Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
62,551–62,600 of 99,067
Folkhemfolkhem.se
Real Estate · Sweden
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Folkhem is a Swedish real estate developer specializing in the construction and sale of sustainable wooden houses and apartments. Established in 1998, the company positions itself as an innovator in climate-smart housing with a focus on natural materials and craftsmanship. Their market presence is primarily in Stockholm, Sundbyberg, and Uppsala, targeting environmentally conscious homebuyers. Technically, the website is built on modern frameworks such as Next.js and React, utilizing Google Tag Manager for analytics and Klaro for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy policies in place, though there is room for improvement in DNSSEC and security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business reputation.
Environment Parkenvipark.com
Technology · Italy
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Environment Park is a well-established technology park based in Turin, Italy, focusing on environmental innovation and sustainability. The organization supports public administrations and enterprises in their sustainability journeys and offers services including hosting enterprises, innovation labs, and event spaces. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with Elementor and uses modern web technologies, including cookie consent management and Google Analytics for tracking. Security posture is good with HTTPS and some security best practices, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is a notable gap, limiting full trust verification. Overall, the site is safe, professional, and targeted at a general audience interested in environmental technology and sustainability.
Energy · Spain
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ENT is a Spanish environmental consultancy and foundation established in 2008, specializing in environmental innovation, policy analysis, and research. The organization operates with a multidisciplinary team and has a strong focus on projects related to waste management, environmental fiscality, and sustainable economic policies. Their market position is that of an experienced partner in international environmental projects, supported by ISO 9001 and 14001 certifications. The website is multilingual, targeting professionals and stakeholders interested in environmental issues. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO and Google Analytics, providing a good user experience and SEO optimization. Security practices are adequate with HTTPS and reCAPTCHA, but lack advanced security headers and formal security policies. Contact information is clearly presented, enhancing business credibility.
Enemærke & Peterseneogp.dk
Real Estate · Denmark
73Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Enemærke & Petersen is a well-established Danish construction company specializing in renovation and new construction of public and private housing, institutions, and commercial buildings across Denmark. The company positions itself as a leading social contractor in the Danish market, with a domain age dating back to 1998, reflecting a mature business presence. The website is professionally designed using WordPress CMS, incorporating modern SEO practices and cookie consent management via Cookiebot, indicating a reasonable level of digital maturity. However, direct contact information such as emails and phone numbers are not explicitly visible, relying mainly on embedded contact forms integrated through a partner recruiting platform. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security posture.
- GGruppo Iren
gruppoiren.it
Energy · Italy
75Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Gruppo Iren is a large Italian multi-utility holding company operating primarily in energy production and distribution, integrated water services, and environmental services. The company serves millions of customers across multiple regions with a workforce exceeding 10,000 employees. Their market position is strong, supported by a diversified portfolio of subsidiaries and a clear focus on sustainability and innovation. The website reflects a mature digital presence with comprehensive corporate, investor, and sustainability information, targeting a broad audience including customers, investors, and partners. Technically, the website is built on Adobe Experience Manager, leveraging modern analytics and tag management tools such as Adobe Launch and Google Tag Manager. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Privacy and cookie policies are clearly implemented with consent mechanisms, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no published security.txt or explicit incident response contact, which are areas for improvement. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a professional, secure, and trustworthy digital front for Gruppo Iren, with minor recommendations to enhance security posture and transparency.
- easyscience
easyscience.eu
Other
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
easyscience is a small service-oriented business specializing in developing dissemination, communication, and innovation concepts primarily targeted at children, young people, and stakeholders interested in research and technology. The company offers consulting services and interactive science labs to foster engagement with science and innovation. The website is built on the Webnode platform, hosted via AWS Cloudfront CDN, and uses Google Tag Manager for analytics. The technical infrastructure is modern and supports good mobile optimization and user experience. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy or security policies. The absence of direct contact emails or phone numbers reduces transparency. WHOIS data is privacy protected, which is common for small businesses but limits verification of registrant details. Overall, the website is professional and safe, with moderate trustworthiness and room for improvement in privacy compliance and security best practices.
- Medicontur
medicontur.hu
Healthcare · Hungary
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Medicontur is a well-established Hungarian company specializing in the development and manufacturing of high precision intraocular lens (IOL) systems for cataract and ocular disease treatment. With over 30 years of experience and more than 7 million implants sold worldwide, Medicontur holds a strong market position in the ophthalmology healthcare sector. The company operates internationally with numerous subsidiaries and partner offices across Europe, Asia, Africa, and the Americas, reflecting a broad global footprint. Their website targets ophthalmologists, eye care professionals, and patients, offering product information, professional tools, and documentation.
Medicontur Francemedicontur.fr
Healthcare · France
51Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Medicontur France is a specialized healthcare company focused on the development and manufacturing of high-precision intraocular lens (IOL) systems for cataract and other ocular diseases. The company targets both healthcare professionals and patients through dedicated platforms, offering product information, online calculators, and professional services. With over 30 years of experience, Medicontur holds a reputable position in the ophthalmology medical device market in France and internationally. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on a modern WordPress platform using Elementor and WooCommerce, supported by Yoast SEO for optimization. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and performance tuning. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is partially addressed with a privacy policy present and GDPR considerations, but the absence of a cookie consent mechanism and incident response information indicates areas for improvement. Overall, the website is trustworthy and professional, with a strong business credibility score and no signs of malicious or suspicious activity.
Vr Buddyvr-buddy.com
Education · Switzerland
58Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Vr Buddy is a small educational technology company based in Switzerland, founded in 2022. The company specializes in connecting schools and companies through Virtual Reality to provide vocational trainees with immersive career insights. The website is built on WordPress and uses common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is well-structured with good SEO metadata and mobile optimization, but lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and relevant to its niche but would benefit from enhanced privacy and security transparency.
- MMeta Hospital
meta-hospital.ch
Healthcare · Switzerland
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Meta Hospital is a Swiss-based startup specializing in Virtual Reality training solutions for healthcare professionals in the D-A-CH region. The company offers immersive, evidence-based VR educational content designed to enhance practical skills and professional competencies. Their platform supports certification and collaboration with healthcare institutions and industry partners, positioning them as an innovative player in healthcare education. Technically, the website uses modern web technologies including Laravel Livewire and integrates Google Analytics for user insights. The site is well-designed, mobile-optimized, and content-rich, reflecting a high level of digital maturity. Security posture is good with HTTPS and CSRF protections, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and trustworthy with transparent WHOIS data and clear contact information.
CompuSystems, Inc.compusystems.com
Technology
71Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
CompuSystems, Inc. is a technology company specializing in innovative event registration, management, and lead capture solutions for in-person, virtual, and hybrid events. The company positions itself as a trusted provider with decades of experience, servicing thousands of events and millions of registrations worldwide. Their key services include online and onsite registration, lead retrieval, event ticketing, and attendee acquisition, targeting event organizers and exhibitors. The website demonstrates a professional and consistent brand presence with a strong focus on B2B event technology solutions. Technically, the website is built on WordPress and leverages modern tools such as Google Analytics, HubSpot, and MonsterInsights for marketing and analytics. The site shows good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with some advanced lazy loading and script management techniques in use. From a security perspective, the site enforces HTTPS and uses some security plugins, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy page found on the analyzed content. Overall, the website is professional and trustworthy in appearance, but the absence of WHOIS data for the domain raises questions about domain registration legitimacy. Strategic recommendations include improving privacy disclosures, enhancing security headers, and verifying domain registration details to strengthen trust and compliance.
- AAimediaserver6.com
aimediaserver6.com
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website aimediaserver6.com currently serves as a minimal placeholder with no substantive content, business description, or contact information. The domain is registered since 2008 with GoDaddy.com, LLC and uses Cloudflare DNS services, indicating a legitimate registration but no active business presence on the site. The lack of metadata, forms, external links, or policies suggests the site is either under development or abandoned. From a technical perspective, the site lacks HTTPS/SSL, security headers, and any modern web technologies or CMS. The minimal HTML content and absence of SEO or accessibility features reflect very low digital maturity. No analytics or advertising technologies are detected. Security posture is weak due to missing HTTPS and security best practices. No privacy or cookie policies are present, and no contact or incident response information is available. These gaps present compliance risks and reduce trustworthiness. Overall, the site poses low risk from a content safety perspective as it contains no adult or questionable content. However, the lack of meaningful content and security controls results in a very low AI score and poor business credibility. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, providing contact information, and developing substantive website content to improve trust and compliance.
Access Intelligence, LLC.p3cevents.com
Transportation · United States
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
P3C Media operates as a specialized event and media company focused on public-private partnerships, primarily serving the transportation, government, education, and healthcare sectors. The company organizes multiple project delivery events and maintains a strong online presence to engage a large public sector audience. Their market position is solid, supported by a medium-sized organizational structure under the parent company Access Intelligence, LLC. The website reflects a professional and consistent brand image with clear business objectives and target audience engagement. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates multiple analytics and accessibility tools including Google Analytics, New Relic, Osano consent management, and UserWay accessibility widget. The site demonstrates good mobile optimization, SEO practices, and performance metrics, although some hosting details remain undisclosed. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and explicit incident response or security policy pages. No critical vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS registration data reduces trustworthiness. The site uses multiple third-party scripts which should be regularly audited to maintain security. Overall, the website presents a low risk with a good security posture and privacy compliance, but improvements in transparency around domain registration, security policies, and contact information would enhance trust and credibility.
- Ggcasummit.com | 526: Invalid SSL certificate
gcasummit.com
Other
71Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website gcasummit.com currently serves only a Cloudflare error page indicating an invalid SSL certificate on the origin server. This prevents access to any actual business content or services. The domain is registered since 2013 with GoDaddy.com, LLC and is not privacy protected, suggesting a legitimate registration. However, the lack of a valid SSL certificate and absence of any visible business or contact information severely limits the ability to assess the business or its offerings. The site is protected by Cloudflare's WAF, which is actively blocking access due to the SSL issue, resulting in a very low security and content quality posture. No privacy, cookie, or terms of service policies are present, and no forms or tracking technologies are detected.
- Blockthrough
blockthrough.com
Technology
70Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Blockthrough is a technology company specializing in adblock revenue recovery solutions for digital publishers. Established in 2015, it serves a global audience of publishers by providing a lighter, nonintrusive advertising experience that respects user preferences. The company is recognized as a Google Certified Publishing Partner and an IAB EU TCF v2.0 certified vendor, indicating strong industry credibility. Their platform integrates easily with existing ad stacks and offers analytics and user messaging tools to optimize revenue while maintaining user experience. Technically, the website is built on WordPress with Elementor, hosted via Cloudflare, and employs modern web technologies and analytics tools such as Google Analytics and HubSpot. Security posture is good with HTTPS enforced and domain transfer lock enabled, though DNSSEC is not activated. Privacy compliance is supported by a detailed cookie consent mechanism, though a dedicated privacy policy page was not found in the provided content. Overall, the website is professional, well-branded, and trustworthy, targeting publishers and media companies seeking to monetize adblock users effectively.
Mesa Solutions247mesa.com
Energy
72Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Mesa Solutions is a specialized energy service provider focusing on natural gas generators and related power solutions. Founded in 2014, the company offers key services including flare mitigation and maintenance, targeting businesses and organizations requiring reliable energy resilience. The website reflects a professional and consistent brand presence with good content quality and clear navigation, supported by a modern WordPress infrastructure using Astra theme and Elementor builder. The technical setup includes HTTPS with valid SSL, Google Analytics, and Hotjar for analytics and user behavior tracking. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks security headers and formal privacy or cookie policies. The domain registration is consistent with the business history, registered with Bluehost Inc. since 2014, indicating legitimacy. Overall, the website is safe, professional, and business-focused, but would benefit from enhanced privacy compliance and security best practices.
- GGlobal BIBM
breastimplantsbymentor.net
Healthcare
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website breastimplantsbymentor.net represents the Global BIBM brand, associated with Mentor breast implant products under Johnson & Johnson Medical Devices. It serves a global audience with localized versions in multiple languages and regions. The site provides healthcare-related information targeting both healthcare professionals and patients interested in breast implant solutions. The business model is primarily B2B and B2C within the healthcare sector, with a strong market position supported by a reputable parent company. Technically, the site is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile optimized and accessible, with good SEO practices and a consistent branding approach. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact information or incident response details are published, which could be improved. Overall, the site is professional, trustworthy, and safe for general audiences.
EPEIROS CUPepeiroscup.sk
Other · Slovakia
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
EPEIROS CUP is a specialized kynological event organizer based in Slovakia, hosting a biennial dog show combined with educational and social activities. The website presents a well-structured and branded platform targeting dog breeders, kynology clubs, and enthusiasts. Technically, the site is built on WordPress with Elementor and WPML, supporting multilingual content and modern web standards. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. Business credibility is supported by affiliations with recognized kynological organizations and a consistent domain registration history. Overall, the site is professional and trustworthy but could improve compliance and security transparency.
orchIDEAS s.r.o.dobromat.sk
Non-profit · Slovakia
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Dobromat.sk is a Slovak non-profit platform established in 2016 by orchIDEAS s.r.o. that enables users to support charitable organizations through their online shopping activities. The website facilitates donations by redirecting users to partner shops and allocating a percentage of the purchase to a selected non-profit. The platform enjoys a solid market position with over a thousand partner shops and thousands of supported organizations, supported by user testimonials and active social media presence. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and affiliate tracking tools, with a custom CMS backend. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.
- Line of Flight
country.is
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Country.is is a technology-focused website offering a free IP-to-country geolocation API service. The service is designed primarily for developers and businesses requiring geolocation data based on IP addresses. It operates an open instance without requiring API keys and supports self-hosting via Docker, leveraging MaxMind and Cloudflare data sources. The website is positioned as a niche provider with a decade-long operational history and an open-source approach, fostering trust through transparency and community engagement on GitHub. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript, FontAwesome, and Highlight.js. It uses Cloudflare for caching and performance optimization and supports Docker-based deployment for scalability. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is fast, and the technical infrastructure is sound for the service offered. From a security perspective, the site enforces HTTPS and implements rate limiting to prevent abuse. It does not log requests on its servers, enhancing user privacy. However, explicit security headers are not detected, and no formal privacy or cookie policies are published. Incident response and vulnerability disclosure mechanisms are absent, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a low-risk profile with a solid technical foundation and a clear business purpose. Strategic improvements in privacy compliance, security headers, and contact transparency would elevate its trustworthiness and compliance posture.
Orthopedic Surgeons, Doctors and Clinics | Proliance Orthopedicprolianceorthopedicassociates.com
Other
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.prolianceorthopedicassociates.com appears to be either unregistered or not properly registered as indicated by the WHOIS query returning no match. The site content is minimal and primarily consists of technical CSS and JavaScript with no visible business or contact information. There are no privacy, cookie, or terms of service policies detected, and no contact emails or phone numbers are present. The technical infrastructure lacks modern security headers and HTTPS configuration, indicating a low security posture. Overall, the site appears to be a placeholder or under development with limited digital maturity and business credibility.
Other
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.salesgenius.com currently serves as a parked domain with minimal content primarily consisting of advertising blocks and placeholder text. There is no substantive business information, contact details, or service descriptions available, indicating that the site is not actively used for commercial or informational purposes. The domain WHOIS data is unavailable, suggesting the domain may be unregistered, privacy-protected, or otherwise obscured, which raises concerns about legitimacy and trustworthiness. From a technical perspective, the site employs Google Ads and Bodis domain parking services, with embedded iframes for ad syndication. The site lacks visible security headers and there is no evidence of HTTPS enforcement or SSL certificate presence in the provided data. The site’s design and content quality are poor, with limited mobile optimization and accessibility features. SEO optimization is minimal due to the lack of meaningful content and meta tags. Security posture is weak due to the absence of HTTPS confirmation, security headers, and contact or incident response information. Privacy compliance is minimal, with only a basic privacy policy page detected and no cookie consent mechanism. No contact information or business credentials are provided, further reducing business credibility and trust. Overall, the site presents a low-risk profile in terms of content safety as it contains no adult or explicit material, but the lack of transparency, minimal content, and missing WHOIS data suggest it is a placeholder or parked domain rather than an active business website. Strategic recommendations include securing domain registration information, implementing HTTPS, enhancing site content and structure, and providing clear business and contact information to improve trust and compliance.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website jjvisionmedicalaffairs.com is currently inaccessible due to geo-restriction or access control, displaying a message that the application is not accessible in the user's country or region. This prevents any meaningful content or metadata analysis. The domain is newly registered in December 2024 and uses name servers associated with Johnson & Johnson, suggesting a corporate affiliation. However, the lack of accessible content, contact information, or policies limits the ability to assess the business model, services, or compliance posture. Technically, the site lacks visible security headers or HTTPS verification due to blocking. The overall security posture cannot be fully evaluated but is presumed low given the lack of accessible data. The domain registration appears legitimate and consistent with the domain name, but the newness of the domain suggests a nascent or upcoming project. Strategic recommendations include enabling broader access for analysis, publishing privacy and security policies, and implementing standard security best practices.
- PParrish Healthcare
parrishhealthcare.com
Healthcare · United States
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Parrish Healthcare operates as a comprehensive healthcare provider network serving Brevard County, Florida. The organization offers a wide range of medical services including primary care, specialty services, emergency care, and community health programs. It holds multiple accreditations and certifications, positioning itself as a trusted healthcare leader in the region. The website reflects a professional and patient-focused approach with extensive resources, patient testimonials, and community engagement initiatives. Technically, the website is built on a modern CMS platform (Scorpion CMS) and employs standard web technologies such as JavaScript, jQuery, and integrates with Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized and includes accessibility features, enhancing user experience across devices and for users with disabilities. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy compliance. However, the absence of visible security headers and lack of published security policies or incident response contacts suggest areas for improvement. The WHOIS data is missing, which is unusual for a healthcare entity but the website content and branding strongly indicate legitimacy. Overall, Parrish Healthcare's digital presence is robust and professional, supporting its business goals effectively. Strategic enhancements in security transparency and WHOIS registration clarity would further strengthen trust and compliance.
- HealthAware
healthawareservices.com
Healthcare · United States
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HealthAware is a healthcare technology company specializing in health risk assessments and patient engagement solutions aimed at improving disease awareness and healthcare interactions. With over 100 hospital systems as clients across the U.S., the company leverages behavior change technologies to support healthcare providers and blood donation centers. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes Cloudflare DNS and modern JavaScript libraries. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Business credibility is strong, supported by clear contact information, testimonials, and a long-established domain. Overall, the website presents a trustworthy and professional digital presence.
Johnson & Johnsongetsmartaboutafib.net
Healthcare
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Get Smart About AFib is a healthcare educational website operated under the Johnson & Johnson corporate umbrella, focusing on atrial fibrillation awareness and education. The site targets a global audience including patients and healthcare professionals, offering localized content in multiple languages and regions. The business model centers on providing trusted healthcare information to improve patient outcomes and awareness. Technically, the site is built on Drupal 10 CMS with React components, leveraging modern web technologies and integrating tracking tools such as Google Analytics and Facebook Pixel for user behavior insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies. Overall, the domain registration and DNS configuration align with the corporate identity, supporting legitimacy and trustworthiness. The site does not contain adult or explicit content and is safe for general audiences.
Johnson & Johnsontoutsavoirsurlafa.fr
Healthcare
70Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website getsmartaboutafib.net/fr-FR is a healthcare educational platform focused on atrial fibrillation, providing comprehensive information to the general public about this common cardiac arrhythmia. It is branded and operated under the Johnson & Johnson umbrella, leveraging their established healthcare reputation. The site uses modern web technologies including Drupal 10 and React, ensuring a contemporary user experience with good mobile optimization and accessibility. The technical infrastructure is solid, with HTTPS enforced and clientTransferProhibited domain status enhancing security. However, DNSSEC is not enabled, and explicit security headers are not evident in the provided data. Privacy compliance is partially addressed with a cookie consent mechanism, but no privacy policy or terms of service pages were detected in the analyzed content. Tracking technologies such as Facebook Pixel and Google Tag Manager are used, indicating moderate user tracking. Overall, the site is professional, trustworthy, and safe for general audiences.
Radar Mediastructuraltimberawards.co.uk
Media · United Kingdom
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Radar Booking is a specialized event booking platform operated by Radar Media, focusing on industry events such as the Structural Timber Awards 2025. The website provides ticket sales, table bookings, sponsorship opportunities, and event promotion services primarily targeting professionals in the structural timber sector. The platform leverages WordPress with WooCommerce and Elementor, integrating secure payment processing via Stripe and live chat support through Tawk.to. The site demonstrates good content quality, professional design, and clear navigation, supporting a positive user experience. However, privacy compliance could be improved by adding cookie consent mechanisms and a more comprehensive privacy policy. The WHOIS lookup failed due to querying a subdomain, limiting domain registration trust assessment. Overall, the website appears legitimate and professionally maintained with moderate technical maturity and security posture.
RIBA Journalribaj.com
Media
70Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
RIBA Journal is a professional media publication focused on architecture and design, targeting architects and industry professionals. The website provides architecture news, design articles, and industry insights, positioning itself as an established magazine in the architecture media sector. Technically, the site uses modern JavaScript libraries and cookie consent management tools, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and a published privacy policy. The site employs extensive analytics and marketing tracking services, including Google Analytics, Facebook Pixel, and Hotjar, with a comprehensive cookie consent mechanism. However, the absence of WHOIS data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional and trustworthy in content but requires improvements in transparency and security practices.
Timber Development UKtimberdevelopment.uk
Manufacturing · United Kingdom
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Timber Development UK (TDUK) is a prominent supply chain body dedicated to the timber industry in the United Kingdom. Established in 2021, it serves as a central hub connecting suppliers, designers, builders, and sustainability advocates to promote the use of wood in construction and related sectors. The organization offers a range of services including market data, product databases, educational resources, and events to support its members and the broader timber community. The website reflects a professional and well-structured digital presence, leveraging WordPress and modern web technologies to deliver content and interactive features effectively. The site is optimized for mobile devices and includes SEO best practices, although some accessibility features could be enhanced.
Design Museumdesignmuseum.org
Non-profit · United Kingdom
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Design Museum is a well-established non-profit institution based in London, dedicated to contemporary design. It offers a wide range of exhibitions, educational programs, events, and retail services, positioning itself as a world-leading museum in its sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site employs multiple modern analytics and marketing tools, uses HTTPS, and maintains domain security through registrar locks, though DNSSEC is not enabled. Security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with privacy regulations, including GDPR.
- JJ&J MedTech
jnjmedtech.com
Healthcare
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
J&J MedTech operates as a global healthcare technology provider specializing in medical devices and healthcare solutions. The website serves as a portal for multiple localized country and language versions, targeting healthcare professionals worldwide. The business is positioned as a large multinational enterprise under the Johnson & Johnson corporate umbrella, offering a broad range of medical technology products and services. Technically, the website is built on Drupal 10 with React components, leveraging modern JavaScript frameworks and third-party analytics tools such as Google Tag Manager and Hotjar. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy compliance. However, explicit security headers and detailed security policies are not evident, and no incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain is a notable anomaly, warranting further verification of domain registration status. Overall, the website presents a professional and trustworthy front consistent with a major healthcare brand, though improvements in security transparency and domain registration clarity are recommended.
Independence Healthindhealth.org
Healthcare · United States
62Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Independence Health is a regional healthcare network comprising leading independent hospitals and healthcare professionals focused on providing exceptional care and value to their communities. The website presents a professional and consistent brand image with clear navigation and relevant healthcare content. The technical infrastructure is based on WordPress with the Divi theme, hosted likely on WPEngine, and incorporates modern web technologies such as jQuery and ActiveCampaign for marketing and subscription forms. The website is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, and does not provide explicit privacy or cookie policies, which are important for compliance and trust. Overall, the domain registration is privacy protected but consistent with the business profile and country. No WAF or blocking mechanisms were detected, allowing full content access.
Pixelmolkerei AGpixrealities.com
Technology · Switzerland
60Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Pixrealities™, developed by Pixelmolkerei AG, is a specialized virtual reality training platform targeting professional and corporate education markets globally. The company leverages immersive VR technology to provide realistic training scenarios that enhance employee skills, confidence, and knowledge. The platform supports a wide range of VR hardware and alternative solutions for users without VR devices, positioning itself as an accessible and innovative training solution. The business is well-established with academic validations and customer endorsements, primarily serving healthcare and technology sectors. Technically, the website is built on WordPress using modern plugins and themes, hosted by Hostpoint AG. It demonstrates good SEO practices, mobile optimization, and moderate performance. The site employs Google Analytics and Google Tag Manager for tracking, with a cookie consent mechanism in place. However, some security headers are not explicitly detected, and DNSSEC is not enabled, indicating room for security enhancements. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. There is no evidence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. Privacy compliance is partial, as no privacy policy or terms of service pages were found in the analyzed content. Overall, Pixrealities.com presents a professional and trustworthy online presence with a strong business model and technical foundation. Strategic improvements in privacy documentation and security practices would further enhance its credibility and compliance posture.
GAYAgaya.sk
Telecommunications · Slovakia
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
GAYA s.r.o. is a well-established Slovak telecommunications provider founded in 2004, serving the Turiec region with a broad portfolio of services including high-speed internet, digital television, telephony, and business IT solutions. The company positions itself as a regional leader with over 20 years of experience, targeting households, businesses, and local governments. Their website reflects a professional and consistent brand image, offering clear navigation and comprehensive service descriptions. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced HTTP security headers and explicit security policies. Privacy compliance is partial, with a privacy policy and terms of service available but no cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
NetSpace s.r.o.netspace.sk
Telecommunications · Slovakia
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
NetSpace s.r.o. is a Slovak telecommunications and IT services provider with over 21 years of experience. The company specializes in delivering internet connectivity, fixed telephony, corporate network construction and management, security and camera systems, as well as hosting and repair services primarily targeting businesses and local governments. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with modern libraries and plugins, optimized for SEO and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response details. Overall, the domain registration and website content are consistent and legitimate, indicating a trustworthy business presence.
- ARTOS, a.s.
nuo.sk
Telecommunications · Slovakia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
NUO.sk is a Slovak telecommunications service provider offering bundled high-speed internet, digital television with over 200 channels, and telephone services primarily targeting domestic households across Slovakia. The company operates through a network of regional partners, with ARTOS, a.s. as the main entity. The website presents a professional and consistent brand image with clear service descriptions and multiple contact options. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap, AOS, and Leaflet, and integrates Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. WHOIS data aligns well with the website's business claims, indicating a legitimate and consistent registration. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a trustworthy and professional online presence for NUO services.
- INFINITY GROUP a.s.
infinitygroup.sk
Manufacturing · Slovakia
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
INFINITY GROUP a.s. is a Slovak manufacturing company specializing in the production of shaped cut parts and weldments for construction, mining machinery, rail vehicles, and handling equipment. Established in 2008, the company leverages advanced technologies such as laser, plasma, and oxygen cutting, CNC machining, bending, surface treatment, and welding to deliver high-quality products. The company holds multiple certifications including ISO 9001 and CE standards, reinforcing its commitment to quality and compliance. The website targets industrial clients and businesses in the manufacturing sector, positioning itself as a reliable regional manufacturer with a solid market presence. Technically, the website is built on WordPress with a modern tech stack including jQuery, Isotope, Owl Carousel, and Google Fonts. It employs performance optimizations such as lazy loading and caching via WP Rocket, and integrates GDPR-compliant cookie consent mechanisms through the Complianz plugin. The site is mobile-optimized and SEO-friendly, though some lazy loading images show errors which may affect user experience. From a security perspective, the site uses HTTPS with DNSSEC enabled and integrates Google reCAPTCHA v3 for bot protection. However, it lacks explicit HTTP security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or malicious content were detected, but improvements in security headers and broken image fixes are recommended to enhance security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility. The domain registration data aligns well with the business claims, showing a consistent and legitimate online presence. Strategic recommendations include implementing security headers, fixing broken images, and adding explicit security and incident response information to further strengthen trust and security.
ppmmppmm.sk
Media · Slovakia
67Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Press Play is a Slovak advertising agency based in Banská Bystrica, specializing in videoproduction, photography, web design, graphic design, social media, SEO, marketing strategies, and copywriting. The company targets ambitious clients seeking effective advertising solutions and has a solid market presence with over 10 years of experience and more than 400 successful projects. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and performance optimizations. Security measures include HTTPS, DNSSEC, Google reCAPTCHA, and GDPR-compliant cookie consent management. While no explicit security policy or incident response information is published, the overall security posture is strong with no detected vulnerabilities. The domain registration is consistent and trustworthy, supporting the legitimacy of the business.
Chropynska Slovakia a. s.chropynska.sk
Manufacturing · Slovakia
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Chropynska Slovakia a. s. is a Slovak manufacturing company specializing in advanced solutions for efficient production, including automated production lines, technological fixtures, and custom machinery. The company targets industrial manufacturers, particularly in automotive, aerospace, and agricultural machinery sectors, positioning itself as a regional leader with international customers. Their website reflects a mature digital presence with multilingual support and clear business messaging. Technically, the site is built on WordPress with modern libraries and plugins, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, cookie consent, and some security plugins, though improvements like CSP headers and vulnerability disclosure mechanisms are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting the company's credibility and market position.
LL design interior, s.r.o.lldesign.sk
Real Estate · Slovakia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LL design interior, s.r.o. is a Slovakian small business specializing in interior design services for residential and commercial spaces. The company offers comprehensive services including space measurement, detailed interior design, and advanced 3D visualizations with 360-degree views. With over 54 successful projects and a strong referral rate of 73%, LL design holds a reputable position in its local market. The website reflects a professional and consistent brand image, targeting property owners seeking aesthetic and functional interior solutions. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and jQuery, supplemented by plugins for GDPR compliance, cookie management, and user interaction enhancements. Hosting is provided by WebSupport, with DNSSEC enabled and HTTPS enforced, indicating a secure and reliable infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site employs HTTPS, DNSSEC, Google reCAPTCHA on forms, and cookie consent mechanisms, demonstrating adherence to best practices. However, it lacks explicit security policies and incident response contacts, which could be improved. No vulnerabilities or suspicious activities were detected. Overall, LL design's website is a trustworthy, well-maintained digital presence that supports its business objectives effectively. Strategic enhancements in security transparency and additional HTTP headers could further strengthen its posture.
Other · Slovakia
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The Slovenský zväz bylinkárov website is currently under maintenance and provides minimal content, primarily a placeholder message indicating upcoming launch. The organization appears to be a Slovak herbalist association, but no detailed business information, services, or contact details are available on the site. The technical infrastructure is based on WordPress CMS with a maintenance plugin and uses jQuery and Open Sans fonts. The site is served over HTTPS but lacks important security headers and visible privacy or cookie policies, which reduces its security and compliance posture. The presence of a login form on the maintenance page without additional security controls is a potential risk. Overall, the website's digital maturity is low, with basic mobile optimization and limited SEO or accessibility features.
- BBetano Splash Screen
betano.pt
Other · Portugal
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.betano.pt currently serves a Cloudflare splash screen page that blocks direct access to its main content. The domain appears to be associated with gambling services, as indicated by the iframe source URL referencing Kaizen Gaming, a known operator in the online betting industry. Due to the Cloudflare Web Application Firewall (WAF) challenge, the accessible content is minimal, lacking any visible privacy policies, terms of service, contact information, or business details. This limits the ability to perform a full security and compliance assessment. From a technical perspective, the site uses Cloudflare for security and analytics, embedding JavaScript beacons for traffic insights. However, no CMS or detailed technology stack is detectable from the limited HTML content. The absence of security headers and privacy compliance indicators further reduces the site's trustworthiness and security posture. Security-wise, the presence of a Cloudflare WAF splash screen suggests an intent to protect the site from automated threats and abuse, which is a positive security measure. However, the lack of visible policies and contact channels for incident response or data protection officers indicates gaps in compliance and transparency. The gambling nature of the business implies regulatory requirements that are not evident on the accessible page. Overall, the site’s risk assessment is constrained by the blocked content. The current publicly accessible page scores low on content quality, security posture, and privacy compliance. Strategic recommendations include improving transparency by publishing privacy and cookie policies, providing clear contact information, enhancing security headers, and ensuring GDPR compliance. For a comprehensive evaluation, access beyond the WAF splash screen is necessary.
- ElephantBet
elephantbet.et
Other · Ethiopia
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
ElephantBet is an online sports betting and casino platform primarily targeting the Ethiopian market, with extensions into other African countries such as Mozambique, Angola, and Sierra Leone. The website offers live sports betting, casino games, live dealer games, and various promotions and tournaments, positioning itself as a leading trusted brand in the region. The platform leverages modern web technologies including React, Google Tag Manager, and reCAPTCHA v3 to provide a responsive and interactive user experience. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information, indicates gaps in compliance and user trust facilitation. Security measures such as HTTPS and bot protection are in place, but additional security headers and vulnerability disclosure mechanisms are missing. Overall, ElephantBet presents a professional and functional online gambling service with room for improvement in privacy compliance and security transparency.
Betclicbetclic.pl
Other · Poland
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website betclic.pl is currently inaccessible, returning a 403 Forbidden error page with minimal content. Betclic is known as an online gambling and betting platform, targeting adult users primarily in Poland. The domain is registered since 2008, indicating an established presence, but the current site content is blocked, preventing detailed analysis of business and compliance information. The technical infrastructure and digital maturity cannot be fully assessed due to lack of accessible content and metadata. Security posture is weak as no security headers or policies are present, and the site is not accessible to users, which may impact business operations and user trust. Overall, the site requires remediation to restore access and improve transparency and compliance.
- STS
sts.pl
Other · Poland
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
STS is a prominent Polish bookmaker specializing in sports betting services. The website targets adult users interested in gambling and offers an online platform for placing bets on various sports. The business appears to be large and well-established within Poland, focusing on the gambling sector. The website's technical infrastructure is based on modern JavaScript frameworks, likely Angular, and integrates third-party widgets such as Sir.Sportradar for sports data. However, the site relies heavily on client-side rendering, resulting in minimal static HTML content in the snapshot provided. Security-wise, the site uses HTTPS and Google Tag Manager with default denied consent settings, indicating some privacy awareness. Nevertheless, there is a lack of visible security headers, privacy policies, cookie consent mechanisms, and contact information, which are critical for compliance and trust. Overall, the site shows moderate technical maturity but needs improvements in privacy compliance and security best practices.
- FFORTUNA GAME a.s.
efortuna.pl
Other · Poland
67Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
The website at efortuna.pl is currently serving a geoblock notification page related to FORTUNA GAME a.s., a company likely operating in the gaming or betting sector. The domain is mature, registered since 2007, and shows no signs of privacy protection or suspicious registration patterns, indicating a legitimate business presence. However, the website content is minimal, lacking essential pages such as privacy policy, cookie policy, terms of service, or contact information, which limits user engagement and trust. From a technical perspective, the site uses basic HTML and CSS with embedded base64 images but lacks modern frameworks, SEO optimization, or accessibility features. No analytics, advertising, or tracking scripts were detected, suggesting limited digital marketing or user tracking. Security headers and advanced security configurations are absent, and SSL/TLS configuration details are unknown, indicating potential areas for improvement. The security posture is weak due to missing security headers, lack of privacy and cookie policies, and absence of incident response contacts. No WAF or blocking mechanisms were detected, and the site is accessible without challenge. Overall, the site scores low on content quality, technical implementation, security posture, and privacy compliance, reflecting a need for significant enhancements to meet modern standards and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers and SSL configurations, adding clear contact and incident response information, improving content quality and SEO, and adopting modern web technologies to improve performance and user experience.
- GGeoloc redirection
betsson.fr
Other · France
62Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The domain betsson.fr currently functions solely as a geolocation redirector, forwarding visitors to the main Betsson homepage at betsson.com. This indicates that betsson.fr is not intended to host full website content but rather to route traffic based on geographic location. The domain is well-established, created in 2007, and registered with a reputable registrar, CSC CORPORATE DOMAINS INC., with active status and Cloudflare DNS hosting. However, the lack of substantive content, including privacy policies, cookie notices, terms of service, and contact information, limits the ability to fully assess the site's compliance and security posture. No security headers or scripts were detected in the minimal HTML content provided, and no WAF or security challenge was observed, indicating the site is accessible but minimal in functionality. The content is safe for general audiences with no adult or explicit material detected.
Betclicbetclic.fr
E-commerce · France
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Betclic.fr is an established online gambling and sports betting platform operating primarily in France since 2006. The business targets adult users interested in sports betting and casino games. The domain is hosted on Amazon AWS infrastructure, indicating a modern hosting environment. However, the website content is currently inaccessible, returning an HTTP 403 Forbidden error with minimal content, which prevents full analysis of the site’s features, policies, and user interface. No privacy, cookie, or terms of service policies are present in the provided content, and no contact information or forms are available. Security headers and HTTPS configuration details are not visible in the provided data, limiting the security posture assessment. The domain WHOIS data is consistent and legitimate, supporting the business credibility despite the current access restriction.
- EEurobet
eurobet.it
Other · Italy
73Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Eurobet is a leading Italian online gambling and betting platform offering a wide range of services including sports betting, live betting, virtual sports, horse racing, casino games, poker, bingo, and lotteries. The website targets adult Italian users interested in online gaming and betting, positioning itself as a comprehensive and trusted platform in the Italian market. The business model revolves around online gambling services with a strong digital presence and customer engagement through promotions and loyalty programs. Technically, the site is built on Adobe Experience Manager CMS, leveraging modern JavaScript libraries such as jQuery and React, and integrates advanced tracking and consent management tools like Google Tag Manager, FullStory, and OneTrust. The site is mobile-optimized and SEO-friendly, providing a professional and consistent user experience.