Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
59,601–59,650 of 99,066
- FFreestar
freestar.com
Technology · United States
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Freestar is a specialized programmatic advertising partner focused on providing header bidding and monetization solutions to digital publishers and advertisers. The company positions itself as a trusted partner with a strong emphasis on long-term growth and white glove customer service. Their market presence is supported by industry partnerships and client testimonials, highlighting their effectiveness in increasing ad revenue for clients. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, LinkedIn Insight Tag, and other marketing tools, hosted with GoDaddy and DNS managed via Cloudflare. The site is well-optimized for SEO and mobile devices, offering a professional user experience. Security posture is solid with HTTPS and domain registration protections, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is currently basic, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the website reflects a mature digital presence with room for enhanced compliance and security transparency.
Kakadu - Der Kinderpodcastkakadu.de
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
- Deutscher Landkreistag (DLT)
kreisnavigator.de
Government · Germany
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutscher Landkreistag (DLT) is a prominent German governmental association representing 294 counties, covering a significant portion of Germany's population and land area. The website serves as an authoritative resource listing all member counties and their respective leaders, targeting government officials, local authorities, and interested citizens. It operates as a non-profit entity focused on advocacy and information dissemination within the public administration sector. Technically, the website is built on the Joomla CMS platform enhanced with Gantry5 framework and utilizes modern web technologies such as jQuery and FontAwesome. The site demonstrates good digital maturity with responsive design, structured data for SEO, and a cookie consent mechanism aligned with GDPR requirements. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent, indicating a reasonable security posture. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced protection and transparency. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively supports its mission as a governmental association platform. Strategic improvements in security policy publication and header implementation could further strengthen its security posture.
- KKreismusikschule des Westerwaldkreises
kreismusikschule-ww.de
Education · Germany
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Kreismusikschule Westerwald is a regional music school based in Montabaur, Germany, offering a broad range of music education services including instrumental lessons, ensembles, and special programs for all ages. The institution targets a wide audience from infants to seniors, emphasizing quality education and community engagement. The website reflects a well-structured educational business model focused on regional outreach and musical development. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. Hosting is managed via netclusive.de, a German hosting provider, ensuring reliable infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks advanced security headers and cookie consent mechanisms, which are recommended for enhanced compliance and protection. No signs of WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the content. Overall, the website is professional, trustworthy, and serves its educational purpose effectively.
- ComperiaLead
comperialead.pl
Finance · Poland
65Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
ComperiaLead.pl operates as a leading affiliate marketing program in Poland, offering innovative tools and a mobile application to enable users to earn money online. The platform targets Polish internet users interested in affiliate marketing and online business opportunities. The website presents a professional and consistent brand image with a focus on finance-related affiliate services. Technically, the site employs a modern tech stack including Bootstrap, Google Analytics, Facebook Pixel, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible HTTP security headers and explicit security policies. The absence of WHOIS data due to privacy protection slightly reduces trust but is common in this business sector. Overall, the site is safe, compliant with GDPR, and well-positioned in its market niche.
Other · Poland
75Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website comperiaraty.pl appears to be a small business site based in Poland, likely focused on financial services such as loans or installment plans, as suggested by the domain name and typical keywords. The site is built on WordPress using the Astra theme and Elementor page builder, indicating a moderate level of technical maturity. The presence of Cookiebot and Google Tag Manager scripts shows some awareness of privacy and marketing needs, although critical legal pages like privacy policy and terms of service are missing. Security posture is basic with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is functional but lacks comprehensive compliance and security maturity, which could impact user trust and regulatory adherence.
- Generator domen
generatordomen.pl
Technology · Poland
57Medium
NIS2 2 · GDPR 15
NIS2 2 · GDPR 15
The website generatordomen.pl offers a domain name generation service targeted primarily at Polish-speaking users seeking inspiration for registering internet domain names. The service operates as a simple web application where users input descriptions of their intended website content, and the system suggests suitable domain names. The business appears to be a small-scale technology service founded in 2017, with no visible parent or subsidiary companies. The website is straightforward, with a clean and consistent branding approach, and content quality is good for its niche purpose. From a technical perspective, the site uses standard HTML5, CSS3, and JavaScript without any detected frameworks or CMS. It is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. The site is served over HTTPS with DNSSEC enabled, indicating a good baseline for security. However, no advanced security headers are detected, and no privacy or cookie policies are present, which limits compliance and trust. Security posture is adequate but could be improved by implementing standard security headers, publishing privacy and cookie policies, and providing contact information for incident response. No vulnerabilities or suspicious content were detected, and the domain registration details align well with the website's market and language, supporting legitimacy. Overall, the site is functional and trustworthy for its purpose but lacks several compliance and security best practices. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its credibility and user trust.
Bezvafinance s.r.o.hyperfinance.cz
Finance · Czech Republic
73Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Hyperfinance.cz is a Czech Republic based financial product comparison and brokerage portal operated by Bezvafinance s.r.o., licensed by the Czech National Bank. The website offers comprehensive comparison services for loans, mortgages, accounts, and insurance products, targeting consumers seeking to save time and money by selecting optimal financial products online. The platform features a professional design, clear navigation, and a broad portfolio of partner financial institutions, establishing a strong market presence with over 235,000 clients annually and more than 10 years in the finance sector. Technically, the site employs modern web technologies including Bootstrap 5, jQuery, Google Tag Manager, and Facebook Pixel, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and security headers, although explicit security policy and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of WHOIS domain registration data reduces domain trustworthiness from a registration perspective. Overall, the website is a credible and professional financial services platform with room for improvement in transparency and contact information.
Finance · Czech Republic
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website www.zaplonasplatky.cz operates as an online lending platform offering quick installment loans ranging from 10,000 to 60,000 CZK. It targets individuals in the Czech Republic seeking fast personal loans with an easy online application process. The site is professionally designed with consistent branding and good content quality, focusing on its core financial services. Technically, the site is built on the Webflow CMS platform, uses Cloudflare for hosting and security, and integrates multiple third-party analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The cookie consent mechanism is comprehensive and GDPR compliant, presented in Czech language with clear user options. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are not confirmed and could be improved. The lack of WHOIS registration data and absence of explicit contact information or terms of service pages slightly reduce business credibility. Overall, the site is functional and trustworthy for its purpose but would benefit from enhanced transparency and security documentation.
Zaplozaplopujcky.cz
Finance · Czech Republic
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Zaplo.cz is a Czech financial services website specializing in fast, tailored loans for individuals. Established in 2017, it operates with a moderate digital maturity, leveraging modern web technologies such as Bootstrap 5 and Google Tag Manager. The website demonstrates good content quality and user experience, with a clear focus on loan services tailored to the Czech market. Technically, the site is hosted likely via WEDOS, uses HTTPS, and implements a comprehensive cookie consent mechanism compliant with GDPR standards. Security posture is adequate with HTTPS and consent management, though lacks explicit security headers and dedicated security policy pages. Overall, the site is legitimate, with no blocking or WAF interference detected, and integrates multiple third-party analytics and advertising platforms with user consent.
—
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AMC Theatres | The Shopamctheatresshop.com
E-commerce · United States
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
AMC Theatres | The Shop is an official e-commerce platform offering licensed movie collectibles, apparel, and artwork, including exclusive AMC Theatre merchandise. The site targets movie fans and AMC customers, positioning itself as the official merchandise outlet for AMC Theatres. The business operates on the Shopify platform, leveraging its e-commerce capabilities and integrations with marketing and analytics tools such as Klaviyo and Ketch. The domain is newly registered in 2024, consistent with the launch of this merchandise store. Technically, the site uses modern web technologies and is moderately optimized for performance and mobile devices. Security posture is good with HTTPS enforced and domain transfer protections, though some security headers are not explicitly detected. Privacy and cookie policies are not clearly found, indicating room for compliance improvement. Overall, the site is professional, trustworthy, and safe for general audiences.
Team Blue Internet Services UK Limited t/a UKDedicatedukdedicated.com
Technology · United Kingdom
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
UKDedicated is a well-established UK-based hosting provider offering a comprehensive range of managed dedicated servers, cloud hosting, colocation, and related services. With over 20 years of experience and ISO 27001 certification, the company targets ecommerce stores, digital agencies, IT service organizations, and corporate clients seeking reliable and secure hosting solutions. Their market position is strengthened by trusted partnerships and a strong UK-based support team. Technically, the website employs modern web technologies including Google Analytics and Chatlio for live chat support, with a responsive design and good SEO practices. While the hosting infrastructure details are not explicitly stated, the company offers a variety of hosting platforms and control panel options, indicating a mature technical environment. Security posture is solid with ISO 27001 certification and domain transfer protection, though improvements are recommended in DNSSEC implementation, cookie consent mechanisms, and public incident response disclosures. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the business history. Overall, UKDedicated presents a professional, trustworthy, and technically competent online presence with moderate tracking and good business credibility. Strategic enhancements in privacy compliance and security transparency would further strengthen their position.
- TTown of Superior, Colorado
superiorcolorado.gov
Government · United States
69Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The Town of Superior, Colorado's official municipal website serves as a comprehensive portal for residents, businesses, and visitors, offering extensive information on community events, government services, public safety, and recreational activities. The site positions itself as a trusted local government resource with a clear focus on transparency and community engagement. The presence of multiple language options and social media integration enhances accessibility and outreach. Technically, the website employs a modern technology stack including jQuery, Google Maps API, and the OpenCities CMS platform by Granicus, built on ASP.NET WebForms. The site demonstrates good mobile optimization, accessibility features, and moderate performance. Analytics and user experience tools such as Monsido and Google Tag Manager are utilized for monitoring and improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is incomplete, likely due to .gov domain policies, but the domain's legitimacy is supported by its official government status and consistent branding. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic enhancements in security headers and privacy mechanisms would further strengthen its posture.
Wecovi BVwecoviservice.com
Hospitality · Netherlands
68Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Wecovi BV is a well-established Dutch company specializing in providing guest sets and inventory solutions for the hospitality and recreation industry across Europe. Positioned as a market leader, the company offers a broad range of products including bungalow inventory, cleaning packages, and specialized guest sets, targeting businesses in the recreation sector. Their digital presence is supported by a modern website with e-commerce capabilities and tools like SetWizard to enhance customer experience. Technically, the website leverages contemporary frameworks such as Laravel Livewire, Alpine.js, and Tailwind CSS, hosted on Azure DNS infrastructure, indicating a mature and scalable digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a credible business operation with moderate to high digital maturity.
Energy · Germany
54Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gesellschaft für Wirtschaftliche Strukturforschung mbh (GWS) is an independent, private economic research, corporate, and policy consulting firm based in Germany. Founded in 2008, GWS specializes in economic structure research, energy and climate economics, and global development modeling. Their services target public and private decision-makers, offering empirical analyses, scenario modeling, and policy advice. The company maintains a professional online presence with a well-structured website powered by TYPO3 CMS and hosted by Hetzner Online GmbH. The site features clear navigation, good mobile optimization, and comprehensive content relevant to their sector. Security-wise, the website uses HTTPS and implements cookie consent mechanisms but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected. Overall, GWS demonstrates a solid business and technical foundation with room for enhanced security transparency.
- DDataCharts
regioboard.de
Other · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
RegioBoard by DataCharts is a specialized service offering regional economic data analysis and benchmarking tools primarily targeting regional economic development agencies and stakeholders in Germany. The business operates a subscription-based model with tiered offerings and personalized support, leveraging partnerships with research and IT organizations. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted on a German provider 1blu.de. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS assumed but lacking advanced security headers and explicit incident response policies. Privacy compliance is basic but present with a privacy policy and cookie policy, though no active consent mechanism is detected. Overall, the site is trustworthy and professionally maintained with good business credibility and client testimonials.
Muse by Cliosmusebyclios.com
Media
65Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Muse by Clios is a newly launched media publishing platform focused on delivering the latest creative marketing and advertising news. Positioned as a premier news site in its niche, it offers rich content across multiple categories including entertainment, lifestyle, and community voices. The site leverages a modern WordPress CMS with integrations of popular analytics and marketing tools such as Google Analytics, HubSpot, and FullStory, indicating a mature digital infrastructure. The domain is recently registered in 2024, consistent with the new business launch. Security posture is adequate with HTTPS and domain protection statuses, but lacks advanced security headers and formal privacy or cookie policies. Overall, the site presents a professional and trustworthy front for its target audience of marketing professionals and enthusiasts.
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at jsrdn.com is currently inaccessible due to an Access Denied error, likely caused by a Web Application Firewall or other security mechanism. This prevents any meaningful extraction of business, technical, or security content from the site. The domain is registered since 2013 with NameCheap and uses AWS DNS servers, indicating a potentially stable hosting environment. However, the lack of accessible content and metadata severely limits the ability to assess the company's business model, services, or compliance posture. Security posture cannot be evaluated due to missing HTTPS and security headers information. Overall, the site appears to be either restricted or misconfigured, resulting in a very low AI score and high risk for users seeking information or services.
Other
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The analyzed URL https://www.submithub.com/to/ leads to a 404 error page indicating the requested page does not exist. The domain www.submithub.com shows no WHOIS registration data, suggesting either the domain is unregistered, privacy protected, or the WHOIS query failed to retrieve data. The website content is minimal, containing only a styled error message with a link to the homepage. There are no metadata tags, structured data, forms, contact information, or social media links present. The technical infrastructure appears basic with no detected modern frameworks or CMS. Security posture is weak due to lack of HTTPS confirmation and absence of security headers. Privacy compliance is non-existent as no privacy or cookie policies are found. Business credibility is low given the lack of company information or trust indicators.
Photonicphotonic.wtf
Other · Iceland
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Photonic.wtf is a newly registered website (January 2024) with minimal content focused on design, clothing, and websites. The site presents a simple branded landing page with no detailed business information, contact details, or interactive features. The domain is privacy protected, which is common for new or small businesses but reduces transparency. The technical infrastructure is basic, using standard HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be via NS1 DNS services, but no further hosting details are available. Security posture is minimal with no security headers or policies detected, and no HTTPS enforcement details available. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the website appears to be in an early stage of development or a placeholder with limited business credibility and low trust indicators.
- Hypeddit
hypeddit.com
Media · United States
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Hypeddit is a well-established SaaS platform founded in 2014 that provides comprehensive music promotion tools including AI-powered ads, smart links, download gates, and fan engagement features. The platform targets musicians and artists seeking to grow their audience and increase streams across major music platforms like Spotify, SoundCloud, and YouTube. Hypeddit has a strong market presence with over 100,000 artists using its services and is recognized by reputable media outlets. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple third-party marketing and analytics tools including Facebook SDK, Google Tag Manager, Hotjar, and Zendesk for support. The site is hosted by Bluehost and uses HTTPS with a good SSL configuration, although security headers like Content-Security-Policy are currently commented out and could be improved. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Business credibility is high, supported by testimonials, media logos, and transparent WHOIS data. Overall, Hypeddit demonstrates a mature digital infrastructure and a professional online presence.
Scribit.Proscribit.pro
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Scribit.Pro is a specialized technology company focused on making online videos accessible to a broad audience, including people with disabilities such as hearing and visual impairments. Their offerings include software tools for adding subtitles, audio descriptions, sign language translations, and transcripts to videos, ensuring compliance with WCAG standards. The company also provides professional services and training through their academy, positioning themselves as a niche player in the digital accessibility market. Technically, the website is built using modern frameworks like Next.js and Material UI, hosted on Google Cloud infrastructure, and employs a headless CMS (Prismic) for content management. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site uses HTTPS and modern JavaScript but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration is consistent with the business age and claims, enhancing trustworthiness. Overall, the website presents a professional and credible front but would benefit from enhanced privacy compliance and security best practices.
Playwireplaywire.com
Media · United States
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Playwire is a specialized advertising technology company focused on maximizing ad revenue for publishers and driving engagement for advertisers. Established in 2007, the company offers a Revenue Amplification Platform (RAMP) with managed services and technical solutions for websites, mobile apps, and desktop applications. Their market position is reinforced by multiple industry certifications, awards, and a client base that includes top publishers and advertisers. The website demonstrates a professional and consistent brand presence with comprehensive content tailored to their target audience of publishers and advertisers. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing tools such as Google Analytics, Google Tag Manager, and tracking pixels from Facebook and Reddit. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed with HTTPS enforcement and secure form handling, although explicit security headers could be improved. From a security perspective, the site shows a mature posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR compliance, and user consent mechanisms. Contact information is transparent and includes multiple channels, enhancing business credibility. However, the absence of WHOIS data for the domain introduces a minor trust concern, though the overall legitimacy is supported by the website content and certifications. Overall, Playwire presents a trustworthy and professional digital presence with strong business and technical foundations. Strategic recommendations include enhancing security header implementation, establishing a public vulnerability disclosure policy, and resolving WHOIS data visibility to further strengthen trust and compliance.
Deutschlandfunkdlf.de
Media · Germany
65Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Deutschlandfunk is a prominent German public radio broadcaster specializing in quality journalism, providing news, political and cultural analysis, podcasts, and live streaming services. It operates under the parent organization Deutschlandradio and maintains a strong market position in the German media landscape. The website demonstrates excellent content quality, professional design, and consistent branding, targeting a general audience interested in current affairs and culture. Technically, the site uses standard web technologies including JavaScript, CSS, and SVG, hosted on reputable providers such as Cogent Communications and Vodafone IP. The site is mobile-optimized and accessible, with good SEO practices evident through meta tags and Open Graph data. Performance is moderate, with room for improvement in advanced security headers and analytics transparency. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy, cookie, and security policies reduces privacy compliance scores. No incident response or vulnerability disclosure information is published, which could be enhanced to improve trust and compliance. Overall, Deutschlandfunk's website is a trustworthy and professional platform with strong business credibility but could benefit from improved privacy and security transparency to align with best practices and regulatory requirements.
Deutschlandradiodradio.de
Media · Germany
69Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Deutschlandradio is Germany's national public broadcasting corporation providing multiple radio programs including Deutschlandfunk, Deutschlandfunk Kultur, and Deutschlandfunk Nova. It serves a broad audience interested in news, culture, and educational content, operating as a public law entity since 1994. The website reflects a mature digital presence with comprehensive content, professional design, and consistent branding. Technically, the site uses modern web technologies, including JavaScript and SVG, and is hosted on reputable infrastructure with Cogent and Vodafone IP nameservers. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and terms of service. Overall, the site is trustworthy, professional, and well-optimized for users.
Deutschlandfunk / Deutschlandradiohoerspielundfeature.de
Media · Germany
67Medium
NIS2 25 · GDPR 33
NIS2 25 · GDPR 33
The website www.hoerspielundfeature.de is a professionally maintained public media portal operated under the Deutschlandradio umbrella, specifically featuring audio dramas, documentaries, and cultural features from Deutschlandfunk and Deutschlandfunk Kultur. It serves a German-speaking audience interested in high-quality audio content distributed via web streaming and popular podcast platforms. The site demonstrates a mature digital infrastructure with a modern tech stack, mobile optimization, and good SEO practices. Security posture is strong with HTTPS and appropriate headers, though it lacks explicit privacy and cookie policies, as well as contact and incident response information, which are areas for improvement. Overall, the domain and hosting align with a reputable public broadcaster, indicating high legitimacy and trustworthiness.
Deutschlandfunk Novadeutschlandfunknova.de
Media · Germany
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Deutschlandfunk Nova is a German public radio broadcaster targeting younger audiences with a mix of news, podcasts, and pop culture content. It operates under the Deutschlandradio umbrella, providing a trusted and established media service. The website is professionally designed, mobile-optimized, and rich in multimedia content, reflecting a mature digital presence. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and popular media player libraries, hosted on reputable infrastructure providers. Security posture is solid with HTTPS enforced, though some security headers are not visibly implemented. Privacy compliance is partially met with a comprehensive privacy policy but lacks explicit cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness as a public media entity.
Deutschlandradiodeutschlandradio.de
Media · Germany
69Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Deutschlandradio is a large, reputable public broadcasting corporation in Germany, providing national radio services including news, culture, and podcasts. The website reflects a mature digital presence with excellent content quality, consistent branding, and a user-friendly design optimized for mobile and accessibility. The technical infrastructure leverages modern web technologies and is hosted on professional networks, ensuring reliable performance. Security posture is strong with HTTPS and basic security headers, though improvements can be made in explicit cookie consent and published security policies. Overall, the domain registration and hosting details align well with the organization's public profile, indicating high legitimacy and trustworthiness.
Stichting Hart voor Zwollestichtinghartvoorzwolle.nl
Non-profit · Netherlands
51Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Stichting Hart voor Zwolle is a Dutch non-profit organization dedicated to combating loneliness among vulnerable populations in Zwolle, including elderly, refugees, disabled individuals, and youth. The organization mobilizes young volunteers aged 18-35 to engage in meaningful social activities and support, fostering community connections. The website reflects a well-established local presence with a clear mission, active community engagement, and a focus on volunteerism and social inclusion. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted by a reputable Dutch provider. Security posture is good with HTTPS and DNSSEC enabled, though additional security headers and formal policies could enhance protection. Privacy compliance is strong with clear cookie consent and privacy policies. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.
Elite Dailyelitedaily.com
Media
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Elite Daily is a prominent digital media company specializing in news, entertainment, and lifestyle content primarily targeting millennials and Gen Z audiences. It operates under the Bustle Digital Group umbrella, leveraging a strong social media presence and modern web technologies to deliver engaging content. The website demonstrates a mature digital infrastructure with a responsive design, fast performance, and good SEO practices. Security posture is robust with HTTPS enforcement and appropriate security headers, though no explicit incident response or vulnerability disclosure policies are publicly available. Privacy and cookie policies are comprehensive and indicate GDPR compliance, supporting user trust and regulatory adherence. Overall, Elite Daily presents a professional and trustworthy online presence with room for improvement in transparency of contact and security policies.
Romperromper.com
Media
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Romper is a media website focused on lifestyle, parenting, and family-related content, operating under the Bustle Digital Group umbrella. The site offers articles and media content aimed at a general audience interested in family and lifestyle topics. The website demonstrates a professional design with consistent branding and moderate content quality. Technically, the site uses modern web technologies including React and CDN services, with moderate performance and good mobile optimization. However, the absence of visible privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data indicate gaps in security posture and compliance. These factors reduce the overall trustworthiness and raise concerns about domain legitimacy. Strategic improvements in security practices, privacy compliance, and domain transparency are recommended to enhance trust and compliance.
The Zoe Reportthezoereport.com
Media
75Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The Zoe Report is a well-established media brand focused on fashion, beauty, and lifestyle content targeted primarily at women interested in personal style. Founded by Rachel Zoe in 2009 and operating under the Bustle Digital Group umbrella, it offers trend reports, beauty advice, and lifestyle articles. The website demonstrates a professional and consistent brand presence with high-quality content and a modern, responsive design. Technically, the site leverages modern web technologies including React-based JavaScript bundles, advanced CSS, and integrates multiple third-party advertising and analytics services such as Google DoubleClick, InMobi, and DoubleVerify. The presence of a consent management platform indicates awareness of privacy regulations, although explicit privacy and terms of service pages were not found in the provided content. Security posture is strong with HTTPS enforced and security headers implied, but the absence of explicit security contact information and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the brand's market presence and content quality mitigate some risk. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.
Inverseinverse.com
Media
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Inverse is a digital media company specializing in science, technology, culture, and entertainment news. It operates as part of the Bustle Digital Group, positioning itself as a reputable media brand targeting a general audience interested in these topics. The website demonstrates a modern, professional design with a strong focus on user experience and mobile optimization. Technically, it leverages React and modern web standards, ensuring fast performance and good SEO practices. Security-wise, the site enforces HTTPS and includes essential security headers, though no explicit incident response or vulnerability disclosure policies are publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, the site is trustworthy and well-maintained, though the absence of WHOIS data and direct contact information slightly limits transparency.
W Magazinewmagazine.com
Media · United States
75Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
W Magazine is a prominent media brand specializing in fashion, culture, film, and entertainment content. It operates a highly professional and visually rich website that serves a broad audience interested in these sectors. The business model is primarily advertising and subscription-based, supported by a strong digital presence and multimedia content including videos and articles. The website is owned by W Media, a large media entity with a consistent brand identity and market leadership in its niche. Technically, the website employs modern web technologies including React, video streaming, and advanced CSS styling. It leverages multiple third-party services for advertising, analytics, and consent management, ensuring compliance with privacy regulations such as GDPR. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements security best practices including consent management and secure form handling. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website presents a low risk profile with high trustworthiness and professionalism. Strategic recommendations include publishing detailed security and incident response policies, implementing a security.txt file for vulnerability disclosures, and enhancing accessibility features to further improve compliance and user experience.
Scary Mommyscarymommy.com
Media · United States
73Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Scary Mommy is a well-established digital media company specializing in parenting, lifestyle, and entertainment content primarily targeting mothers and families. Owned by Bustle Digital Group, it holds a strong market position within the parenting media niche. The website demonstrates a mature technical infrastructure leveraging modern web technologies such as React and optimized for mobile and desktop platforms. Security posture is robust with HTTPS enforcement and comprehensive security headers, though a dedicated security policy and incident response contact could enhance transparency. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site presents a professional, trustworthy, and user-friendly experience with no critical vulnerabilities detected.
Nylonnylon.com
Media
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
NYLON is a well-established media brand focused on fashion, entertainment, and music, targeting a young and culture-obsessed audience. The website features rich, professionally curated content with a bold and colorful aesthetic that positions it as a trendsetter in its niche. Technically, the site employs modern web technologies, including JavaScript frameworks, image CDNs, and integrates multiple advertising and tracking services, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service documentation are not found in the provided content. The absence of WHOIS data limits domain registration insights, but the overall site professionalism and external partnerships support legitimacy. Privacy compliance is partially addressed via a consent banner, but could be improved with clearer policies and contact information.
Inizio Evokeinizioevoke.com
Healthcare · United States
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Inizio Evoke is a global health marketing, communications, and transformation platform that leverages data-driven insights and human centricity to unlock growth for healthcare clients worldwide. The company operates multiple offices across North America, Europe, Latin America, and Asia Pacific, supported by a global network of partners. Their key services include brand and creative development, communications, transformation consulting, access solutions, and media services. The website reflects a professional and modern digital presence with strong branding and comprehensive content tailored to healthcare industry stakeholders. Technically, the website is built using modern web technologies including React and Next.js, with content managed via DatoCMS. It integrates multimedia elements such as Mux video players and employs Google Tag Manager for analytics and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration status, which should be verified to ensure trustworthiness. Overall, Inizio Evoke presents a credible and professional online presence with strong business and technical foundations. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and clarifying domain registration details to improve trust and compliance.
Customily, Inc.customily.com
E-commerce · United States
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Customily, Inc. is a specialized SaaS provider offering advanced product personalization software tailored for e-commerce businesses. Their platform integrates seamlessly with major marketplaces and storefronts such as Shopify, Etsy, WooCommerce, and Amazon, enabling sellers to create and sell customizable products with automated workflows and print-on-demand fulfillment. The company positions itself as a market leader with a strong client base including notable brands, supported by comprehensive features like real-time previews, automatic print file generation, and extensive clipart libraries. Technically, the website is built on Webflow CMS and leverages modern web technologies including Google Analytics, Microsoft Clarity, Facebook Pixel, Hotjar, and LiveChat for analytics, marketing, and customer support. The site is fast, mobile-optimized, and well-structured with clear navigation and professional design. Privacy and cookie compliance are well implemented with visible consent mechanisms and detailed policies. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and published incident response or vulnerability disclosure policies. The absence of WHOIS registration data is a notable transparency gap, though the professional presentation and business references mitigate some concerns. Overall, Customily presents a mature, trustworthy e-commerce SaaS offering with strong technical and business foundations. Strategic improvements in security transparency and domain registration disclosure would further enhance trust and compliance.
Conzent ApSconzent.net
Technology · Denmark
57Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Conzent ApS is a Denmark-based technology company specializing in cookie consent management solutions compliant with global privacy regulations such as GDPR, CCPA, VCDPA, DMA, LGPD, and POPIA. Their flagship product, Conzent.net, offers an IAB and Google CMP certified cookie banner solution designed for businesses of all sizes worldwide. The company emphasizes ease of use, regional targeting, developer APIs, and multi-language support, positioning itself as a comprehensive and reliable compliance partner in the privacy technology market. The website reflects a professional and user-friendly design with clear navigation and extensive content supporting their services and compliance expertise. Technically, the site is built on WordPress with modern plugins and integrations, including Google Tag Manager and CleanTalk anti-spam, hosted via joker.com registrar with Cloudflare DNS. Security posture is strong with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear policies, cookie consent mechanisms, and GDPR alignment. Business credibility is high, supported by transparent contact information, certifications, and customer testimonials. Overall, Conzent.net presents a trustworthy and mature digital presence suitable for its target market.
HERBER Vergleichsportaleherber-vergleichsportale.de
Other · Germany
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
HERBER Vergleichsportale is a German-based company operating since 2010, specializing in product comparison portals that provide mathematically based rankings to assist consumers in making informed purchase decisions. The company positions itself as a pioneer in the German market with a strong emphasis on privacy, avoiding advertising and tracking cookies, and engaging in local voluntary projects. The website is built on modern technologies including Statamic CMS, TailwindCSS, and Alpine.js, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and minimal tracking, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and professional, with no signs of suspicious activity or content blocking.
- Wwietzker media
wietzker.com
Media
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
wietzker media is a small media-related business with a website offering content in German and English. The site is minimalistic, providing language selection but lacking detailed business descriptions or contact information. The domain is well-established, created in 2001, and registered with a reputable German registrar, indicating a legitimate presence. Technically, the website is simple, built with basic HTML and CSS, hosted by Cronon GmbH, and lacks modern web technologies or CMS platforms. Security posture is minimal, with no DNSSEC, security headers, or HTTPS status provided, and no privacy or cookie policies published. Overall, the site is accessible and safe but lacks many modern security and compliance features.
- SSyna
syna.de
Energy · Germany
70Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Syna is a large German energy network operator specializing in electricity and gas distribution. The company provides a comprehensive range of services including network operation, connection management, redispatch, electromobility, and partner support. The website is professionally designed, well-structured, and targets energy consumers, businesses, municipalities, and partners. Technically, the site leverages modern web technologies such as Adobe Experience Manager, Cloudflare CDN, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies could be improved. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site demonstrates a high level of professionalism and trustworthiness in the energy sector.
Finanzamt Neuwiedfinanzamt-neuwied.de
Government · Germany
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Finanzamt Neuwied is a regional government tax office operating under the Rheinland-Pfalz state government in Germany. It provides tax administration services including income tax processing, public notifications, and taxpayer support. The website targets local citizens, businesses, and taxpayers, offering information on tax matters, career opportunities, and official announcements. The site is well-branded with consistent government identity and links to official partner domains, reinforcing its legitimacy and trustworthiness. Technically, the website is built on TYPO3 CMS with modern responsive design and uses Bootstrap for styling. Hosting is inferred to be via Versatel based on nameservers. The site performs moderately well with good mobile optimization and accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen security posture. Overall, the website is professional, secure, and compliant with GDPR in terms of privacy policy presence, though cookie consent is missing. The domain WHOIS data aligns with the government entity, supporting high legitimacy. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.
8th Wall8thwall.com
Technology
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
8th Wall is a technology company specializing in WebAR (Web Augmented Reality) solutions, providing a platform that enables developers and businesses to create immersive AR experiences accessible via web browsers. The company positions itself as a leader in the WebAR space, offering tools and services that empower creative and commercial AR applications globally. The website reflects a mature digital presence with modern design, mobile optimization, and integration of advanced analytics and marketing tools such as HubSpot, Google Tag Manager, and Pendo. From a technical perspective, the site employs a contemporary tech stack including Semantic UI and various JavaScript libraries, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced and multiple security headers implemented, indicating adherence to best practices. However, the absence of explicit privacy and terms of service pages, as well as lack of visible contact information, suggests areas for improvement in transparency and compliance. The WHOIS data for the domain www.8thwall.com is unavailable, which limits the ability to fully assess domain legitimacy and registration consistency. Despite this, the website content and technical indicators support the conclusion that 8th Wall is a legitimate and professional entity. Overall, the site scores well on content quality, technical implementation, and security, but privacy compliance and business credibility scores are moderated by missing policy documents and contact details.
- Carnyx Group Ltd
thedrumawards.com
Media · United Kingdom
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Drum Awards Festival website represents a well-established global marketing and media awards event operated by Carnyx Group Ltd. The platform offers a comprehensive awards program celebrating creativity and strategic excellence across multiple marketing disciplines. The site targets marketing professionals, agencies, and brands worldwide, providing entry, judging, and event services. The business model is centered on event organization, sponsorship, and publishing winning work, positioning itself as a leading global awards program in the media sector. Technically, the website leverages a modern tech stack including JavaScript, Google Tag Manager, LinkedIn Insight, and Freshchat, hosted primarily on Amazon S3 with domain registration through Tucows Domains Inc. The CMS platform Evessio is used for event management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNS security. Security posture is solid with HTTPS enforced and domain locking mechanisms in place. However, the absence of DNSSEC and security headers such as Content-Security-Policy and X-Frame-Options are notable gaps. Privacy compliance is basic, with a privacy policy and terms of service present but lacking a cookie consent mechanism, which may affect GDPR adherence. No incident response or vulnerability disclosure information is found. Overall, the website is professional, trustworthy, and well-aligned with its business goals. Strategic improvements in security and privacy compliance would enhance its risk profile and user trust.
Carnyx Group Ltdthedrummarketingawards.com
Media · United Kingdom
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Drum is a well-established global media platform specializing in marketing, advertising, and creative industries. It operates a comprehensive website offering editorial content, marketing awards, events, and business intelligence services. The platform targets marketing professionals, agencies, and brands worldwide, positioning itself as a leading authority in marketing news and industry recognition. The Drum is owned by Carnyx Group Ltd and maintains a consistent and professional brand presence across its digital assets. Technically, the website employs a modern technology stack including Google Tag Manager, Facebook Pixel, Hotjar, and other analytics and marketing tools. The site is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate, with a well-structured and visually appealing design that supports user engagement. From a security perspective, the site enforces HTTPS and uses multiple security best practices, including consent management for cookies and tracking. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website presents a low risk with a strong professional image and good security posture. The main concern is the absence of public WHOIS data, which reduces transparency but is likely due to privacy protection. Strategic recommendations include enhancing security header implementation, publishing a security policy, and improving accessibility compliance.
- MINDS + ASSEMBLY, LLC
mna.co
Healthcare · United States
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MINDS + ASSEMBLY, LLC is a large creative agency specializing in the commercialization and branding of healthcare brands. Founded in 2012, the company employs over 500 creative professionals and positions itself as a leader in healthcare brand design. Their website reflects a strong market presence with a focus on healthcare clients seeking powerful and beautiful brand commercialization. Technically, the website is built on modern frameworks such as Next.js and React, hosted with assets on DigitalOcean, and uses Cloudflare DNS. The site is fast, mobile-optimized, and well-structured with good SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is good with clear cookie consent and privacy policies. Contact is primarily via email, with no phone numbers listed. Overall, the site is professional, trustworthy, and well-maintained.
- Ads of the World™
adsoftheworld.com
Media
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Ads of the World™ is a well-established online platform showcasing creative advertising campaigns globally, operating as part of The Clio Network. It serves advertising professionals, agencies, and marketers by providing a rich repository of advertising content and inspiration. The website demonstrates a professional design with consistent branding and a clear focus on media and advertising industry content. Technically, the site employs modern web technologies including Ruby on Rails, Turbolinks, Google Tag Manager, and Freestar advertising scripts, ensuring a responsive and engaging user experience. Security posture is good with HTTPS enforced and standard security headers likely in place, though explicit security policies and incident response information are not published. Privacy and cookie policies are present and indicate GDPR compliance, but direct company contact information is limited to forms and social media channels. The absence of WHOIS registration data is a notable anomaly, reducing domain registration trustworthiness despite the professional nature of the site. Overall, the website is a credible and valuable resource within the advertising media sector, but domain registration inconsistencies warrant further monitoring.
The Cliosclios.com
Media
66Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The Clios is a well-established global awards organization founded in 1959, specializing in recognizing creative excellence in advertising and related sectors such as sports, music, health, and entertainment. The website serves as a hub for awards information, winner galleries, jury nominations, and original content through affiliated platforms like MuseByClios.com and AdsOfTheWorld.com. The brand maintains a strong market position as a leader in the creative awards space, targeting advertising professionals and agencies worldwide. Technically, the site is built on WordPress and hosted on AWS infrastructure, leveraging modern web technologies and multiple analytics and marketing tools to optimize user engagement and data collection. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is addressed with clear policies and consent mechanisms, though direct contact emails for security or incident response are not publicly listed. Overall, the website is professional, trustworthy, and content-rich, supporting a medium-sized enterprise with a global reach.