Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 503 of 516|Showing 25101-25150 of 25774
shelfie.at favicon

A&N GesbR

shelfie.at

0
OtherAustriasmallHIGH

The website shelfie.at is currently a coming soon placeholder page for the company A&N GesbR, represented by Philipp Asanger and Manuel Nobis, located in Linz, Austria. The site provides minimal business information, primarily a logo and contact address, with no detailed description of services or products. The business appears to be small and in early stages of web presence development. Technically, the site is built on WordPress using the SeedProd coming soon plugin, with Tailwind CSS and FontAwesome for styling, and jQuery for scripting. It is hosted behind Cloudflare with valid SSL, but the SSL certificate dates appear inconsistent, possibly due to data error. The site performance is slow with a high load time, and lacks modern security headers and HSTS enforcement. Mobile optimization and accessibility are basic. From a security perspective, HTTPS is enabled with a valid certificate, but no additional security headers or policies are implemented. There are no forms or data collection points, reducing attack surface but also limiting user engagement. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. DNSSEC and CAA are not enabled, and no vulnerability disclosure or incident response information is provided. Overall, the site is low risk but also low maturity in security and privacy posture. Strategic recommendations include implementing security headers and HSTS, adding privacy and cookie policies to comply with GDPR, improving site performance, and expanding business content to enhance credibility and user trust.

20
15
25
50
67
85
100
comingsoonplaceholderwordpresscloudflareseedprod+2 more
jQueryTailwind CSSFontAwesomeSeedProd plugin
2025-06-15T21:53:49.439Z
A

amsc-windtec.com

amsc-windtec.com

0
OtherN/asmallHIGH

The website amsc-windtec.com currently serves only a parking or under construction page with no active business content or services presented. The domain lacks DNS records and a valid SSL certificate, resulting in no HTTPS support and poor security posture. The site includes third-party ad scripts from suspicious domains, further reducing trustworthiness. There is no privacy policy, cookie policy, terms of service, or contact information available, indicating a lack of compliance and transparency. Overall, the site does not represent an active or legitimate business presence online. From a technical perspective, the infrastructure is minimal and outdated, with no modern security protocols or performance optimizations. The absence of DNS records and SSL suggests the domain is parked or abandoned. The site is not mobile optimized and lacks accessibility and SEO best practices. Security evaluation reveals critical vulnerabilities including no HTTPS, no security headers, and no incident response or data protection policies. The presence of third-party ad scripts without consent mechanisms raises privacy concerns. The domain's WHOIS data is incomplete or unavailable, limiting trust and legitimacy assessments. Given these findings, the overall risk is high for users attempting to interact with this domain. Strategic recommendations include obtaining a valid SSL certificate, configuring DNS properly, removing third-party ad scripts, and developing a compliant, content-rich website with clear business and contact information.

25
15
5
50
-
50
100
parkingunderconstructionadsnocontentnossl+1 more
Apache
2025-06-15T21:53:46.673Z
A

Attention Required! | Cloudflare

falstaff.at

0
OtherAustriasmallHIGH

The website falstaff.at is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of actual business content. This prevents a full assessment of the company's online presence, business model, or services. The domain is registered and has DNS records consistent with operational email infrastructure, but no valid SSL certificate is installed, and HTTPS is not properly configured. The lack of visible content, contact information, or compliance policies indicates a very limited digital footprint at this time. Technically, the site relies on Cloudflare for security and hosting services but fails to implement essential security best practices such as valid SSL/TLS, HSTS, and OCSP stapling. Performance and accessibility cannot be evaluated due to the blocked content. The presence of Cloudflare Insights indicates minimal analytics tracking. From a security perspective, the absence of HTTPS and the presence of a WAF block significantly reduce the trustworthiness and usability of the site. No privacy, cookie, or terms of service policies are found, and no contact or incident response information is available. The domain registration data appears consistent and legitimate but lacks detailed WHOIS information to confirm domain age or registrant identity. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the blocking and missing information. Strategic recommendations include resolving SSL issues, publishing essential policies, providing clear contact information, and ensuring the site is accessible to legitimate users to improve trust and compliance.

35
-
5
50
-
85
100
blockedcloudflaresecuritywafno-content
Cloudflare
2025-06-15T21:53:45.821Z
R

raye7.com

raye7.com

0
OtherN/asmallHIGH

The website raye7.com currently serves as a minimal placeholder with no substantive content beyond a client-side redirect to a /lander path. There is no visible business information, metadata, or user-facing content to analyze. The domain is registered and active but lacks a valid SSL certificate, resulting in no HTTPS support and a poor security posture. DNS records are basic with no DNSSEC or CAA records, and MX records point to smtp.google.com, which may be a misconfiguration. Overall, the site appears to be under development or inactive. From a technical perspective, the infrastructure is minimal with hosting likely on Amazon AWS based on IP addresses. No modern web technologies, frameworks, or CMS platforms are detected. Performance metrics are unavailable due to lack of content. Security best practices are not implemented, with no security headers, no HSTS, and no certificate transparency compliance. Security posture is weak, with critical issues including lack of HTTPS and absence of security policies or headers. No privacy or cookie policies are present, indicating non-compliance with GDPR or other privacy regulations. No contact or business information is available, limiting trust and credibility. Given these factors, the overall risk is elevated due to lack of security controls and transparency. Strategic recommendations include immediate implementation of HTTPS, deployment of security headers, addition of privacy and cookie policies, and publication of business and contact information to improve trust and compliance.

15
15
5
50
-
85
100
2025-06-15T21:53:34.347Z
S

shfl.com

shfl.com

0
OtherN/asmallHIGH

The website at shfl.com currently serves only a minimal HTML page that immediately redirects visitors to a /lander path, with no substantive content, metadata, or business information available. The domain is registered and has DNS records pointing to Amazon AWS IP addresses, but lacks critical security features such as a valid SSL certificate and HTTPS support. No privacy, cookie, or terms of service policies are present, and no contact or social media information is provided, indicating a very low level of digital maturity and online presence. From a technical perspective, the site is hosted on AWS infrastructure but does not implement modern web security standards or performance optimizations. The absence of TLS protocols and security headers exposes the site to potential risks and undermines user trust. The lack of content and metadata also negatively impacts SEO and user experience. Security posture is weak due to the absence of HTTPS, no HSTS, no DNSSEC, and no security headers. These gaps present significant vulnerabilities and compliance risks, especially if the site were to handle sensitive data. The WHOIS data shows the domain is registered and not vulnerable to subdomain takeover, but the lack of transparency and business information reduces trustworthiness. Overall, the site appears to be either under development or abandoned, with critical security and compliance deficiencies. Strategic recommendations include obtaining and configuring a valid SSL certificate, implementing security headers and DNS security features, developing meaningful website content with clear business information, and establishing privacy and cookie policies to comply with regulations and build user trust.

15
15
5
50
-
85
100
2025-06-15T21:53:04.361Z
E

exporttradinggroup.com

exporttradinggroup.com

0
OtherN/asmallHIGH

The website exporttradinggroup.com currently serves minimal content consisting solely of a redirect script to a /lander page, with no accessible metadata, business information, or user-facing content. The domain is registered and has valid DNS A records, but lacks proper mail exchange configuration and does not use DNSSEC or CAA records. Critically, the site does not have a valid SSL certificate and does not support HTTPS, exposing it to security risks and reducing user trust. No privacy, cookie, or terms of service policies are present, and no contact or social media information is available, indicating a very low level of digital maturity and transparency. From a technical perspective, the site lacks any detectable technology stack, frameworks, or CMS. Performance data is absent, and the site is not optimized for mobile or accessibility. Security posture is weak due to missing HTTPS, absence of security headers, and no incident response or vulnerability disclosure information. The DNS SPF record is configured to reject all mail, which may indicate no email services are intended for this domain. Overall, the security posture is poor with critical issues such as no SSL and no content, which severely limits the ability to assess business credibility or compliance. The domain registration appears consistent but lacks publicly available registrant details. Strategic recommendations include immediate implementation of HTTPS with a valid certificate, deployment of basic security headers, and publishing of privacy and cookie policies to improve compliance and trust. Additionally, the website should provide meaningful content and contact information to enhance business credibility and user experience.

15
15
5
50
-
70
100
2025-06-15T21:51:43.177Z
moodley.at favicon

moodley design group

moodley.at

0
OtherAustriamediumHIGH

Moodley design group is a medium-sized, Austria-based consultancy specializing in brand and business transformation through strategy, design, and technology services. The company targets businesses and organizations seeking to accelerate their brand transformation and growth, especially in challenging times. Their market position is that of an established design and strategy consultancy with an international presence, offering services including brand transformation, product design, and digital product and service design. The website content is professionally crafted, with clear navigation and strong branding consistency, targeting a professional audience. Technically, the website is built on a modern stack including nginx, JavaScript, Vimeo embeds, and uses Usercentrics for consent management and Google Tag Manager for analytics. The CMS appears to be Statamic. However, performance metrics are missing, and the site lacks HTTPS, which is a critical security shortfall. Mobile optimization and SEO are good, but accessibility is basic. From a security perspective, the absence of a valid SSL certificate and HTTPS is a major vulnerability, exposing users to risks. No advanced security headers or policies are implemented, and no incident response or vulnerability disclosure information is available. Cookie consent and privacy policies are present and GDPR compliant, indicating good privacy practices. Overall, the website is professional and trustworthy in business presentation but requires urgent security improvements, especially enabling HTTPS and enhancing security headers, to protect users and improve trustworthiness. Strategic recommendations include immediate SSL installation, security header implementation, and enhanced incident response transparency.

15
-
5
50
-
85
100
brandingbusinesstransformationdesignstrategydigitalproducts+1 more
nginxJavaScriptVimeo embedUsercentrics CMP+2
2025-06-15T21:51:33.154Z