Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

157327
Websites
130
Industries
113
Countries
52
Avg Score
Page 47 of 155|Showing 2301-2350 of 7749
mhcaworksafely.ca favicon

Manitoba Heavy Construction Association

mhcaworksafely.ca

58
TransportationCanadamediumMEDIUM

The Manitoba Heavy Construction Association (MHCA) operates the WorkSafely program, serving as a trusted safety partner for Manitoba’s heavy construction industry. The website presents MHCA as a recognized leader offering tailored safety training, COR® certification, expert consulting, and resources to empower companies to build safer worksites. The target audience primarily includes companies within Manitoba's heavy construction sector. The business model is that of a membership association providing education, certification, and advisory services to enhance workplace safety and compliance. Technically, the website is built on WordPress with a modern tech stack including WooCommerce for e-commerce capabilities, Gravity Forms for data collection, and Kadence Blocks for layout. It uses Cloudflare for DNS and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized with good SEO practices and structured data, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited status. However, DNSSEC is not enabled, and no explicit security headers were detected. There is no published privacy policy, cookie policy, or incident response information, which are gaps in compliance and transparency. The site collects user data via a contact form but lacks visible cookie consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, serving its industry well. Security posture is adequate but could be enhanced with better DNS security and published policies. Privacy compliance needs improvement to meet GDPR and related standards. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and implementing consent mechanisms to improve compliance and user trust.

15
58
2
60
75
75
100
heavyconstructionsafetytrainingcorcertificationmanitobaworksafely+3 more
WordPressWooCommerceGravity FormsKadence Blocks+3
2025-10-04T03:29:35.708Z
postimg.cc favicon

Postimages.org

postimg.cc

60
TechnologyN/amediumMEDIUM

Postimages.org is a well-established free image hosting service founded in 2010, offering users the ability to upload and share images with permanent links suitable for forums, blogs, and social media. The platform supports multiple upload methods including direct upload, URL upload, and plugins for websites, complemented by a Windows application. The service targets a broad general audience including forum users and bloggers, positioning itself as a reliable and accessible image hosting provider in the technology sector. Technically, the website employs modern web technologies including HTML5, CSS, and JavaScript, with integrations of advertising and bidding libraries such as Prebid.js, Google IMA SDK, and Amazon AAX. Hosting and DNS services are managed via Cloudflare and NameCheap, ensuring good performance and uptime. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status protections like clientTransferProhibited. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance domain and web application security. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic; while privacy and terms of service pages exist, no cookie consent mechanism was found despite the presence of advertising scripts. Overall, Postimages.org presents a moderate risk profile with a solid business credibility and technical foundation but could improve security and privacy compliance to better protect users and enhance trust. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding a cookie consent mechanism to align with GDPR and privacy best practices.

45
65
2
70
52
70
100
imagehostingfreeuploadforumsphotosharingcloudflare+1 more
HTML5CSSJavaScriptPrebid.js+3
2025-10-04T03:25:41.687Z
bigbank.top favicon

BigBanK

bigbank.top

52
FinanceUnited StatessmallMEDIUM

BigBanK operates as an electronic currency exchange service primarily targeting Russian-speaking users with English language support. The website offers automated currency exchange services, user account management including registration and login, and wallet management features. The business appears to be a small-sized entity founded in 2022, operating in the finance sector with a focus on electronic and cryptocurrency exchanges. The market position is niche, serving users needing currency exchange services with a digital-first approach. Technically, the website is built on WordPress with a reliance on jQuery libraries and integrates third-party services such as Google Fonts, Yandex Metrika, Google Analytics, and JivoSite for live chat support. The site is mobile-optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security and privacy practices.

55
35
2
70
-
85
100
currencyexchangefinanceelectronicmoneycryptocurrencyrussianlanguage+1 more
jQueryjQuery UIWordPressPHP+2
2025-10-04T03:07:32.585Z
videohive.net favicon

Envato

videohive.net

71
TechnologyAustralialargeMEDIUM

VideoHive, operated by Envato, is a leading online marketplace specializing in stock video footage, motion graphics templates, and video effects. Established in 2006 and headquartered in Australia, it serves a global audience of creators and businesses seeking high-quality visual assets to enhance video productions. The platform is part of the larger Envato ecosystem, which includes complementary services such as Envato Elements, Tuts+, and Placeit, reinforcing its market position as a comprehensive creative resource hub. Technically, the website employs a modern technology stack including JavaScript frameworks, Turbo (Hotwire), and robust monitoring tools like Datadog and Rollbar. Hosting and DNS services are managed via Cloudflare, ensuring performance and security. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. From a security perspective, VideoHive enforces HTTPS, integrates Cookiebot for GDPR-compliant cookie consent management, and uses CSRF tokens to protect forms. While explicit security headers are not fully confirmed, the presence of monitoring and error tracking tools indicates a mature security posture. The domain's WHOIS data is consistent with the business identity, showing a long-established registration without privacy masking, which supports trustworthiness. Overall, VideoHive presents a professional, secure, and privacy-conscious platform with strong business credibility and technical maturity. Recommendations include enabling DNSSEC for enhanced DNS security and verifying the implementation of all recommended security headers to further strengthen the security posture.

65
83
2
100
47
85
100
stockfootagevideoeffectsaftereffectstemplatesdigitalmarketplacecreativeassets+1 more
JavaScriptDatadogRollbarCookiebot+2

Partner Domains:

elements.envato.com
partner
tutsplus.com
partner

+2 more partners

2025-10-04T02:39:09.808Z
tutsplus.com favicon

Envato Tuts+

tutsplus.com

77
EducationAustralialargeLOW

Envato Tuts+ is a well-established online education platform founded in 2008, offering creative skills tutorials and courses to a global audience. It operates under the Envato brand, a recognized leader in digital assets and creative marketplaces. The platform targets creative professionals and learners seeking to enhance their skills through high-quality, expert-led content. The business model focuses on providing free and premium educational content, supported by advertising and Envato's broader ecosystem services. Technically, the website employs modern web technologies including JavaScript frameworks, Tailwind CSS, and Cookiebot for privacy compliance. It leverages Cloudflare for DNS and likely CDN services, ensuring fast performance and robust availability. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, Envato Tuts+ demonstrates strong practices such as enforced HTTPS, domain registration protections, and comprehensive cookie consent management. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly disclosed, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR and privacy regulations. It poses low risk to users and partners, with recommendations to enhance DNS security and transparency around security policies to further strengthen its posture.

80
100
17
100
47
85
100
educationtutorialsonlinecoursescreativeskillsenvato
JavaScriptCookiebotGoogle Tag ManagerCloudflare DNS

Partner Domains:

elements.envato.com
subsidiary
placeit.net
subsidiary

+3 more partners

2025-10-04T02:33:38.711Z
4ange.com favicon

4ange

4ange.com

66
FinanceRussiamediumMEDIUM

4ange.com is a Russian-language cryptocurrency exchange platform established in 2019, offering a wide range of crypto and fiat currency exchange services. The website provides users with the ability to buy and sell various cryptocurrencies including Bitcoin, Ethereum, USDT, and many others, supporting multiple payment systems and bank cards. The platform targets cryptocurrency users primarily in Russia and Russian-speaking regions, positioning itself as a reliable and comprehensive exchange service with competitive rates and a user account system featuring notifications and security measures such as captcha verification. Technically, the website employs modern JavaScript libraries and frameworks, including jQuery, Tom Select, and Select2, and uses Cloudflare for DNS services. The site is mobile-optimized with good navigation and SEO practices. Security is enforced through HTTPS, clientTransferProhibited domain status, and input validation on forms. However, some security headers like Content-Security-Policy are missing, and DNSSEC is not enabled, representing areas for improvement. From a security perspective, the platform demonstrates a moderate security posture with good practices in place but lacks a formal vulnerability disclosure policy and some advanced security headers. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. The domain WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, 4ange.com is a professional and trustworthy cryptocurrency exchange service with room for enhancement in privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing a Content-Security-Policy header, adding a security.txt file, and introducing a cookie consent mechanism to improve compliance and user trust.

65
50
2
85
72
75
100
cryptocurrencyexchangebitcoincryptofinance+2 more
JavaScriptjQueryTom SelectSelect2+2
2025-10-04T01:25:24.363Z