their business model combines product manufacturing with comprehensive lifecycle services including field services, spare parts, training, and life extension services. The website reflects this maturity with professional design, clear navigation, and relevant content tailored to their industrial audience. Technically, the website is built on WordPress and leverages modern technologies such as Google Tag Manager, Google Analytics, reCAPTCHA v3, and jQuery plugins for enhanced user experience and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, which is positive. However, it lacks visible security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy exists, there is no cookie consent mechanism or GDPR compliance indicators visible. Contact information is limited to forms without direct email or phone contacts, which may affect user trust. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in privacy compliance, security transparency, and direct contact information would enhance user trust and regulatory adherence.

-
-
-
-
-
-
-
upspowersolutionsindustrialenergymodularups+2 more
Google Tag ManagerGoogle Analytics (gtag.js)reCAPTCHA v3jQuery 3.7.0+2

Partner Domains:

view.ceros.com
partner
2025-06-23T03:13:51.377Z