Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

149319
Websites
130
Industries
113
Countries
52
Avg Score
Page 45 of 153|Showing 2201-2250 of 7628
videohive.net favicon

Envato

videohive.net

71
TechnologyAustralialargeMEDIUM

VideoHive, operated by Envato, is a leading online marketplace specializing in stock video footage, motion graphics templates, and video effects. Established in 2006 and headquartered in Australia, it serves a global audience of creators and businesses seeking high-quality visual assets to enhance video productions. The platform is part of the larger Envato ecosystem, which includes complementary services such as Envato Elements, Tuts+, and Placeit, reinforcing its market position as a comprehensive creative resource hub. Technically, the website employs a modern technology stack including JavaScript frameworks, Turbo (Hotwire), and robust monitoring tools like Datadog and Rollbar. Hosting and DNS services are managed via Cloudflare, ensuring performance and security. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. From a security perspective, VideoHive enforces HTTPS, integrates Cookiebot for GDPR-compliant cookie consent management, and uses CSRF tokens to protect forms. While explicit security headers are not fully confirmed, the presence of monitoring and error tracking tools indicates a mature security posture. The domain's WHOIS data is consistent with the business identity, showing a long-established registration without privacy masking, which supports trustworthiness. Overall, VideoHive presents a professional, secure, and privacy-conscious platform with strong business credibility and technical maturity. Recommendations include enabling DNSSEC for enhanced DNS security and verifying the implementation of all recommended security headers to further strengthen the security posture.

65
83
2
100
47
85
100
stockfootagevideoeffectsaftereffectstemplatesdigitalmarketplacecreativeassets+1 more
JavaScriptDatadogRollbarCookiebot+2

Partner Domains:

elements.envato.com
partner
tutsplus.com
partner

+2 more partners

2025-10-04T02:39:09.808Z
tutsplus.com favicon

Envato Tuts+

tutsplus.com

77
EducationAustralialargeLOW

Envato Tuts+ is a well-established online education platform founded in 2008, offering creative skills tutorials and courses to a global audience. It operates under the Envato brand, a recognized leader in digital assets and creative marketplaces. The platform targets creative professionals and learners seeking to enhance their skills through high-quality, expert-led content. The business model focuses on providing free and premium educational content, supported by advertising and Envato's broader ecosystem services. Technically, the website employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Cookiebot for privacy compliance. It leverages Cloudflare for DNS and likely CDN services, ensuring fast performance and robust availability. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, Envato Tuts+ demonstrates strong practices such as enforced HTTPS, domain registration protections, and comprehensive cookie consent management. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly disclosed, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR and privacy regulations. It poses low risk to users and partners, with recommendations to enhance DNS security and transparency around security policies to further strengthen its posture.

80
100
17
100
47
85
100
educationtutorialsonlinecoursescreativeskillsenvato
JavaScriptCookiebotGoogle Tag ManagerCloudflare DNS

Partner Domains:

elements.envato.com
subsidiary
placeit.net
subsidiary

+3 more partners

2025-10-04T02:33:38.711Z
4ange.com favicon

4ange

4ange.com

66
FinanceRussiamediumMEDIUM

4ange.com is a Russian-language cryptocurrency exchange platform established in 2019, offering a wide range of crypto and fiat currency exchange services. The website provides users with the ability to buy and sell various cryptocurrencies including Bitcoin, Ethereum, USDT, and many others, supporting multiple payment systems and bank cards. The platform targets cryptocurrency users primarily in Russia and Russian-speaking regions, positioning itself as a reliable and comprehensive exchange service with competitive rates and a user account system featuring notifications and security measures such as captcha verification. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Tom Select, and Select2, and uses Cloudflare for DNS services. The site is mobile-optimized with good navigation and SEO practices. Security is enforced through HTTPS, clientTransferProhibited domain status, and input validation on forms. However, some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the platform demonstrates a moderate security posture with good practices in place but lacks a formal vulnerability disclosure policy and some advanced security headers. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, 4ange.com is a professional and trustworthy cryptocurrency exchange service with room for enhancement in privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing a Content-Security-Policy header, adding a security.txt file, and introducing a cookie consent mechanism to improve compliance and user trust.

65
50
2
85
72
75
100
cryptocurrencyexchangebitcoincryptofinance+2 more
JavaScriptjQueryTom SelectSelect2+2
2025-10-04T01:25:24.363Z
hz-containers.com favicon

HZ CONTAINERS.com

hz-containers.com

60
TransportationCzech RepublicmediumMEDIUM

HZ CONTAINERS.com is an established online business specializing in the sale and rental of new and used shipping containers worldwide. The company offers a broad range of container types, sizes, and accessories, targeting businesses and individuals requiring container logistics solutions. The website supports multiple languages, enhancing its global reach and customer accessibility. The business model focuses on e-commerce combined with logistics services, positioning itself as a reliable provider in the transportation sector. Technically, the website is built on WordPress with Yoast SEO and Google Tag Manager integration, hosted with Cloudflare DNS services. The site demonstrates good digital maturity with responsive design, SEO optimization, and cookie consent mechanisms compliant with GDPR. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain transfer/update protections. However, DNSSEC is not enabled, and security headers are not explicitly detected. There is no published security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the website presents a professional and trustworthy front for its business, with good content quality and user experience. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and providing incident response contacts to strengthen security posture and compliance. These improvements will support the company’s credibility and protect customer data more effectively.

30
50
17
55
65
80
100
shippingcontainerslogisticscontainersalescontainerrentalmultilingual+1 more
WordPressYoast SEO pluginGoogle Tag ManagerCloudflare DNS
2025-10-03T22:01:34.143Z
O

Open Knowledge Foundation

opendatacommons.org

57
OtherUnited KingdomsmallMEDIUM

Open Data Commons, maintained by the Open Knowledge Foundation, is a non-profit organization providing legal tools and licenses to facilitate the publication and use of open data. The website serves as a resource hub offering licenses such as the Open Database License (ODbL), Attribution License (ODC-By), and Public Domain Dedication and License (PDDL), targeting open data publishers, users, and legal professionals. The organization is well-established with a domain age dating back to 2006, reflecting its longstanding presence in the open data community. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, and the Mmenu.js library for navigation. It uses Cloudflare for DNS services and serves content over HTTPS with a good SSL configuration. The site is moderately performant, mobile-optimized, and includes privacy-conscious analytics via Plausible. However, DNSSEC is not enabled, and some security headers are missing, representing areas for improvement. From a security perspective, the site demonstrates a solid baseline with HTTPS and domain transfer protection but lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is strong with clear privacy, cookie, and terms of service policies linked, and minimal user tracking. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing a vulnerability disclosure program to enhance security posture and trust.

15
68
2
40
75
70
100
opendatalegaltoolslicensesopenknowledgenon-profit
HTML5CSSJavaScriptCloudflare DNS

Partner Domains:

okfn.org
parent
2025-10-03T21:56:37.631Z
e-change.io favicon

IceNetworks Ltd.

e-change.io

59
FinanceRussiasmallMEDIUM

E-Change.io is an online cryptocurrency exchange platform operated by IceNetworks Ltd., founded in 2022. The website offers fast and secure cryptocurrency exchange services primarily targeting Russian-speaking users, allowing conversion between cryptocurrencies and fiat currencies with minimal commissions. The platform supports multiple social login options including Google, VK, and Yandex, enhancing user convenience. The business positions itself as a reliable and efficient crypto exchange with promotional campaigns to attract users. Technically, the website employs modern web technologies such as Alpine.js, Livewire (Laravel), Pusher for real-time communication, and integrates third-party SDKs for social authentication. Hosting and DNS services leverage Cloudflare, although DNSSEC is not enabled. The site is mobile-optimized with good SEO practices and uses Yandex Metrika for analytics. However, cookie consent mechanisms are absent, and accessibility features are basic. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and locks domain transfers. Yet, it lacks published security policies or incident response contacts, and DNSSEC is not enabled, which could be improved. No critical vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, E-Change.io presents a professional and functional cryptocurrency exchange service with moderate security and privacy compliance. Strategic improvements in DNS security, privacy mechanisms, and transparency of security policies would enhance trust and compliance.

50
35
2
70
65
70
100
cryptocurrencyexchangefinancecryptobitcoin+2 more
Alpine.jsLivewire (Laravel)PusherCloudflare DNS+5
2025-10-03T20:48:11.627Z
C

Cuttly

headlinerslinks.com

72
TechnologyN/asmallMEDIUM

Cuttly operates a technology-driven link management platform specializing in branded domain URL shortening and analytics. The company targets businesses and marketers who want to enhance brand visibility and track link performance using custom domains. Founded in 2018, Cuttly positions itself as a niche SaaS provider in the URL shortening market with a focus on brand consistency and analytics capabilities. The website content is professional and well-structured, supporting the business model effectively. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. Performance is moderate with room for improvement in accessibility features. No CMS was detected, indicating a custom or lightweight platform. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or deletions. However, security headers are not explicitly present, and DNSSEC is not enabled, representing areas for enhancement. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is strong with a clear privacy policy and cookie consent banner. The absence of contact information and security policies limits transparency. Overall, the website is trustworthy and safe, with no adult or questionable content. The domain registration is consistent and appropriate for the business age. Strategic recommendations include adding security headers, publishing terms of service and security policies, enabling DNSSEC, and providing clear contact channels to improve trust and compliance.

60
68
2
80
100
90
100
brandeddomainscustomshortlinkslinkmanagementurlshorteneranalytics
jQueryBootstrapGoogle Tag ManagerCloudflare DNS
2025-10-03T20:47:26.473Z
gramax.ai favicon

GRAMAX Cybertech Pvt. Ltd.

gramax.ai

71
EnergyUnited StatesmediumMEDIUM

GRAMAX Cybertech Pvt. Ltd. is a cybersecurity services and solutions provider specializing in protecting critical infrastructure such as airports, power plants, and utilities. The company leverages expertise in converged cyber, physical, and edge computing security to deliver integrated cyber defense and risk management services. Their market position is that of a specialized firm with strong partnerships and a focus on critical infrastructure sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting enterprise clients. Technically, the website is built on Drupal 9 with Bootstrap and jQuery, hosted with GoDaddy and using Cloudflare DNS. It employs New Relic for monitoring and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and domain protections, though DNSSEC is not enabled and some security policies are not explicitly published. Security-wise, the site follows best practices such as HTTPS and domain status protections but lacks explicit incident response contacts and vulnerability disclosure policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanism. The domain is recently registered with privacy protection, consistent with the company's founding date and business model. Overall, the website is professional, trustworthy, and suitable for its target audience, with recommendations to enhance DNS security, privacy compliance, and incident response transparency to further strengthen its security posture and user trust.

55
68
59
60
72
75
100
cybersecuritycriticalinfrastructuresecurityservicesriskmanagementtechnology
Drupal 9Bootstrap 4.6jQuery 3.6New Relic monitoring+1

Partner Domains:

crowdstrike.com
partner
fortinet.com
partner

+3 more partners

2025-10-03T19:46:30.049Z
catch.club favicon

Catch.club

catch.club

47
TechnologyUnited StatesmediumHIGH

Catch.club is an online platform specializing in daily domain auctions, focusing on premium, expired, and brandable domains. It operates as a niche service within the domain registration and aftermarket industry, leveraging the infrastructure and reputation of its parent company, NameSilo, LLC. The platform targets domain investors, businesses, and individuals seeking valuable domain names, offering a streamlined auction and backordering experience. The website is professionally designed with clear navigation and relevant content, supporting a medium-sized business model founded in 2017 and based in the US. Technically, Catch.club employs modern web technologies including SvelteKit for frontend development, Cloudflare for DNS, and integrates multiple analytics and user engagement tools such as Google Tag Manager, Clicky, Hotjar, and Intercom. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting appears stable and consistent with the domain registrar's infrastructure. From a security perspective, the site enforces HTTPS and uses domain transfer protection status, but lacks visible security headers and published privacy or cookie policies, which are compliance gaps. No security.txt or vulnerability disclosure mechanisms are present, and contact information is limited to chat and WhatsApp links without direct emails or phone numbers. The domain registration is privacy protected but consistent with legitimate business practices. Overall, the security posture is moderate with room for improvement in transparency and compliance. The overall risk assessment indicates a trustworthy and professional domain auction platform with minor compliance and security policy gaps. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to enhance trust and regulatory compliance.

20
35
2
55
77
75
40
domainauctionsexpireddomainspremiumdomainsbackorderdomainmarketplace+2 more
SvelteKitCloudflare DNSGoogle Tag ManagerClicky Analytics+2

Partner Domains:

namesilo.com
partner
2025-10-03T19:45:44.410Z
wsct.com favicon

World Series of Crypto Trading 2025 | Compete for the Prize Pool

wsct.com

56
FinanceN/asmallMEDIUM

The website wsct.com represents the World Series of Crypto Trading 2025, a large-scale cryptocurrency trading competition. It targets crypto traders globally, offering a platform to compete for prize pools and showcase trading skills. The site positions itself as the largest crypto trading tournament worldwide, with events scheduled in Dubai and online qualifiers. The business model revolves around organizing and promoting these competitions, likely monetizing through sponsorships, partnerships, and participant fees. Technically, the website is built on the Tilda CMS platform, leveraging Cloudflare for DNS and content delivery. It uses modern JavaScript libraries and Google Tag Manager for analytics and tracking. The site is mobile optimized and presents a professional design with good SEO practices. However, it lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit security headers were detected. There are no visible privacy or cookie policies, which is a compliance gap. No contact or incident response information is provided, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.

30
35
2
60
72
75
100
cryptotradingcryptocurrencytradingcompetitionbitcoinonlinetournament+1 more
JavaScriptGoogle Tag ManagerTilda platformCloudflare DNS

Partner Domains:

hashhedge.com
partner
headlinerslinks.com
partner
2025-10-03T19:41:04.711Z
kursoff.biz favicon

Privacy service provided by Withheld for Privacy ehf

kursoff.biz

59
FinanceIcelandsmallMEDIUM

Kursoff.biz is an online portal focused on cryptocurrency exchange monitoring, currency exchange rates, analytics, and news primarily targeting Ukrainian-speaking cryptocurrency users and traders. The website presents itself as a reliable source for up-to-date information in the crypto industry, offering services such as exchange monitoring and financial analytics. The business appears to be small-sized and established since 2016, with domain registration protected by privacy services, which is common in the cryptocurrency sector. Technically, the website is built using modern frameworks such as Next.js and Material-UI, indicating a contemporary and responsive design approach. It leverages Cloudflare DNS and Google Tag Manager for performance and analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status, enhancing domain security. However, DNSSEC is not enabled, and explicit security headers are not confirmed in the provided data. There is no visible privacy policy, cookie policy, or terms of service, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, Kursoff.biz is a legitimate and professionally presented cryptocurrency information portal with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

20
68
2
70
75
65
100
cryptocurrencyexchangemonitoringfinanceanalyticsnews+1 more
ReactNext.jsMaterial-UICloudflare DNS
2025-10-03T19:39:34.104Z
gmrpui.com favicon

GMR Power & Urban Infra Limited

gmrpui.com

62
EnergyIndialargeMEDIUM

GMR Power & Urban Infra Limited (GPUIL) is a major Indian infrastructure company specializing in energy, transportation, EPC, DFCC, and urban infrastructure development. The company operates as part of the larger GMR Group and holds a significant market position as a fully integrated power and infrastructure service provider. Their website reflects a professional corporate presence with clear business focus and diversified services including power generation, highways, airports, and urban development projects. The target audience includes business partners, investors, and government stakeholders involved in infrastructure projects. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Microsoft Cognitive Services for voice search, and Cloudflare DNS services. The platform appears to be custom-built on ASP.NET with good mobile optimization and SEO practices. Performance is moderate with a good user experience and clear navigation structure. From a security perspective, the site uses HTTPS and domain registration protections but lacks DNSSEC and explicit security headers. No direct contact emails or phone numbers are provided, and there is no cookie consent mechanism, which may affect privacy compliance. The site holds ISO and OHSAS certifications indicating some level of operational security and quality assurance. Overall, the website is trustworthy and professionally maintained with a strong business credibility score. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance the security posture and regulatory adherence.

65
53
2
60
62
75
100
energyinfrastructureurbandevelopmenttransportationpowergeneration+3 more
Google AnalyticsGoogle Tag ManagerjQueryjQuery UI+3

Partner Domains:

gmrgroup.in
parent
gmraero.com
subsidiary

+1 more partners

2025-10-03T18:35:50.155Z
opencode.de favicon

Center for Digital Sovereignty of Public Administration (ZenDiS) GmbH

opencode.de

57
GovernmentGermanymediumMEDIUM

openCode is an official open source platform operated by the Center for Digital Sovereignty of Public Administration (ZenDiS) GmbH on behalf of the German Federal Ministry of the Interior (BMI). It serves as a central hub for the German public sector to discover, share, and develop open source software, fostering digital sovereignty and collaboration among administrative organizations. The platform offers a software index, GitLab repository access, consultation services, knowledge sharing, and community events, positioning itself as a trusted and official resource in the government technology space. Technically, the website is built on modern frameworks including React and Next.js, hosted with Cloudflare DNS and CDN services, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. However, the site lacks a visible cookie consent mechanism and explicit incident response contact information, which are areas for improvement. Overall, the platform demonstrates high professionalism, trustworthiness, and a strong commitment to quality and security in open source software for public administration.

30
33
22
80
95
70
40
opensourcepublicadministrationdigitalsovereigntygovernmentsoftware+3 more
ReactNext.jsCloudflare DNSGitLab+1

Partner Domains:

zendis.de
partner
2025-10-03T18:34:17.079Z
gatekeeperconsent.com favicon

Ezoic

gatekeeperconsent.com

64
TechnologyN/asmallMEDIUM

GateKeeper is a technology-focused consent management platform designed to facilitate GDPR compliance for website owners and businesses. Developed and maintained by Ezoic, the platform is free to use and emphasizes speed, ease of setup, and compliance with the IAB TCF 2.0 framework. The website presents a professional and consistent brand image with clear messaging targeting businesses requiring consent management solutions. The platform supports multiple languages and integrates over 1000 vendors, including Google and IAB, positioning it as a competitive offering in the consent management market. Technically, the website employs modern web technologies including Bootstrap for responsive design, Cloudflare for DNS and likely CDN services, and asynchronous script loading to optimize performance and Core Web Vitals. The site is well-optimized for SEO and mobile devices, with structured data implemented via JSON-LD. However, explicit security headers are not evident in the provided data, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the site enforces HTTPS with strong domain registration protections (EPP locks) and uses reputable hosting infrastructure. There is no evidence of exposed sensitive data or vulnerabilities in the visible content. Privacy compliance is supported by an accessible privacy policy and integrated cookie consent mechanisms, though terms of service and incident response information are absent. No direct contact information or data protection officer details are provided, which could impact trust and compliance transparency. Overall, GateKeeper demonstrates a solid security posture and technical maturity appropriate for its business model and market segment. The absence of some compliance and security documentation suggests opportunities to enhance trust and regulatory adherence. Strategic recommendations include enabling DNSSEC, publishing comprehensive security and incident response policies, and providing clearer contact channels to improve user confidence and compliance standing.

85
35
2
60
75
75
100
gdprconsentmanagementtcf20privacyfreesoftware+1 more
JavaScriptBootstrapCloudflare DNSCSS+1

Partner Domains:

ezoic.com
parent
2025-10-03T18:33:56.850Z
C

Cuttly by Web Room Studio

2s.ms

79
TechnologyN/amediumLOW

Cuttly is a technology company specializing in URL shortening and link management services, with a particular focus on compliance for SMS marketing campaigns in India via their 2s.ms domain. The platform offers businesses tools to create TRAI-compliant short links with HEADER integration, ensuring regulatory adherence and smooth message delivery. The company positions itself as a reliable and innovative player in the URL shortening market, supported by positive industry recognition and awards. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, hosted behind Cloudflare DNS services. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and a comprehensive cookie consent mechanism that aligns with GDPR requirements. From a security perspective, the site enforces HTTPS, uses domain locking to prevent unauthorized transfers or deletions, and provides cookie consent controls. However, it lacks explicit security policy documentation and a published vulnerability disclosure or security.txt file. The WHOIS data shows a domain registered since 2018 with stable status, though the registrant name differs from the brand, likely due to third-party registration. Overall, the website demonstrates a mature digital presence with strong privacy compliance and a solid security posture, suitable for its business model. Strategic improvements could include publishing detailed security policies, enabling DNSSEC, and providing direct security contact information to enhance trust and incident response readiness.

65
95
17
80
100
90
100
urlshortenertraicompliancesmsmarketinglinkmanagementprivacypolicy+3 more
jQueryBootstrapGoogle Tag ManagerCloudflare DNS
2025-10-03T18:32:46.493Z