Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
60,001–60,050 of 99,066
- Holiday Media
hmcms.nl
Technology · Netherlands
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Holiday Media is a specialized internet service provider focusing on the Dutch recreation and travel sector, delivering website design, maintenance, and integration with booking systems to over 250 clients. Their market position is that of a niche expert with a strong local presence and a comprehensive service offering including internet marketing, photography, and videography. Technically, the website employs modern web technologies including jQuery, Google Analytics, and a proprietary CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure forms, but lacks visible security headers and explicit privacy compliance mechanisms such as cookie consent banners. Overall, the site is professional and trustworthy, with clear contact information and social media presence.
Other
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
captain-caz.net is a French-language online casino review and affiliate website established in 2023, targeting French-speaking online casino players. The site offers detailed reviews, bonus comparisons, payment method information, and casino game listings for the year 2025. It positions itself as a niche player in the online gambling affiliate market with a consistent brand presence and moderate trust indicators such as domain transfer protection and social media channels. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common marketing and analytics tools including Google Tag Manager and Visual Website Optimizer. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC. No critical vulnerabilities or malware were detected. Overall, the site is functional and professional but should enhance privacy compliance and security best practices to improve trust and regulatory adherence.
- DAAD (Deutscher Akademischer Austauschdienst)
study-in-germany.com
Education · Germany
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.study-in-germany.com is an authoritative educational portal aimed at international students interested in studying in Germany. It is supported by the German Academic Exchange Service (DAAD) and the Federal Ministry of Education and Research (BMBF), providing comprehensive information on study planning, visa requirements, financing, and living in Germany. The site is professionally designed with clear navigation and rich content primarily in German, targeting prospective international students. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, with analytics provided by eTracker. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms comply with GDPR, but explicit security headers and incident response contacts are not evident. The WHOIS data for the domain is missing or unavailable, which is unusual and reduces trust in domain registration transparency, although the website content and branding strongly suggest legitimacy. Overall, the site scores well on content quality and privacy compliance but has room for improvement in security posture and business credibility transparency.
SISU Partnerssisu.partners
Other · United States
68Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
SISU Partners is a small, recently founded company specializing in providing affiliate partnership services and support within the iGaming industry. Their website targets iGaming affiliates seeking tools and support to boost their ventures. The company operates primarily online with login and registration portals hosted on a dedicated subdomain. Technically, the website is built on WordPress with common plugins and uses Cloudflare DNS and GoDaddy as registrar. The site is multilingual, supporting English and Spanish, and employs Google Analytics for tracking. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a contact form with no explicit emails or phone numbers provided.
Hosting Concepts B.V. d/b/a Registrar.eurealspin100.com
Other · Finland
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
RealSpin is an established online gambling platform primarily targeting Finnish-speaking users, offering casino games, sports betting, and virtual sports. The website is mature with a domain age of over 9 years, indicating a stable market presence. The platform uses modern web technologies including Vue.js and integrates third-party services for analytics, gamification, and customer support. The business model focuses on user registration, deposits, and betting services with a casino-oriented sportsbook. The site is professionally designed with good user experience and mobile optimization.
- 331Bets
affiliate31bets.com
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website affiliate31bets.com is currently under maintenance and provides minimal content. It appears to be related to a gambling affiliate business named '31Bets', but no detailed business information, services, or contact details are available. The domain is newly registered in November 2024, consistent with a new business or site launch. The technical infrastructure is based on WordPress CMS with Cloudflare DNS, but lacks advanced security configurations such as DNSSEC and security headers. No privacy or cookie policies are published, and no contact or compliance information is provided, which limits trust and compliance posture. Overall, the site is in an early stage of deployment with significant gaps in content, security, and compliance.
- Infinity Stars Partners
infinitystarspartners.com
Other
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Infinity Stars Partners operates a multi-platform affiliate program focused on casino gaming brands. The company targets affiliate marketers and casino promoters, offering revenue share commissions up to 50%. The website is professionally designed using WordPress and Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via company emails and social media, but no phone or physical address is provided. Overall, the site is safe for adult audiences interested in gambling affiliate marketing.
Glitnor Services Ltd.glitnoraffiliates.com
Other
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Glitnor Affiliates is a specialized affiliate marketing business operating in the iGaming sector, promoting multiple casino brands globally. Founded in 2018 by industry veterans, the company focuses on building trusted partnerships and delivering quality brand promotion services. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at affiliate marketers and partners. Technically, the site is built on WordPress using the Enfold theme and Avia framework, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policies are published. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a credible and professional affiliate marketing platform with room for security and compliance enhancements.
TonyBet Affiliatesaffiliatestonybet.com
Other
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
TonyBet Affiliates operates a professional affiliate marketing program focused on sportsbook and casino brands licensed in multiple jurisdictions including Canada, Estonia, Netherlands, Spain, and Latvia. The website targets affiliates who can promote TonyBet's gambling products and earn commissions. The business is well established since 2016 and presents a consistent brand image with clear calls to action and partnership details. Technically, the site is built on WordPress with modern libraries and uses Cloudflare DNS, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is trustworthy and professionally maintained, serving a niche adult audience interested in gambling affiliate marketing.
- Vana Lauri Affiliates
vanalauriaffiliates.com
Other · Estonia
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Vana Lauri Affiliates operates as an affiliate marketing platform specializing in gambling brands, offering high revenue share and powerful tracking tools to convert traffic into profit. The company targets affiliate marketers and online business owners interested in gambling-related affiliate programs. The website is built on Squarespace CMS, hosted on Squarespace infrastructure, and uses Cloudflare DNS services. It employs HTTPS with HSTS enabled, ensuring strong SSL security. However, the absence of privacy and cookie policies indicates compliance gaps. The site includes testimonials from affiliate partners, enhancing trustworthiness, but lacks direct contact information. Overall, the business appears legitimate with consistent domain registration data and a professional web presence.
- Energy Marketing Solutions Ltd, Division LVBETpartners
lvbetpartners.com
Other · Belize
73Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
LVBETpartners is an affiliate marketing platform operated by Energy Marketing Solutions Ltd, registered in Belize. The company specializes in promoting casino and sportsbook services through affiliate partnerships, offering commission-based rewards to marketers. The website is professionally designed with clear navigation and comprehensive legal documentation, including Terms & Conditions and a Privacy Policy, supporting GDPR compliance. The technical infrastructure is based on WordPress, enhanced with modern fonts, Cookiebot for cookie consent, and uses reputable affiliate tracking software (NetRefer). Hosting and DNS services are provided via Google Cloud infrastructure, ensuring reliability and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and explicit security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
Other
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Dynabet.com presents itself as an online casino platform offering gambling services such as swift registration, welcome bonuses, daily cashback, and fast withdrawals. The website content is minimal, primarily consisting of a landing page with a logo and meta description. The technical infrastructure is based on Angular 15, indicating a modern JavaScript framework usage, but lacks visible content and user engagement features. Security posture is weak due to the absence of HTTPS verification, security headers, and privacy policies. The WHOIS data is missing or unavailable, which raises significant concerns about domain legitimacy and ownership. Overall, the site appears to be in an early or incomplete stage of deployment or possibly operating without proper domain registration, which severely impacts trust and credibility.
- Highaffiliates
highaffiliates.com
Other
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
High Affiliates operates as an affiliate marketing program specializing in online gambling brands, representing four licensed casinos. The company targets affiliate marketers seeking high conversion offers and flexible commission models. The website is professionally designed using WordPress and Elementor, with a focus on user experience and clear navigation. Technically, the site employs modern technologies and maintains good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks some security headers and a privacy policy. Overall, the domain registration and WHOIS data support the legitimacy of the business. Strategic improvements in privacy compliance and security policies would enhance trust and compliance.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website popularrdb.com currently presents minimal content, consisting solely of a single 'OK' text with no metadata, business information, or user engagement features. The domain WHOIS data indicates a creation date in the future (February 2025), which is inconsistent with the current date and suggests the domain may not yet be active or the data is erroneous. The site uses Cloudflare DNS services but lacks DNSSEC and security headers, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, limiting trust and compliance. Overall, the website appears to be in an early or placeholder state with very limited digital maturity and business presence.
Specialdeliveryspecialdeliverysandiego.org
Non-profit · United States
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Special Delivery San Diego is a small non-profit organization dedicated to providing nutritional support to the San Diego community through home-delivered meals, a nutrition pantry, and diabetic education programs. The organization relies on donations and volunteer efforts to serve over 800 families monthly. The website is built on the Wix platform, featuring a professional design with clear navigation and calls to action for volunteering and donations. Technically, the site uses modern web technologies and enforces HTTPS, but lacks advanced security headers and privacy compliance features. No WHOIS data was available due to query failure or privacy protection, but the domain and website content appear consistent with a legitimate non-profit entity. Overall, the site demonstrates good business credibility and content quality but should improve privacy policies and security practices to enhance trust and compliance.
- Tiny Frog
tinyfrog.com
Technology · United States
66Medium
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Tiny Frog is a well-established web design and development agency based in San Diego, founded in 2003. The company positions itself as a top-rated local agency offering a range of services including web design, development, search marketing, e-commerce solutions, and web accessibility. The website reflects a professional and consistent brand image targeting businesses seeking digital solutions. Technically, the site is built on WordPress with the Genesis Framework, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Google Ads, and LiveChat. Security practices include HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and published policies. Overall, the site demonstrates good digital maturity and business credibility.
8x8, Inc.8x8.vc
Technology · United States
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
8x8 Work is a professional video conferencing platform targeting businesses of all sizes, leveraging the open-source Jitsi Meet technology. The platform offers secure, reliable, and feature-rich video meetings with capabilities such as live streaming, recording, transcription, and collaborative whiteboarding. The website reflects a mature enterprise-grade service with consistent branding and a focus on business users. Technically, the site employs modern web technologies including React, WebRTC, and integrates analytics tools like Google Analytics, Amplitude, and Treasure Data. The infrastructure appears robust with service workers and token-based authentication mechanisms in place. Security posture is strong with HTTPS enforced and secure WebRTC configurations; however, explicit security policies and incident response information are not publicly visible. Privacy compliance is partially addressed with clear privacy and terms of service pages, but lacks a visible cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.
Other · Bulgaria
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website europazagradane.hr is currently a parked domain with no active business content or services. The page primarily serves as a placeholder indicating the domain is for sale, with advertising scripts and no meaningful user engagement features. The domain was registered recently in 2022 by a Bulgarian registrar and uses parking name servers, consistent with domain parking practices. Technically, the site uses basic HTML and JavaScript with third-party ad networks such as Google Adsense Domains CAF and Youseasky. There is no evidence of a CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers detected, and no privacy or cookie consent mechanisms implemented. No contact or business information is provided, limiting trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.
Popravi.topopravi.to
Government · Croatia
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Popravi.to is a Croatian civic technology platform enabling local residents to report, view, and discuss street-related problems such as graffiti, illegal waste dumping, and damaged infrastructure. The platform is powered by the open source FixMyStreet software and targets community members interested in improving their local environment. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, and OpenLayers for mapping, supported by multiple analytics tools and Cloudflare hosting. The site is mobile optimized and uses HTTPS with some security best practices like CSRF tokens and service workers. However, it lacks explicit privacy and cookie policies, and no direct contact information is provided on the homepage. Security posture is good but could be improved with additional headers and vulnerability disclosure mechanisms. Overall, the domain registration is consistent with the website's Croatian civic focus, indicating legitimacy and trustworthiness.
Gongimamopravoznati.org
Government · Croatia
73Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Imamo pravo znati is a Croatian non-profit online platform operated by the organization Gong, established in 2015. The website facilitates public access to government-held information by enabling citizens to submit Freedom of Information requests to over 6,800 public authorities in Croatia. It also archives and publicly publishes these requests and responses, promoting transparency and civic engagement. The platform is supported by Code for Croatia and Gong, maintained by volunteers, and targets Croatian citizens, journalists, and transparency advocates. Technically, the website is built on the Alaveteli framework, leveraging Ruby on Rails and jQuery, hosted behind Cloudflare for DNS and CDN services. It uses Google Analytics and Cloudflare Insights for traffic and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with a fast performance profile. Security is adequate with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. From a security perspective, the site follows good practices such as CSRF protection and does not request sensitive personal data via forms. However, it lacks explicit security and incident response policies publicly available, and no vulnerability disclosure or security.txt files are present. Privacy compliance is supported by a comprehensive privacy policy and cookie policy, though no explicit cookie consent mechanism is implemented. Overall, the website is trustworthy, professionally maintained, and serves an important civic function. Recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing cookie consent to enhance compliance and security posture.
- Plus Hosting Grupa d.o.o.
parlametar.hr
Government · Croatia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Parlametar is a Croatian government-focused digital platform that provides detailed analysis and tracking of parliamentary activities, including voting records and speech transcripts of Croatian Parliament members. The platform targets citizens, journalists, and political analysts interested in transparent and accessible parliamentary data. It operates as an informational service with a specialized niche in political data visualization and analysis. Technically, the website employs a modern yet somewhat dated technology stack including Bootstrap 3 and jQuery 1.11.3, with performance and mobile optimization rated as good. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The domain is registered with a reputable Slovenian hosting provider, consistent with the website's operational profile. Overall, the site is professional, trustworthy, and serves a clear public interest function.
Womanitywomanity.org
Non-profit · Switzerland
58Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Womanity Foundation is a Swiss-based non-profit organization dedicated to accelerating gender equality through innovative programs focused on education, land rights, media, and violence prevention. The organization has a strong market position, recognized globally for its impact and sustainability, with over 31 million people supported since 2005. The website reflects a mature digital presence with multilingual support, secure donation processing, and active social media engagement. Technically, the site is built on WordPress with modern plugins and integrations, offering good performance and accessibility. Security posture is solid with HTTPS, secure payment gateways, and anti-bot measures, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, supporting the organization's mission effectively.
The BoBs - The Best of Blogsthebobs.com
Media
69Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
TheBoBs.com is a content publishing website focused on providing useful blog articles across various categories such as Education, Lifestyle, Health, Work, Business, and Home Improvement. Founded in 2023, it operates as a small media entity targeting a general audience seeking informative and lifestyle content. The website leverages WordPress with Elementor and the Kadence theme, indicating a modern and flexible technical infrastructure. Hosting details suggest a cloud or VPS environment with Cloudflare DNS for performance and security benefits. The site implements standard privacy and cookie policies with a consent mechanism, reflecting compliance with GDPR requirements. However, explicit security policies and incident response information are not present, which could be improved to enhance trust and security posture. Overall, the website demonstrates good content quality, SEO optimization, and user experience, supported by analytics and advertising integrations.
- Dr. Radut Consulting
radut.com
Healthcare · Romania
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Dr. Radut Consulting is a specialized consulting firm offering medical, management, IT, and wellness services primarily targeting healthcare organizations and insurance companies. The company emphasizes innovation and operational excellence, leveraging Lean Six Sigma methodologies and providing unique services such as Call AID™ TPA and LifeWave wellness products. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Drupal CMS with modern web technologies and includes cookie consent mechanisms, but lacks advanced security headers and published security policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and external partnerships suggest an established business presence.
MDBootstrapmdbootstrap.com
Technology
74Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MDBootstrap is a well-established provider of Material Design UI kits and Bootstrap templates, trusted by over 2 million developers and designers worldwide. The company offers a comprehensive suite of frontend development resources including UI components, plugins, and extensive documentation, positioning itself as a leader in the web development tools market. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome to deliver a rich user experience. The technical infrastructure is robust, with good mobile optimization, SEO practices, and performance considerations. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in publishing explicit privacy, cookie, and security policies. Overall, MDBootstrap presents a professional and trustworthy digital presence with strong market credibility.
- algoo
galae.net
Technology · France
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Galae is a French-based email service provider offering high deliverability, unlimited email addresses and domains, and advanced configuration options. The service is positioned as an ethical, GDPR-compliant alternative focused on autonomy and sovereignty, leveraging open source software and hosted exclusively in France. The business is relatively new, founded in 2023, and operated by the parent company algoo. The website presents a professional image with clear pricing, client testimonials, and a community support platform. Technically, the site uses modern web technologies including Bootstrap and Matomo analytics, with hosting provided by Scaleway SAS. Security practices include support for email authentication standards (DKIM, SPF, DMARC) and data redundancy, but lack visible security headers and explicit incident response information. Privacy compliance is partially demonstrated but lacks explicit privacy and cookie policies on the site. Overall, galae demonstrates a solid business and technical foundation with room for improvement in security transparency and privacy disclosures.
- Algoo
tracim.fr
Technology · France
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Tracim is a French-based collaborative software platform developed and maintained by Algoo since 2014. It offers a comprehensive team communication and collaboration solution designed for asynchronous work, targeting organizations such as enterprises, associations, and educational institutions. The platform emphasizes open source principles, ethical data handling, and user sovereignty. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, Swiper.js, and Matomo analytics, hosted on ScaleWay infrastructure. The site is mobile-optimized and provides a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforced, CSRF protection on forms, and domain registration consistent with business claims. However, explicit cookie consent mechanisms and published security policies are lacking, representing areas for improvement. Overall, Tracim presents a trustworthy and mature digital presence with a solid foundation for growth and compliance.
- CCloudNativePG
cloudnative-pg.io
Technology · United States
59Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
CloudNativePG is an open source Kubernetes operator designed to manage highly available PostgreSQL clusters with native streaming replication. The project is community-driven and originally created by EnterpriseDB, now under LF Projects, LLC. It targets Kubernetes users and DevOps professionals seeking automated, cloud native PostgreSQL lifecycle management. The website presents comprehensive technical content describing features such as autopilot deployment, data persistence, security, high availability, disaster recovery, monitoring, and advanced architectures. The site is well structured, mobile optimized, and uses modern technologies including Hugo and Google Analytics. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are missing. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is consistent and transparent, supporting legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security disclosures.
Bucerius Law Schoollaw-school.de
Education · Germany
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bucerius Law School is a private higher education institution specializing in legal studies, located in Hamburg, Germany. It offers a range of academic programs including Bachelor, Staatsexamen, Master of Law and Business, doctoral studies, and executive education. The institution positions itself as a leading private law school with a strong focus on research and academic excellence. The website reflects a professional and comprehensive digital presence, targeting prospective students, researchers, and donors. The business model centers on education and research services with a medium-sized organizational footprint and a founding date consistent with the domain age.
Uitjes.nluitjes.nl
Hospitality · Netherlands
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Uitjes.nl is a well-established Dutch online platform founded in 1999, specializing in providing inspiration and listings for leisure activities and day trips across the Netherlands and Belgium. The platform caters to a broad audience including families, friends, and corporate groups, offering a wide range of activities such as sports, cultural events, and special outings. It features user reviews, promotional offers, and a reservation/payment system to facilitate bookings. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA, ensuring a functional and moderately optimized user experience with good mobile responsiveness. Security-wise, the site benefits from HTTPS, DNSSEC, and reCAPTCHA integration, but lacks visible security headers and published security policies, indicating room for improvement in security transparency and defense-in-depth. Overall, the domain's WHOIS data confirms a long-standing and legitimate presence, supporting the platform's credibility and trustworthiness.
- Duurzaamnieuws
duurzaamnieuws.nl
Media · Netherlands
66Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Duurzaamnieuws is a Dutch independent media outlet focused on sustainability, climate, energy, and related topics. The website provides current news, opinion pieces, and insights aimed at a general audience interested in a sustainable future. It operates on a membership and donation-supported business model, positioning itself as a trusted source for sustainability news in the Netherlands. The site uses WordPress CMS with a professional theme and SEO optimization, supported by social media channels on Facebook, Twitter, Mastodon, and LinkedIn. Technical infrastructure includes modern plugins and Google Analytics for tracking, with a cookie consent mechanism in place. From a security perspective, the website enforces HTTPS and uses basic security best practices but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Incident response and vulnerability disclosure information are also absent. Overall, the website is well-structured, mobile-optimized, and provides relevant content with moderate user tracking. The domain registration details are consistent with the business claims, indicating legitimacy. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and adding vulnerability disclosure information to improve trust and compliance.
- Vvan munster media groep
meetingmagazine.nl
Media · Netherlands
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Meeting Magazine is a well-established Dutch media platform specializing in information and inspiration for business meetings and event professionals. The website offers news, articles, business profiles, event location listings, and advertising opportunities, targeting a professional audience within the meetings and events industry. The platform is operated by van munster media groep and has been active for over 15 years, indicating a stable market presence in the Netherlands. The content is primarily in Dutch and is professionally presented with consistent branding and good user experience.
- MMeetingReview
meetingreview.com
Hospitality · Netherlands
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MeetingReview.com is a well-established Dutch online platform founded in 2001 that specializes in helping users find and book meeting rooms, event locations, and related meeting services across the Netherlands. It leverages a large database of independent user reviews to provide transparency and trust for event planners and organizers. The platform also offers promotional and advertising opportunities for service providers in the meeting and event industry. Technically, the website uses a Bootstrap-based responsive design with common web technologies including jQuery, Google Analytics, Google Tag Manager, and a live chat widget, hosted on Argeweb infrastructure. The site is mobile optimized and SEO friendly with good navigation and content relevance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and serves a niche hospitality market effectively.
- Pure Benefit
purebenefit.eu
Energy · Belgium
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Pure Benefit is a small environmental consultancy specializing in the hospitality sector, offering services such as energy audits, CO2 footprint analysis, and compliance with European energy directives. The website is professionally designed using the Squarespace platform, with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, but lacks some security headers and privacy compliance features. The absence of privacy and cookie policies, as well as contact information, limits trust and compliance. WHOIS data is privacy protected, typical for small businesses using third-party registrars. Overall, the website presents a legitimate business with room for improvement in privacy and security transparency.
Hospitality · Netherlands
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
DagjeWeg.NL is a well-established Dutch online portal providing comprehensive tips and listings for day trips and leisure activities across the Netherlands. The website targets a broad audience including families, children, and groups seeking local outings. It operates primarily as a content and affiliate marketing platform, linking users to partner attractions and ticket sales. The site demonstrates a consistent brand presence and offers rich, relevant content with a focus on user engagement and affiliate conversions. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, integrates Google Tag Manager and Analytics, and employs New Relic for performance monitoring. The site is served over HTTPS with good SSL configuration and moderate performance. Security headers are partially implemented, with room for improvement in CSP and other modern headers. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content, though a consent mechanism is implemented via Google Tag Manager. Contact information is available through listings but no dedicated contact or security pages were found. Overall, the site is professional, trustworthy, and safe for general audiences.
Bungalowparkoverzicht.nlbungalowparkoverzicht.nl
Hospitality · Netherlands
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Bungalowparkoverzicht.nl is a Dutch online platform specializing in the comparison and booking of holiday parks and vacation bungalows, primarily targeting consumers interested in travel within the Netherlands and neighboring countries. The website aggregates over 550 holiday parks and 4500 bungalows, offering users a comprehensive search and booking experience. The platform leverages WordPress CMS with modern web technologies including jQuery, Slick Carousel, and Yoast SEO to provide a user-friendly and SEO-optimized interface. Analytics and tracking are implemented via Microsoft Clarity and PostHog, alongside a cookie consent mechanism to comply with GDPR requirements. Security posture is solid with HTTPS enforced and standard security headers present, although explicit privacy and terms of service policies are missing, which could be improved for better compliance and user trust. Overall, the website presents a professional and trustworthy front with good content quality and technical implementation, suitable for its market niche.
Green Leisure Group Coöperatie U.A.greenleisure.nl
Hospitality · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Green Leisure Group Coöperatie U.A. is a specialized sustainability consulting cooperative focused on practical and strategic sustainability solutions for the tourism, hospitality, cultural, event, and sports sectors primarily in the Netherlands. The company offers expert advice, project management, and sector-specific sustainability programs such as Green Stages, Green Sport, and Green Leisure. Their market position is that of a trusted advisor with a cooperative business model, serving a niche audience of organizations seeking to improve their sustainability practices. Technically, the website is built with modern web standards including HTML5, CSS3, and jQuery, with good mobile optimization and a professional design. The site uses HTTPS with strong SSL configuration but lacks some security headers and cookie consent mechanisms. No major vulnerabilities or exposed sensitive data were detected, and the site does not appear to use extensive tracking or analytics, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible vulnerabilities, but it could improve by implementing security headers, publishing a security policy, and adding incident response contact information. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with the business's sustainability mission. The domain registration data is consistent and legitimate, supporting the company's credibility. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and incident response policies to further strengthen trust and compliance.
Green Label Servicegreenlabelservice.nl
Hospitality · Netherlands
56Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Green Label Service is a Dutch sustainability consultancy specializing in guiding hotels and organizations towards achieving green certifications such as Green Globe and Green Key. Founded in 2018, the company operates within the hospitality sector, offering consultancy and audit services to help clients improve their sustainability performance and obtain recognized green labels. The website reflects a professional and consistent brand presence, targeting hospitality businesses seeking environmental certifications. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, with modern web fonts and cookie consent mechanisms implemented. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic, with a cookie banner present but no visible privacy or terms of service pages. Overall, the website is functional, well-structured, and trustworthy, though it lacks some compliance documentation and explicit contact details.
Suisui.directory
Technology · Cayman Islands
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Sui Directory is a specialized online platform serving as a comprehensive directory for projects built on the Sui blockchain ecosystem. It enables developers to submit their active applications, products, or services for community visibility and exploration. The platform targets blockchain developers and enthusiasts interested in the Sui ecosystem, positioning itself as a niche resource within the broader blockchain technology sector. The business model revolves around providing a curated listing service to foster community engagement and project discovery within the Sui network. The website is relatively new, founded in 2023, and operates under privacy-protected domain registration with Cloudflare as the registrar.
Era Networks DMCCsuiscan.xyz
Technology · United Arab Emirates
70Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Suiscan.xyz is a blockchain explorer and analytics platform dedicated to the Sui protocol, providing users with comprehensive data on market capitalization, token prices, transaction volumes, DeFi projects, NFTs, and validator information. The platform targets blockchain developers, investors, and enthusiasts seeking detailed insights into the Sui ecosystem. The website is professionally designed with a consistent brand presence and offers a rich set of features tailored to its niche audience. Technically, the site leverages modern web technologies including React.js and is hosted via Cloudflare, ensuring reliable performance and baseline security. However, some areas such as privacy compliance and contact transparency are lacking, with no visible privacy or cookie policies and no direct contact information provided. Security posture is solid with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and publishing vulnerability disclosure policies. Overall, Suiscan.xyz presents a credible and functional service with room for enhancement in compliance and user trust features.
- Aadidas
adidas.nl
Retail · Netherlands
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The adidas.nl website is currently inaccessible due to a security block likely implemented as a Web Application Firewall (WAF) or bot protection mechanism. This block is triggered during high traffic sneaker releases to prevent automated bots from gaining unfair access. As a result, the website content is limited to a 403 Forbidden error page with a message in Dutch explaining the access denial. Due to this, no detailed content, metadata, or technical infrastructure information is available for analysis. The site is clearly branded as adidas, a leading global sportswear retailer, but the lack of accessible content prevents a full assessment of its digital maturity or security posture. From a security perspective, the presence of a WAF or similar security control is a positive indicator of proactive protection against automated threats. However, the absence of visible security headers, privacy policies, or contact information on the blocked page limits the ability to evaluate compliance or incident response readiness. The technical stack, hosting, and performance characteristics remain unknown due to the content block. Overall, the site demonstrates a strong business brand but currently suffers from accessibility issues for certain users due to security triggers. This impacts user experience and limits transparency regarding privacy and security practices. Strategic improvements should focus on balancing security controls with user accessibility and providing clear, accessible compliance and contact information to enhance trust and regulatory adherence.
Other
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website webdeveloper.com is currently inaccessible due to a Cloudflare security block page, which prevents access to any substantive content or business information. The domain itself is long-established, registered since 1996 with NameCheap, Inc., and uses Cloudflare for DNS and security services. Due to the blocking, no privacy policies, contact information, or business details are available for analysis. The technical infrastructure indicates use of Cloudflare's security mechanisms but no further technology stack or CMS details can be determined. Security posture cannot be fully assessed given the lack of accessible content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site is currently not analyzable beyond domain registration data, resulting in a low AI score and limited insights.
Civic Science Fellowscivicsciencefellows.org
Non-profit · United States
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Civic Science Fellows is a US-based non-profit organization focused on fostering leadership and collaboration between science and society through its fellowship program. The website presents a professional and well-structured platform built on WordPress, hosted on DigitalOcean, with a clear focus on community engagement and educational content. The technical infrastructure is modern and mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, and no GDPR indicators are present. Contact information is limited to a contact form and newsletter signup, with no direct emails or phone numbers provided. Overall, the site is trustworthy and safe for general audiences but would benefit from improved privacy and security practices.
Studierendenwerk Hamburgcampus-event-catering.de
Hospitality · Germany
51Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Campus Event Catering, operated by Studierendenwerk Hamburg, provides specialized catering services for events, conferences, and business functions primarily targeting academic institutions and corporate clients in Germany. The website presents a professional and consistent brand image with clear service offerings and references from reputable universities and research centers. Technically, the site is built on TYPO3 CMS with Bootstrap and jQuery, and employs Google Analytics for visitor tracking. While the site is mobile responsive and well-structured, some technical improvements are recommended, including updating JavaScript libraries and enhancing security headers. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and suitable for its target audience.
Hybirdhybird.org
—
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Webuwebu.coop
Technology · France
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Webu is a French cooperative (SCOP) web development agency founded in 2005, specializing in custom web development, iterative project management, user-centered design, and secure local hosting. Their business model emphasizes the use of free software and cooperative principles, targeting organizations seeking sustainable and autonomous digital solutions. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature and credible digital presence. Technically, the site uses Wagtail CMS, Alpine.js, and Matomo analytics, with moderate performance and good SEO practices. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in security headers and cookie consent mechanisms. Overall, Webu demonstrates a trustworthy and professional online presence aligned with its cooperative values and technical expertise.
- Probesys
probesys.coop
Technology · France
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Probesys is a French cooperative IT services company specializing in open source web technologies, Linux system and network administration, and software development. Founded in 2003 and based in Grenoble, it serves businesses and organizations seeking free and open source solutions. The website is professionally designed using Drupal 9, with good mobile optimization and accessibility. It features clear navigation, contact information, and client references, reflecting a trustworthy and active business presence. The company emphasizes transparency with cookie consent and recruitment announcements. Technically, the site uses modern frameworks and analytics (Matomo) with HTTPS enforced, though DNSSEC is not enabled. Security posture is solid but could be improved with additional headers and published security policies. Overall, the site is safe, compliant with GDPR, and demonstrates good business credibility.
SITPIcolter.social
Government · France
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
colter.social is a specialized Mastodon instance serving agents, services, and elected officials of French local authorities. Administered by SITPI, the platform provides a decentralized social networking service tailored to this professional community. The website is primarily in French and leverages the Mastodon open source platform version 4.2.15, hosted by Gandi SAS. The domain registration details align well with the stated purpose and geographic focus, indicating legitimacy and consistency. Technically, the site demonstrates moderate performance and basic mobile optimization, with HTTPS enabled and a clientTransferProhibited domain status enhancing security. However, DNSSEC is not enabled, and no advanced security headers are detected, representing areas for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism and terms of service. Contact information and incident response details are not publicly available, limiting transparency. Overall, the site is functional and trustworthy for its niche audience but could benefit from enhanced security and compliance features.
The Signals Networkthesignalsnetwork.org
Non-profit
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Signals Network is a small non-profit organization dedicated to supporting whistleblowers and coordinating international media investigations focused on corporate misconduct and human rights abuses. The organization positions itself as a trusted intermediary for whistleblowers and media, emphasizing accountability and public good. The website reflects this mission with professional design and relevant content targeting whistleblowers, journalists, and the public. Technically, the website is built on WordPress using the Avada theme, hosted on DigitalOcean, and employs modern performance optimizations such as WP Rocket and lazy loading. It integrates several marketing and analytics tools including Google Analytics, Google Tag Manager, and LinkedIn Insight Tag. Mobile optimization and SEO practices are good, though accessibility is basic. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces client transfer protection on the domain. However, DNSSEC is not enabled and security headers are minimal or absent. There is no visible security policy or vulnerability disclosure mechanism, and no explicit incident response contacts. Cookie consent is implemented via Termly with auto-blocking, indicating some privacy compliance effort. Overall, the website is trustworthy and professional with a solid business credibility score. Security posture is moderate with room for improvement in headers and disclosure policies. Privacy compliance is basic due to missing explicit privacy and terms pages. Recommendations include enabling DNSSEC, adding security headers, publishing security and privacy policies, and providing direct contact channels for security incidents.
Fundacja Panoptykonpanoptykon.org
Non-profit · Poland
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Fundacja Panoptykon is a Polish non-profit organization dedicated to human rights and digital privacy advocacy. Established in 2009, it operates primarily in Poland and provides a range of services including publications, campaigns, legal complaints, and public awareness initiatives. The website serves as a platform for disseminating information and engaging the public on issues related to surveillance, privacy, and freedom in the digital age. The organization maintains a strong presence through various content types such as articles, reports, podcasts, and videos, targeting a general audience interested in digital rights and privacy.