Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
54,951–55,000 of 99,066
Covetrus.comcovetrus.com
Healthcare · United States
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Covetrus.com is a global animal-health technology and services company focused on empowering veterinarians and veterinary practices through a comprehensive platform that streamlines workflows, enhances client engagement, and provides supply chain and prescription management solutions. The company holds a strong market position as a leading provider in the veterinary healthcare sector, targeting veterinary professionals, pet parents, and suppliers. Their business model integrates technology and services to improve clinical and financial outcomes for their customers. The website infrastructure is built on WordPress with modern technologies including Gravity Forms, Yoast SEO, WP Rocket, and Google Tag Manager, hosted on Amazon AWS infrastructure. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital presence. Analytics and marketing tools are used responsibly with clear cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and domain registration practices. However, there is room for improvement by enabling DNSSEC, implementing Content-Security-Policy headers, and publishing explicit security policies and incident response contacts. No critical vulnerabilities or malicious indicators were found. Overall, Covetrus.com presents a professional, trustworthy, and well-maintained online presence suitable for its enterprise-level business. Strategic enhancements in security policy transparency and DNS security would further strengthen its posture.
MaineHealthmainehealth.org
Healthcare · United States
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
MaineHealth is a large, not-for-profit integrated health system serving Maine and northern New Hampshire. The organization focuses on providing high-quality, affordable healthcare, education for future caregivers, and medical research. It holds a strong market position as the largest healthcare provider in Maine and is nationally recognized for quality care in areas such as stroke treatment. The website reflects this professionalism with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Drupal 10 with modern frameworks and includes mobile optimization and accessibility features. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is unavailable due to a malformed request, but the domain appears legitimate and privacy protection is justified. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.
ProSearch Incprosearchmaine.com
Other · United States
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ProSearch Inc operates as a premier recruiting and staffing agency primarily serving Maine and surrounding regions. The company specializes in connecting job seekers with employers through services including temporary staffing, job recruitment, and IT consulting. The website positions ProSearch as a trusted regional leader with a history dating back to 1994, supported by partner logos and positive testimonials. The digital presence is built on WordPress with modern web technologies and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. The absence of WHOIS data reduces transparency but does not negate the legitimacy indicated by the website content and business operations. Overall, ProSearch demonstrates a mature digital infrastructure suitable for its business model but should enhance privacy and security disclosures to strengthen trust and compliance.
Protos Agencyprotosagency.com
Non-profit · United States
71Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Protos Agency is a small, specialized design agency focused on providing design, strategy, and branding services to environmental and non-profit organizations. Their website presents a professional and consistent brand image targeting environmental groups dedicated to conservation and restoration. The technical infrastructure includes modern web fonts, jQuery, and Google Analytics, indicating a moderate level of digital maturity. However, the absence of a CMS or hosting provider details limits deeper technical insights. Security posture is moderate with no visible security headers and unknown SSL configuration, but no critical vulnerabilities or exposed sensitive data were detected. The lack of privacy and cookie policies, along with missing WHOIS registration data, presents compliance and legitimacy concerns. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.
Virginia Press Associationvpa.net
Media · United States
69Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Virginia Press Association (VPA) is a longstanding media association dedicated to supporting newspapers in Virginia through advocacy, membership services, advertising, and professional development. Established in 1881, the VPA positions itself as a key regional organization championing free press ideals and providing resources to its members. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap, Amazon Polly, and Google reCAPTCHA, indicating a moderate to advanced technical infrastructure. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.
West Virginia Press Associationwvpress.org
Media · United States
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The West Virginia Press Association is a longstanding nonprofit organization serving as the voice and support system for newspapers in West Virginia. It provides legislative advocacy, legal resources, training programs, and advertising services to its members. The website reflects a professional and content-rich platform targeting media professionals and the general public interested in press and public notices. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted behind Cloudflare DNS, and uses HTTPS with good security practices, though DNSSEC is not enabled. Security posture is solid but could be enhanced with additional policies and disclosures. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is trustworthy, well-branded, and safe for general audiences.
- WWest Virginia Legals
wvlegals.com
Government · United States
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
West Virginia Legals operates as a specialized legal notice publishing platform serving the state of West Virginia. The website aggregates and publishes official legal notices from various counties, providing a valuable resource for residents, businesses, and government entities. Sponsored by ZMM Architects and Engineers and affiliated with the West Virginia Press Association, it holds a niche position in the regional government and media sector. The business model appears to be based on information dissemination and advertising revenue, targeting users seeking legal and public notices.
- TTexas State Press Association
texaspublicnotices.com
Government · United States
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Texas Public Notices website, operated by the Texas State Press Association, serves as an important platform for disseminating public notices across the state of Texas. It provides a centralized resource for accessing legal and governmental notices, targeting a general audience including citizens, businesses, and government entities. The site is positioned as a key information hub within the government sector, supporting transparency and public awareness. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and Google Fonts, with Google Tag Manager for analytics. It is built on ASP.NET Web Forms technology, indicating a mature but somewhat dated framework. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no security headers or explicit security policies are evident in the provided data. Privacy and cookie policies are not found, which is a compliance gap. Contact and incident response information are also missing, limiting user trust and support options. Overall, the site is professional and trustworthy in content and design but would benefit from enhanced security practices, privacy compliance, and clearer contact information. The missing WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and association with the Texas State Press Association support its authenticity.
- SSouth Dakota Public Notices
sdpublicnotices.com
Media · United States
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
South Dakota Public Notices is a specialized media platform operated by the South Dakota News Media Association, providing searchable access to public notices across South Dakota. The website serves a broad audience including the general public, legal professionals, and government entities, positioning itself as a regional leader in public notice dissemination. The business model appears to be based on providing information services, possibly supported by subscriptions or advertising. Technically, the site is built on ASP.NET WebForms with a moderate tech stack including jQuery and Google Tag Manager, delivering a functional and mobile-optimized user experience. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy and security practices.
- SSouth Carolina Press Association
scpublicnotices.com
Government · United States
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.scpublicnotices.com is a specialized platform operated by the South Carolina Press Association, providing searchable access to public notices across South Carolina counties and cities. It serves as a government-related information service aimed at enhancing public transparency and legal compliance. The platform uses ASP.NET Web Forms technology with some legacy libraries such as jQuery 2.2.4 and includes Google Analytics for visitor tracking. The site is mobile optimized and employs structured data for SEO benefits. However, it lacks visible privacy and cookie policies, which impacts its privacy compliance posture. Security-wise, HTTPS is enforced, but the absence of security headers and use of outdated libraries present areas for improvement. No contact emails or phone numbers are explicitly provided on the main page, which could affect user trust and support accessibility. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced privacy disclosures and security hardening.
- OOregon Newspaper Publishers Association
publicnoticeoregon.com
Media · United States
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Public Notice Oregon is an online platform operated by the Oregon Newspaper Publishers Association that provides a centralized search service for public notices published in Oregon newspapers. The website targets a broad audience including the general public, legal professionals, and government entities seeking access to legal and government announcements. The platform offers advanced search capabilities filtered by county, city, and publication, facilitating efficient access to relevant notices. Technically, the website is built on ASP.NET Web Forms with legacy jQuery and includes modern web fonts and analytics tools such as Google Analytics and Microsoft Clarity. The site is mobile optimized and provides a good user experience with clear navigation and search functionality. However, it lacks modern security headers and updated JavaScript libraries, which could be improved. From a security perspective, the site uses HTTPS and asynchronous loading of analytics scripts, but it does not expose security policies, privacy or cookie notices, or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business purpose and geographic focus, indicating a legitimate and trustworthy domain. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, updated technical components, and improved security practices to strengthen trust and regulatory adherence.
GeoTel Corporationnewzgroup.com
Media · United States
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Newz Group, a division of GeoTel Corporation, is a well-established media monitoring service provider with over 25 years of experience specializing in rural, local, and regional news coverage. Their services include monitoring newspapers, online news, broadcast TV & radio, social media listening, and press release distribution. The company targets government agencies, contractors, universities, and businesses seeking comprehensive media monitoring solutions. Their market position is strong, supported by long domain age and trusted client base including federal government entities. Technically, the website is built on WordPress with a modern theme and plugins, including LayerSlider and Cognito Forms for data collection. The site is mobile optimized and uses Google Analytics for tracking. Hosting details are not explicit but DNS is managed via Azure DNS. Performance is moderate with good SEO and basic accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protection enabled. However, DNSSEC is not enabled and no advanced security headers were detected. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Incident response and security policies are not publicly disclosed. Overall, the website is professional, trustworthy, and business-focused with no signs of malicious content or blocking. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing explicit security and incident response policies to enhance trust and compliance.
- NNew Mexico Press Association
newmexicopublicnotices.com
Government · United States
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.newmexicopublicnotices.com is operated by the New Mexico Press Association and serves as a public service platform providing free access to public notices published in legal newspapers across New Mexico. It targets citizens, taxpayers, and businesses who rely on public notices for government transparency and legal information. The site offers advanced search capabilities and an optional paid subscription service for expedited email delivery of customized public notice searches. Technically, the site is built on ASP.NET Web Forms with legacy JavaScript libraries such as jQuery 2.2.4 and includes Google Tag Manager for analytics. The design is professional and content is relevant and well-structured, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS enabled but lacking modern security headers and privacy compliance mechanisms such as cookie consent and privacy policy. Contact information is limited to an administrative email address. Overall, the site is trustworthy and legitimate, consistent with its official operator, but could improve privacy compliance and security best practices.
- NNew Jersey Press Association
njpublicnotices.com
Government · United States
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.njpublicnotices.com serves as a public notice search platform affiliated with the New Jersey Press Association, targeting users interested in accessing legal and public notices across New Jersey counties and cities. It offers advanced search capabilities and a structured interface to facilitate public access to notices. The platform is built on ASP.NET Web Forms technology, utilizing jQuery and Modernizr, and integrates Google Tag Manager for analytics. The site demonstrates a moderate level of digital maturity with good mobile optimization and user experience but lacks some modern security headers and explicit privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional design and association with a press organization support its credibility. Overall, the site is functional and safe for general audiences but would benefit from enhanced security and privacy practices.
- NNebraska Press Association
nepublicnotices.com
Government · United States
50Medium
NIS2 17 · GDPR —
NIS2 17 · GDPR —
The website www.nepublicnotices.com serves as a public notice search platform for the state of Nebraska, operated under the Nebraska Press Association brand. It provides users with access to legal and governmental public notices, supporting transparency and public information dissemination. The site targets a broad audience including the general public, legal professionals, and government entities. Technically, the site is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the site appears legitimate and trustworthy based on content and branding, but domain registration details should be verified for full trust.
- SSearch Public Notices
montanapublicnotices.com
Government
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.montanapublicnotices.com appears to serve as a portal for accessing public legal notices in Montana, primarily through an embedded iframe pointing to an internal search interface. The site lacks substantive content, metadata, and business information, indicating a minimal digital presence. Technically, it relies on an outdated jQuery library and does not demonstrate modern web practices such as mobile optimization or accessibility features. Security posture is weak due to the absence of HTTPS and security headers, and no privacy or cookie policies are present, which raises compliance concerns. The WHOIS data is unavailable or indicates the domain is not registered, which is a significant trust and legitimacy concern. Overall, the site is accessible but minimal and lacks critical security and compliance features.
- MMissouri Press Association
mopublicnotices.com
Government · United States
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.mopublicnotices.com serves as a public notice aggregator for the state of Missouri, operated as a public service by the Missouri Press Association. It provides a searchable database of public notices, targeting a broad audience including residents, businesses, and government entities within Missouri. The site is positioned as a key resource for accessing legal and public information statewide. Technically, the site is built on ASP.NET WebForms with jQuery and integrates Google Analytics for visitor tracking. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. However, the site lacks explicit privacy and cookie policies, and no contact information is readily available in the analyzed content. Security-wise, HTTPS is used but no security headers were detected, and the WHOIS data is missing or shows no registration, which raises concerns about domain legitimacy. Overall, the site is functional and trustworthy in content but would benefit from improved transparency and security practices.
- MMinnesota Newspaper Association
mnpublicnotice.com
Government · United States
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.mnpublicnotice.com serves as a public notice platform for the state of Minnesota, operated under the Minnesota Newspaper Association brand. It provides users with search capabilities for public notices, supporting government transparency and legal compliance. The site targets a broad audience including the general public, government entities, and legal professionals. Technically, the site is built on ASP.NET WebForms with jQuery and uses Google Tag Manager for analytics. The design is professional and mobile-optimized, though some accessibility and SEO features are basic. Security posture is moderate with HTTPS enabled but missing some recommended security headers. Privacy compliance is basic with a privacy policy and terms of service present but no visible cookie consent or GDPR-specific disclosures. The lack of WHOIS registration data is a concern for domain legitimacy and trust, though the website content and branding appear consistent with a legitimate public notice service. Overall, the site is functional and professional but would benefit from improved security headers, privacy compliance enhancements, and verification of domain registration.
Michigan Press Associationmichiganpress.org
Media · United States
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Michigan Press Association is a well-established non-profit organization founded in 1868 that promotes press freedom and supports newspaper publishers across Michigan. The website serves as a hub for membership services, legal hotlines, advertising placement, and public notices. The organization maintains a strong market position as a statewide press association with over 320 members. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences.
Iowa Newspaper Associationinanews.com
Media · United States
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Iowa Newspaper Association (INA) operates a professional website serving as a hub for Iowa newspapers, public notices, and media-related resources. The organization is a well-established non-profit entity founded in 1996, providing services such as public notice hosting, training programs, scholarships, and press release distribution. The website targets Iowa residents, newspaper professionals, and media consumers, positioning itself as a key regional media association with nearly 240 member newspapers. The business model focuses on supporting and engaging the newspaper community and the public with free and paid services.
- NNewspaper Association of Idaho
idahopublicnotices.com
Government · United States
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The IdahoPublicNotices.com website is a public service platform operated by the Newspaper Association of Idaho, providing free access to legally required public notices such as foreclosures, hearings, bids, and government activities across Idaho. It serves as a centralized portal for citizens to stay informed about local and state government and judicial activities. The website is positioned as a trusted statewide resource with partnerships including Idaho government transparency initiatives. Technically, the site is built on ASP.NET WebForms with jQuery and uses Typekit fonts and Google Analytics for tracking. While functional and content-rich, the technology stack is somewhat dated, and there is room for modernization and improved mobile optimization. Security posture is moderate with HTTPS usage but lacks important security headers and cookie consent mechanisms. WHOIS data is missing, which slightly impacts domain trustworthiness, though the website content and partnerships support legitimacy. Overall, the site is a valuable government-related resource with good content quality but could benefit from enhanced security and privacy compliance.
- FFlorida Public Notices
floridapublicnotices.com
Government · United States
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Florida Public Notices operates a specialized online platform providing access to public and legal notices published in Florida newspapers. The website serves residents, legal professionals, and government entities by offering searchable databases of notices including foreclosures, estate filings, and legal actions. The platform supports user registration for notifications and archives notices up to three years. The business is well-established with a domain age dating back to 1998, indicating a stable market presence in the government and media sectors. Technically, the website leverages modern frontend technologies such as React and Redux, hosted via Amazon Cloudfront CDN for performance. The design is professional and mobile-optimized, providing a good user experience with clear navigation. However, accessibility features are basic and SEO optimization is moderate. The site uses Google Analytics for tracking but lacks visible cookie consent mechanisms and privacy policies, which are compliance gaps. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which reduces its security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies and consent mechanisms impacts privacy compliance negatively. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced security configurations and privacy compliance improvements to align with best practices and regulatory requirements.
Other
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website mddcnews.com appears to be a parked or ad redirect domain with minimal accessible content. The main page consists primarily of an iframe redirecting to an external domain, accompanied by multiple external advertising and tracking scripts from suspicious sources. There is no visible business information, contact details, or privacy and cookie policies, indicating a lack of compliance and transparency. The domain is registered since 2011 with Network Solutions, LLC, but the website content does not reflect a mature or legitimate business presence. From a technical perspective, the site lacks HTTPS on the main content, has no security headers, and uses multiple third-party scripts that may pose privacy and security risks. The site is not mobile optimized and has poor accessibility and SEO characteristics. The security posture is weak, with no evident best practices implemented. Overall, the site presents a low trustworthiness profile with significant security and compliance gaps. It is likely monetized through advertising and redirects rather than providing genuine content or services. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, removing suspicious third-party scripts, and providing clear business and contact information to improve credibility and compliance.
- Arkansas Press Association
arkansaspress.org
Media · United States
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Arkansas Press Association is a well-established non-profit organization founded in 1998, serving the newspaper and media industry within Arkansas. The website provides information about membership benefits, marketing services, publications, public notices, and a foundation supporting the industry. The target audience primarily includes newspaper publishers and media professionals in Arkansas. The business model revolves around membership services, marketing, and fundraising activities. Technically, the website is built on WordPress with WooCommerce integration for e-commerce capabilities such as donations and a shop. It uses common web technologies including jQuery, Bootstrap, and Font Awesome. Hosting appears to be managed via Network Solutions. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, it lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps. Tracking is minimal, limited to WordPress.com stats. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust.
Bokus.combokus.com
Retail · Sweden
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bokus.com is a well-established Swedish online bookstore offering a wide range of books, including physical copies, e-books, and audiobooks through its Bokus Play subscription service. The website targets Swedish-speaking customers and positions itself as a leading e-commerce retailer in the book industry in Sweden, emphasizing competitive pricing, free shipping over a threshold, and fast delivery. The site features comprehensive product categories, promotions, and customer service support, reflecting a mature e-commerce business model. Technically, the website employs modern JavaScript libraries such as Flickity for carousels, Google Tag Manager and Google Analytics for tracking, and OneTrust for cookie consent management. The site is served over HTTPS with strong security headers, indicating a good security posture. The website is mobile-optimized with good navigation and SEO practices, although accessibility features could be enhanced. Security-wise, the site enforces HTTPS, uses cookie consent banners compliant with GDPR, and does not expose sensitive data in the HTML. However, there is no explicit security policy or vulnerability disclosure page, which could be improved. The WHOIS data for the domain is not publicly available, which limits domain trust verification, but the website content and structure suggest a legitimate and professional business. Overall, Bokus.com presents a secure, professional, and user-friendly online bookstore with strong privacy compliance and a solid technical foundation. Strategic improvements could focus on enhancing accessibility, publishing explicit security policies, and improving transparency around domain registration.
Adlibris Bokhandel | Please choose your Adlibrisadlibris.com
Retail · Sweden
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Adlibris.com is an e-commerce website primarily focused on retailing books, creative project supplies, and children's products, targeting the Swedish and Nordic markets. The website content is professionally presented with good design quality and clear navigation, supporting a general audience. The technical infrastructure leverages modern web fonts and Amazon S3 hosting, with Google Tag Manager integrated for analytics. Mobile optimization and SEO appear adequate, though accessibility features are basic. Security posture is moderate with no visible security headers or explicit SSL configuration details in the provided content. The absence of privacy and cookie policies and lack of contact information are notable gaps in compliance and user trust. WHOIS data is unavailable, which reduces domain trustworthiness but does not necessarily indicate illegitimacy. Overall, the website functions as a legitimate retail platform but would benefit from enhanced security and compliance transparency.
Vismavisma.lv
Technology · Latvia
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Visma Latvija is a prominent IT business cloud solutions provider operating under the Visma Group, a leading European software manufacturer. The company offers a broad portfolio of services including ERP, HRM, business intelligence, and custom IT system development, targeting businesses across Latvia and Europe. Their market position is strong, supported by over 180 companies in the group and a large client base. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation.
Monoclemonocle.com
Media · United Kingdom
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Monocle is a well-established global media brand specializing in international affairs, culture, business, and design. It operates through multiple channels including a magazine, radio station, and website, targeting a broad audience interested in global affairs and lifestyle. The company maintains a consistent and professional brand image with high-quality content and a clear market position as a premium media provider. Technically, the website is built on WordPress and integrates modern technologies such as Google Tag Manager, Cookiebot for consent management, and Piano.io for subscription services. The site demonstrates good SEO practices, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses a comprehensive cookie consent mechanism compliant with GDPR. However, it lacks a dedicated security policy or incident response contact details, which are recommended for enhanced transparency and trust. Overall, Monocle presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in security communication and incident response readiness would further strengthen its posture.
- RRegister.com™
naplan.com
Other
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
naplan.com is currently a parked domain managed by Register.com, a reputable domain registrar and Network Solutions subsidiary. The website does not host active business content but instead displays a placeholder page with advertising and domain parking services. The domain is aged, created in 2000, but lacks any substantive content or business presence. Technically, the site uses basic HTML, CSS, and JavaScript with embedded advertising scripts from Google Adsense and Youseasky. There is no evidence of modern CMS or frameworks, and the site lacks security best practices such as HTTPS enforcement and security headers. Privacy and cookie policies are absent, and no contact or business information is provided, limiting trust and compliance. The site is accessible without WAF or security challenges but is heavily monetized through ads and tracking scripts.
- GGlobal Trading Ltd
png.com
Energy
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Global Trading Ltd operates as a specialized provider in international trade finance and commodity trading, offering services such as letters of credit, export and import finance, and risk mitigation solutions. Their market position is that of a niche B2B service provider catering to businesses engaged in global trade across multiple commodity sectors including energy, agriculture, metals, and chemicals. The website is well-structured with good content quality and consistent branding, targeting businesses seeking secure and efficient trade finance solutions. Technically, the website employs modern web technologies including jQuery, Font Awesome, Google Fonts, and Google Analytics, hosted under a reputable registrar. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. The absence of a CMS suggests a custom or static site architecture. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and related regulations. Tracking scripts are present, but privacy compliance is minimal. Overall, the website presents a moderate risk profile with no critical security issues detected but with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response information to enhance trust and compliance.
- Ubisoft
ubisoft.com
Media
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Ubisoft is a leading global video game publisher known for iconic franchises such as Assassin's Creed, Rainbow Six, and Far Cry. The official website serves as a comprehensive platform for game information, digital sales, and community engagement. The site is built on modern web technologies including React and Next.js, ensuring a fast and responsive user experience across devices. Privacy and cookie policies are well implemented with consent management, reflecting compliance with GDPR standards. Security posture is strong with HTTPS enforcement and security headers, though the absence of WHOIS data for the domain is unusual and warrants further verification. Overall, the website reflects a mature digital presence consistent with a major entertainment company.
Baltimore Citybaltimoreishiring.com
Government · United States
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
BaltimoreIsHiring.com is a government-operated recruitment portal launched in 2024 to facilitate employment opportunities within Baltimore City. It serves as a centralized platform for job seekers and current employees to access job listings, hiring events, and executive recruitment information. The site leverages WordPress with Elementor and integrates multimedia content such as Vimeo videos to engage visitors. The platform is hosted with Amazon Registrar and uses official Baltimore City branding and social media channels to establish trust and authenticity. While the site is well-designed and content-rich, it lacks formal privacy and cookie policies, which are critical for compliance and user trust. Security practices are basic with HTTPS enabled but missing DNSSEC and security headers, indicating room for improvement in hardening the site against threats.
Nonebmorethissummer.org
Government · United States
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Bmore This Summer is a community engagement platform supported by Baltimore City government, providing youth with information on summer programs, events, and opportunities. The website serves as a centralized hub to connect Baltimore youth with resources such as internships, volunteer roles, and mental health support. The platform leverages WordPress with Elementor and Jetpack, hosted by Automattic Inc., ensuring a modern and maintainable technical infrastructure. Social media integration with official Baltimore City accounts enhances community outreach. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNS security and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional, serving its target audience effectively.
Aquent Scoutaquentscout.com
Technology · United States
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Aquent Scout is a technology company offering a smart vendor management system designed to streamline the management of recruiting firms for HR and talent acquisition teams. Founded in 2020 and operating under Scout Exchange LLC, the platform consolidates workflows, contracts, and invoicing into a single system, enhancing recruiting efficiency and cost control. The website presents a professional, well-branded digital presence with clear messaging and targeted content for employers and recruiting firms. Technically, the site is built on WordPress, hosted via AWS infrastructure, and employs modern SEO and privacy compliance tools such as All in One SEO Pro and OneTrust. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. Overall, the site demonstrates a mature digital infrastructure and business credibility, with no signs of malicious activity or content blocking.
- RoboHead
robohead.net
Technology
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
RoboHead operates as a specialized project management platform tailored for in-house marketing and creative teams, positioning itself as a market leader in this niche. The website showcases a comprehensive suite of services including project requests, planning, team management, feedback, workflow automation, and reporting, aimed at enhancing productivity and collaboration. The business model is SaaS-based, targeting medium-sized organizations focused on marketing and creative workflows. Technically, the website is built on WordPress with Elementor, leveraging modern SEO and analytics tools such as Google Tag Manager and LinkedIn Insight Tag, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and no evident vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a professional and trustworthy front, but the absence of WHOIS data and explicit privacy and terms policies suggests areas for improvement in transparency and compliance.
Aquent Studiosaquentstudios.com
Technology · United States
62Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Aquent Studios is a global co-creation agency specializing in delivering breakthrough brand experiences through a partnership model. Founded in 2006 and operating under the parent company Aquent LLC, the agency offers a broad range of services including experience and product design, marketing analytics, consulting, content creation, and emerging technologies. Their client portfolio includes notable brands across technology, healthcare, and retail sectors, positioning them as a significant player in the agency market. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to enterprise clients seeking innovative marketing solutions. Technically, the website is built on WordPress, leveraging modern SEO tools like All in One SEO Pro and tracking via Google Tag Manager. Hosting appears to be managed through WP Engine, ensuring reliable performance and scalability. The site implements cookie consent mechanisms compliant with GDPR, enhancing privacy compliance. Mobile optimization and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs domain transfer protection. However, DNSSEC is not enabled, and no explicit security policy or incident response contacts are published, which could be areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website demonstrates a strong business credibility and digital maturity with a high trustworthiness rating. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding vulnerability disclosure information to further strengthen security posture and transparency.
Aquent Talentaquenttalent.com
Other · United States
63Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Aquent Talent is a well-established global leader in recruiting marketing, creative, and design talent. The company offers a comprehensive suite of staffing solutions including diversity recruiting and employer of record services. Their website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. The technical infrastructure leverages WordPress CMS, React, and AWS hosting, indicating a modern and scalable platform. Security posture is solid with HTTPS enforcement and domain transfer protections, though some security headers and policies could be enhanced. Privacy compliance is robust with cookie consent and privacy policy clearly implemented. Overall, the website projects high professionalism and trustworthiness suitable for its business domain.
Media · Vietnam
63Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
2Sao.vn is a Vietnamese entertainment news website operated by Công ty Cổ phần truyền thông VietNamNet. It provides up-to-date news on showbiz, music, film, fashion, and related entertainment topics targeting a general audience interested in Vietnamese and international celebrity news. The site is well-established with a consistent brand presence and clear business registration, positioning itself as a popular media outlet in Vietnam. Technically, the website uses modern JavaScript libraries, Google Tag Manager, and multiple advertising and tracking services to monetize and analyze user engagement. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is adequate with HTTPS and some security meta tags, but lacks comprehensive security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Ambitious Impactambitiousimpact.com
Non-profit
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Ambitious Impact is a non-profit organization dedicated to empowering exceptional individuals through training, research, and funding to address significant global challenges. Their flagship offering is a charity entrepreneurship incubation program, positioning them as a niche player in the non-profit sector focused on impact-driven initiatives. The website is built on the Wix platform, leveraging modern web technologies and Google Tag Manager for analytics. While the site demonstrates good design quality and user experience, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided. Security posture is basic with HTTPS enabled but missing security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence partially mitigates this risk. Overall, the site is functional and safe but requires improvements in compliance, security, and transparency to enhance trust and credibility.
Giving What We Cangivingwhatwecan.org
Non-profit · United Kingdom
75Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Giving What We Can is a reputable non-profit organization dedicated to promoting effective philanthropy by guiding donors to high-impact charities and encouraging giving pledges. The organization operates primarily in the UK and USA, with a strong community focus and recognized market position in the effective altruism space. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as React and Next.js, hosted on Vercel, ensuring fast performance and good user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the domain and website present a trustworthy and credible platform for charitable giving.
Other · Denmark
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain againstmalaria.com is registered since 2006 but currently serves only a standard HTTP 404 Not Found error page, indicating no accessible website content. There is no metadata, structured data, or business information available on the site. The WHOIS data shows the domain is registered through Ascio Technologies, a registrar, with no privacy protection and a clientTransferProhibited status, indicating domain stability but no direct registrant business information. The lack of active content and absence of security or privacy policies suggest the website is either inactive or under maintenance. Technical infrastructure details are minimal, with no evidence of HTTPS or security headers. Overall, the site is non-functional and provides no business or security assurances.
- Paměť národa
pametnaroda.cz
Non-profit · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Paměť národa is a well-established non-profit project dedicated to preserving historical testimonies and cultural memory related to totalitarian regimes, primarily in the Czech Republic. The website serves as a digital archive offering access to witness recordings, photographs, and stories, complemented by a magazine and educational initiatives. It targets researchers, historians, students, and the general public interested in history and memory preservation. The project is supported by reputable institutions such as Post Bellum and the Ústav pro studium totalitních režimů, enhancing its credibility and market position. Technically, the website is built on Drupal 10, utilizing modern JavaScript libraries like Slick Carousel and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity improvement. The lack of WHOIS data reduces trust signals but does not indicate malicious intent, given the site's affiliations and professional presentation. Overall, Paměť národa presents a trustworthy, content-rich platform with a strong cultural and educational mission. Strategic enhancements in security and privacy compliance would further solidify its position and user trust.
Future for Ukrainefutureforukraine.eu
Non-profit · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Future for Ukraine is a Czech-based non-profit organization dedicated to providing humanitarian aid and support to Ukraine through fundraising campaigns and targeted assistance such as rehabilitation for children, military aid, drone rescue support, and mine clearance. The website serves as a platform to engage donors and supporters, featuring multiple campaigns and calls to action. Technically, the site is built on WordPress using popular plugins like GiveWP for donations and Elementor for design, hosted by a reputable Czech provider, WEDOS Internet. The site is accessible, mobile-optimized, and uses HTTPS with a good SSL configuration, but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy within its niche but should enhance privacy compliance and security transparency to improve user trust and regulatory adherence.
Nadační fond pro Ukrajinuproukrajinu.org
Non-profit · Czech Republic
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nadační fond pro Ukrajinu is a Czech non-profit organization dedicated to supporting Ukraine in its defense against Russian aggression. The organization operates a fundraising platform and an e-commerce site selling themed merchandise to raise funds. It has a strong media presence with mentions in major international outlets such as BBC, CNN, NYTimes, and Spiegel, indicating a reputable market position within the humanitarian aid sector. The website is primarily targeted at Czech and European audiences sympathetic to Ukraine's cause. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Slick Carousel for UI components. The site is mobile-optimized and presents a professional design with good navigation and content relevance. However, some technical improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, no explicit security headers were detected, and there is no visible incident response or vulnerability disclosure policy. The WHOIS data is unavailable due to privacy protection or query failure, which slightly reduces trust but is common for non-profits. Overall, the security posture is moderate with room for improvement. The overall risk assessment is low, with the main recommendations focusing on enhancing security headers, implementing cookie consent for GDPR compliance, and publishing security policies. These steps will improve user trust and regulatory compliance while maintaining the organization's positive reputation and operational effectiveness.
- AAdmiral
writingfort.com
Media
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain writingfort.com currently serves only a 404 Not Found error page with embedded information about Admiral, a service provider specializing in copyright access control and privacy compliance for digital publishers. The site lacks active business content, contact information, or interactive features, indicating it is either inactive or used solely as a service endpoint. The technical infrastructure is hosted on Google Cloud Platform with AWS DNS servers, showing a modern cloud hosting environment. Security practices mentioned include HTTPS enforcement and frequent certificate rotation, but no DNSSEC or advanced security headers are present. Overall, the security posture is adequate for a service endpoint but limited by the lack of visible business operations or user engagement. The domain registration is consistent and legitimate, with a mature age and no privacy protection, aligning with a professional service provider. However, the absence of contact details, terms of service, and cookie consent mechanisms limits privacy compliance and business credibility. The website is safe with no adult or questionable content detected. Given the lack of accessible content, the overall risk is low but the site offers minimal value to end users or customers.
WTMD 89.7wtmd.org
Media · United States
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
WTMD 89.7 is a well-established public radio station focused on music discovery and community engagement, operating under Baltimore Public Media. The website offers live streaming, playlists, event information, and donation options, targeting music enthusiasts and public radio supporters. Technically, the site is built on WordPress with modern plugins and integrates analytics and advertising tools from Google and Facebook. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and terms of service. The WHOIS data is privacy protected, which is typical for non-profit media entities. Overall, WTMD presents a professional and trustworthy online presence with good content quality and user experience.
Radixradix.website
Technology · United Arab Emirates
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Radix is a well-established domain registry company founded in 2015 and headquartered in the United Arab Emirates. It operates one of the world’s largest portfolios of new generic top-level domains (gTLDs), serving a global audience of online businesses, startups, and e-commerce sellers. The website clearly communicates Radix's business model, market position, and key services, emphasizing its commitment to empowering digital identities worldwide. The content is professionally presented with strong branding and showcases real customer success stories, enhancing trust and credibility. Technically, the website leverages modern web technologies including Cloudflare DNS, Vite for build optimization, and lazy loading for media assets, resulting in fast performance and excellent mobile optimization. Security best practices are evident with HTTPS enforcement, presence of security headers, and CSRF protection tokens. The domain registration details are consistent with the business claims, further supporting legitimacy. While the website lacks explicit published security policies or vulnerability disclosure programs, it provides clear abuse reporting channels and maintains GDPR compliance with privacy and cookie policies. No critical vulnerabilities or suspicious content were detected. Overall, Radix demonstrates a mature digital infrastructure and a strong security posture suitable for its industry. Strategic recommendations include enabling DNSSEC for enhanced DNS security, publishing formal security and incident response policies, and adding a vulnerability disclosure or security.txt file to improve transparency and trust. These steps would further strengthen Radix's security posture and compliance stance.
Vue.js Meetup Valenciavuejsvalencia.com
Technology · Spain
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Vue.js Meetup Valencia is a community-driven website focused on organizing meetups and sharing knowledge about the Vue.js ecosystem in Valencia, Spain. The site targets developers and community members interested in Vue.js technology, providing a platform for events and expert talks. The business model is community meetup organization without commercial transactions or services. Technically, the site uses modern frontend technologies including Vue.js, Buefy, and Bulma CSS, hosted likely via DonDominio. The site is mobile optimized and has good design quality but lacks advanced SEO and accessibility features. Security posture is basic with no detected security headers or privacy policies, and DNSSEC is not enabled. No contact or incident response information is provided, limiting trust and compliance. Overall, the domain registration is consistent and legitimate for a community site. Strategic improvements include adding privacy and cookie policies, security headers, and contact information to enhance trust and compliance.
Arts Council Santa Cruz Countyartscouncilsc.org
Non-profit · United States
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Arts Council Santa Cruz County is a small non-profit organization dedicated to nurturing and investing in artists and the arts throughout Santa Cruz County. The website reflects a focused mission on supporting the local arts community with key services including artist support and community arts programs. The organization has been established since 2013, with domain registration details consistent with its stated purpose and location. Technically, the website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. No CMS is detected, indicating a custom or static site architecture. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and DNSSEC, which are recommended for enhanced security. No privacy or cookie policies are present, indicating gaps in compliance with privacy regulations such as GDPR. No contact information or incident response details are found, limiting transparency. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, security hardening, and clearer contact information to enhance user trust and regulatory adherence.
Santa Cruz Museum of Art & Historysantacruzmah.org
Non-profit · United States
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Santa Cruz Museum of Art & History (MAH) is a well-established non-profit cultural institution located in Santa Cruz, California. It serves as a vibrant community hub offering a diverse range of art and history exhibitions, educational programs, public events, and community collaborations. The museum targets local residents, tourists, students, and art enthusiasts, providing memberships, donations, sponsorships, and facility rentals as part of its business model. The website reflects a professional and consistent brand image with clear calls to action and comprehensive content about its offerings. Technically, the website employs modern web technologies including Vue.js, lazy loading for images, and Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting details are not explicitly disclosed but the use of CDNs and asynchronous scripts suggests a contemporary infrastructure. From a security perspective, the site enforces HTTPS and includes some security headers, though there is room for improvement by adding Content-Security-Policy and other recommended headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy likely present but no visible cookie consent mechanism or detailed GDPR compliance indicators. WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and contact information support legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to further strengthen the security posture.