Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 573 of 579|Showing 28601-28650 of 28927
4

403 Forbidden

reformedcatholicchurch.org

0
OtherN/asmallHIGH

The website for reformedcatholicchurch.org is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that access is blocked, likely by Cloudflare security mechanisms, as supported by the DNS records pointing to Cloudflare nameservers. Due to the lack of accessible content, no business description, contact information, or user engagement features are available for analysis. The site does not have a valid SSL/TLS certificate, and no HTTPS support is detected, which severely impacts security and trustworthiness. From a technical perspective, the infrastructure uses Cloudflare CDN and Hostinger mail servers, but the absence of SSL and modern TLS protocols, as well as missing security headers, indicates poor security hygiene. Performance is slow with minimal resources loaded, and no SEO or accessibility features are present. The WHOIS data shows the domain is registered and consistent with the domain name but provides no further business legitimacy signals. Security posture is weak due to lack of HTTPS, no HSTS, and no security headers. No privacy or cookie policies are found, and no contact or incident response information is available. Overall, the website is not operational for public users, which poses a critical risk for trust and business credibility. Strategic improvements are necessary to enable secure access, provide meaningful content, and comply with privacy and security best practices. Given the current state, the overall risk is high, and the website should prioritize resolving access issues, implementing HTTPS, and publishing essential policies and contact information to improve trust and compliance.

20
15
5
50
-
90
100
2025-06-15T13:07:47.459Z
pca-cpa.org favicon

Permanent Court of Arbitration

pca-cpa.org

0
GovernmentN/amediumHIGH

The Permanent Court of Arbitration (PCA) operates as an intergovernmental organization providing international arbitration and dispute resolution services. The website serves as a multilingual portal offering access to the PCA's resources and information primarily targeting governments, legal professionals, and international organizations. The business model is focused on facilitating arbitration services with a recognized market position in the international legal domain. Technically, the website is built on WordPress and hosted behind Cloudflare, utilizing Google Fonts and analytics services such as Google Analytics and Cloudflare Insights. However, the site suffers from significant performance issues with a very slow load time and only basic mobile optimization. The technical implementation lacks modern security protocols and optimizations. From a security perspective, the website is critically deficient due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential data interception risks. No security headers or advanced configurations are present, and privacy compliance is minimal with no visible privacy or cookie policies. Tracking scripts are used without consent mechanisms, raising privacy concerns. Overall, the website presents a moderate business credibility but is hampered by poor security posture and technical performance. Strategic improvements in security, privacy compliance, and technical optimization are essential to enhance trust and operational resilience.

25
-
5
50
-
85
100
governmentarbitrationinternationaldisputeresolutionlegal
Google FontsCloudflare InsightsGoogle AnalyticsWordPress
2025-06-15T13:07:45.910Z
css-tip.com favicon

CSS Tip: Learn CSS the easy way

css-tip.com

0
TechnologyN/asmallMEDIUM

CSS Tip is a small, niche educational website focused on providing daily CSS tips and tricks to web developers. The site targets front-end developers seeking to improve their CSS skills and stay updated with modern web features. The business model relies primarily on content publishing supported by advertising revenue from networks such as BuySellAds and Carbon Ads. The site demonstrates good content quality, consistent branding, and clear navigation, making it a useful resource within its niche. Technically, the website is built using the Eleventy static site generator and hosted on OVH infrastructure. It integrates common web technologies including JavaScript, Google Analytics, and advertising scripts. While the site is mobile optimized and accessible, it suffers from slow load times and lacks a valid SSL/TLS certificate, which impacts security and user trust. From a security perspective, the site has significant weaknesses including no HTTPS, absence of security headers, no DNSSEC, and no privacy or cookie policies. These gaps expose the site and its users to potential risks and reduce compliance with privacy regulations such as GDPR. No contact or incident response information is provided, limiting transparency and trust. Overall, CSS Tip is a functional and content-rich site with moderate professionalism but critical security and privacy shortcomings. Addressing SSL configuration, implementing privacy policies, and improving security headers would substantially enhance its security posture and user trust.

15
25
25
50
85
85
100
csswebdevelopmenteducationfrontendtips+1 more
Eleventy v3.0.0JavaScriptBuySellAdsGoogle Analytics+2
2025-06-15T11:58:30.942Z
W

World Minigolf Sport Federation - Home of International Minigolf

minigolfsport.com

0
OtherN/asmallHIGH

The website minigolfsport.com serves as a minimal informational portal for the World Minigolf Sport Federation, primarily redirecting visitors to a subdomain (gov.minigolfsport.com) where presumably more detailed content resides. The business focus is on international minigolf sport governance and community engagement, targeting enthusiasts and stakeholders in the sport. The site lacks substantive content, business contact information, and user engagement features, indicating a small-scale, niche presence. From a technical perspective, the site is hosted on an Apache server with basic HTTP headers and no SSL/TLS encryption, resulting in an insecure connection. The absence of modern web technologies, CMS, or analytics tools suggests a low digital maturity level. Performance metrics are unavailable but inferred to be slow due to minimal optimization and lack of HTTPS. Security posture is weak, with no valid SSL certificate, no HSTS, and no advanced security headers. This exposes users to potential risks such as data interception. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious registration patterns. Overall, the site presents a low-risk profile due to minimal data collection but suffers from poor security and compliance practices. Strategic improvements in SSL deployment, content enrichment, and privacy compliance are recommended to enhance trust and professionalism.

15
40
25
50
85
85
20
minigolfsportsfederationredirectinternationalsports
Apache
2025-06-15T09:14:05.334Z
mailbaby.net favicon

Mail Baby

mailbaby.net

0
TechnologyN/asmallMEDIUM

Mail Baby operates as a specialized email smart host service focusing on outbound email security and delivery. The company provides SMTP services with integrated spam and virus filtering, IP reputation management, and a simple pay-per-use pricing model. Their target audience includes organizations seeking to secure their outbound email traffic and ensure reliable delivery. The website content is professional and clearly communicates the business offerings, pricing, and FAQ information, supporting a small but focused business model. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Visual Composer, hosted behind Cloudflare CDN for performance and security benefits. The SSL certificate is valid, and the site uses LiteSpeed caching for improved load times. However, performance metrics are moderate, and accessibility features are basic. SEO optimization is good with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and Cloudflare protection but lacks advanced security headers like HSTS and Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. The absence of a privacy policy, cookie consent mechanism, and security policy reduces privacy compliance scores. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing incident response contacts, and improving transparency with direct contact details.

15
25
25
50
67
85
100
emailsmtpsecurityspamfilteringoutboundemail+2 more
WordPressYoast SEO pluginVisual ComposerjQuery+4

Partner Domains:

interserver.net
partnerpending
2025-06-15T09:01:40.781Z
egoteck.com favicon

日韩中文字幕精品视频|中文字幕有码在线播放|亚洲精品&#3259

egoteck.com

0
MediaN/asmallCRITICAL

The website egoteck.com is a Chinese-language media content platform primarily focused on providing access to domestic Chinese animation, movies, TV series, and variety shows. It targets Chinese-speaking audiences interested in streaming and viewing domestic video content. The business model appears to be content aggregation and streaming without clear monetization or subscription details. The domain is relatively new, registered in 2023, consistent with a small media content provider. Technically, the site runs on an nginx server and uses jQuery for client-side scripting. The site lacks HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. Performance data is minimal, and the site shows basic mobile optimization and SEO practices. Accessibility features are limited. Security-wise, the absence of HTTPS and security headers, along with no privacy or cookie policies, indicates a low security maturity level. No vulnerabilities or WAF protections are detected, but the lack of secure communication channels and policies poses risks. The WHOIS data shows consistent registration information with no privacy protection, which supports legitimacy but also exposes registrant data. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and professional business presentation. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving accessibility, and enhancing trust signals.

15
15
5
50
-
80
-
nginxjquery
2025-06-15T08:35:29.174Z
eleven.sm favicon

Splash

eleven.sm

0
OtherN/asmallHIGH

The website eleven.sm currently serves as a minimal splash page indicating a temporary pause in service or activity. It provides very limited business information, with the only contact method being a WhatsApp chat link. The site uses modern web technologies such as Webflow for CMS, Cloudflare for hosting and CDN, Google Tag Manager for analytics, and third-party widgets like Jetboost and Elfsight. However, the content is minimal and lacks detailed business descriptions, legal information, or privacy policies. From a security perspective, the site lacks a valid SSL certificate and does not support any TLS protocols, resulting in no HTTPS protection. Critical security headers and best practices are partially implemented but insufficient. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations. The domain is mature and active but lacks domain protection mechanisms such as DNSSEC or CAA records, which could pose risks. Overall, the website's risk profile is elevated due to missing HTTPS, minimal content, and lack of compliance documentation. The technical infrastructure is modern but underutilized, and the business credibility is low due to the absence of clear company information. Strategic improvements in security, privacy compliance, and content development are recommended to enhance trust and operational readiness.

30
-
5
50
-
70
100
splashplaceholderwebflowcloudflarewhatsapp+1 more
WebflowCloudflareGoogle reCAPTCHAGoogle Tag Manager+2
2025-06-15T08:35:28.992Z