Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,189001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
64,201–64,250 of 99,067
Plinkoplinko.dk
Other · Denmark
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Plinko.dk is a Danish-focused online platform dedicated to the Plinko gambling game, offering players information about the best casinos to play Plinko for real money, including reviews, bonus offers, demo modes, and strategy guides. The business operates primarily as an affiliate marketing site, directing traffic to partner casinos through referral links. The website targets Danish adult players interested in online gambling, providing localized content in Danish and multiple language alternatives for international audiences. Technically, the website uses modern web standards including HTML5, JavaScript, CSS, and JSON-LD structured data for SEO and rich snippets. It leverages Cloudflare Insights for analytics and performance monitoring. The site is mobile optimized with good navigation and SEO metadata, though it lacks some advanced accessibility features. Hosting appears to be via Cloudflare or a similar CDN provider, ensuring moderate performance and security. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a single email address, with no phone or physical address provided. The domain registration is recent but consistent with the business launch timeline, and no suspicious WHOIS patterns were found. Overall, Plinko.dk presents a professional and focused gambling affiliate site with good content quality and technical implementation. Security and privacy practices could be improved by adding cookie consent, security headers, and more comprehensive contact and incident response information. The site is suitable for its target audience but should enhance compliance and security posture to build greater trust and resilience.
Plinkoplinkokasyno.pl
Other · Poland
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Plinko is an online platform focused on providing comprehensive information, guides, and affiliate links related to the Plinko gambling game targeted primarily at Polish players. The website offers detailed content about game mechanics, strategies, demo versions, mobile applications, and recommended online casinos. It positions itself as a niche informational and affiliate site within the online gambling sector in Poland, leveraging multilingual support and social media presence to reach a broader audience. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with Cloudflare Insights for performance and analytics. The site is mobile-optimized and SEO-friendly, though it lacks some advanced security headers and cookie consent mechanisms. Hosting and domain registration are consistent and transparent, with SSL properly configured ensuring secure connections. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and RNG certification for game fairness. However, it lacks published security policies, incident response information, and vulnerability disclosure mechanisms. The absence of cookie consent and security headers represents compliance and security improvement opportunities. Overall, the website is a well-structured, content-rich platform with moderate security posture and good business credibility. Strategic enhancements in privacy compliance and security transparency would further strengthen trust and regulatory adherence.
Plinkoplinkodineroreal.es
Other · Spain
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Plinko España operates as an informational and affiliate marketing website focused on the Plinko gambling game, targeting Spanish players interested in online casinos. The site provides detailed content about the game mechanics, variants, strategies, and recommended licensed casinos in Spain. It leverages affiliate links to casino platforms offering Plinko games, promoting bonuses and real money play. The business model centers on driving traffic and conversions to partner casinos. Technically, the website is built with standard modern web technologies including HTML5, JavaScript, and CSS, optimized for both desktop and mobile platforms. The site structure is clear with good SEO metadata and structured data to enhance search engine visibility. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. WHOIS data is unavailable due to Red.es restrictions, common for .es domains, which slightly reduces transparency but is not unusual. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile typical for gambling affiliate sites. Strategic improvements in security headers, privacy compliance, and transparency would enhance trustworthiness and compliance posture.
Plinko 🎖️ Play Plinko for Real Money in Canadaplinkogame.ca
—
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Plinkoplinkoechtgeld.de
Other · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Plinkoechtgeld.de is a German-focused online platform dedicated to the Plinko gambling game, providing detailed information, strategies, demo versions, and casino recommendations. The site targets adult players interested in real money gambling, primarily in Germany but also internationally through multiple language versions. The business model is affiliate-based, promoting various online casinos offering Plinko games. Technically, the site uses modern web standards with Cloudflare DNS and CDN services, delivering a moderately performant and mobile-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. The site maintains a moderate level of trust with social media presence and links to responsible gambling organizations. Overall, the platform is a niche, small-sized gambling affiliate site with good content quality and moderate privacy compliance.
Plinkoplinkocasino.nl
Other · Netherlands
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Plinko.nl is a niche online platform focused on the Plinko gambling game targeted at Dutch players. It provides comprehensive information about the game, strategies, demo versions, and recommended licensed online casinos in the Netherlands. The site operates primarily as an affiliate marketing and informational resource, promoting gambling responsibly with references to certified RNG and KSA licensed casinos. Technically, the site uses standard web technologies with HTTPS and Cloudflare Insights for analytics, but lacks some advanced security headers and cookie consent mechanisms. The security posture is moderate with no critical vulnerabilities detected. The domain is newly registered in 2024, consistent with the site's recent launch and content. Overall, the platform offers a good user experience with clear navigation and relevant content for its target audience.
Plinkoplinkogame.co.uk
Other · United Kingdom
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Plinko.co.uk is a specialized online platform dedicated to the Plinko gambling game, targeting UK players interested in online casino gaming. The site provides detailed information about the game mechanics, betting options, strategies, demo modes, mobile app availability, and responsible gambling practices. It operates primarily as an affiliate and informational resource, recommending licensed UK casinos and offering promotional bonuses. The website maintains a consistent brand presence with social media integration and trust signals such as certified RNG mentions and responsible gambling badges. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with Cloudflare Insights for performance monitoring. It is mobile-optimized and SEO-friendly, though it lacks some advanced security headers and cookie consent mechanisms. The domain is recently registered in 2024, consistent with the site's new launch and business focus. HTTPS is enforced, ensuring secure connections. From a security perspective, the site demonstrates good baseline practices with no exposed sensitive data or vulnerable libraries detected. However, improvements are recommended in implementing security headers, cookie consent, and explicit security policies. No incident response or vulnerability disclosure information is present, which could enhance trust and compliance. Overall, Plinko.co.uk presents a professional and trustworthy platform for UK gambling enthusiasts focused on Plinko. Strategic enhancements in privacy compliance and security posture would further strengthen its market position and user confidence.
Plinkoplinkoaustralia.com
Other · Australia
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Plinko Australia is a niche affiliate website dedicated to providing comprehensive information about the Plinko gambling game targeted at Australian players. The site offers detailed game mechanics, betting strategies, demo modes, and curated lists of recommended online casinos with bonuses. It serves as an informational and promotional platform, leveraging affiliate marketing to monetize traffic. The website is relatively new, launched in 2024, and focuses on the Australian gambling market with multi-language support for other regions. Technically, the site is built with standard web technologies (HTML5, CSS, JavaScript) and uses Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly with proper meta tags and structured data. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No forms are present that collect personal data directly, reducing immediate privacy risks. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks published security policies or incident response contacts. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. The site links to multiple social media platforms and trusted gambling support organizations, enhancing trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but could improve privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security and incident response policies.
Plinkoplinkorealmoney.in
Other · India
69Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
PlinkoRealmoney.in is a niche online platform dedicated to the Plinko gambling game, primarily targeting Indian players interested in real money online casino gaming. The website offers comprehensive content including game rules, strategies, demo versions, app download instructions, and curated lists of trusted casinos. It operates mainly as an affiliate and informational site, promoting various Plinko game variants and casino bonuses. Technically, the site uses standard web technologies with HTTPS and Cloudflare Insights for analytics, providing a moderate level of performance and mobile optimization. Security posture is adequate with SSL but lacks advanced security headers and explicit privacy compliance mechanisms. Contact information is limited to an email address, and no phone or physical address is provided. Overall, the site is moderately trustworthy but could improve in privacy compliance and security transparency.
Rabidi N.V.legiano-casino.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Legiano Casino is a newly established online gambling platform launched in early 2024, operated by Rabidi N.V. The platform offers a wide range of casino games, live dealer experiences, and sports betting, targeting primarily Czech-speaking adult users. It positions itself as a modern and comprehensive casino with over 11,500 games from leading providers, supported by a Curaçao license and eCOGRA certification. The website is professionally designed, mobile-optimized, and provides detailed information about bonuses, payment methods, and responsible gaming tools. Technically, the site uses standard web technologies with Cloudflare DNS but lacks visible advanced frameworks or CMS indications. Security practices include SSL encryption and certified RNG, though some security headers and incident response contacts are missing. Privacy compliance is partially addressed with policies present but no active cookie consent mechanism. Overall, the platform demonstrates moderate maturity with room for improvement in security and transparency.
تقييمات لاعبين عرب Online Casinos 2025 ➤ Quality Fast Paying Casinosarabslotsmegacasino.com
Other
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website arabslotsmegacasino.com is a recently established Arabic-language online casino review platform, launched in mid-2023. It targets Arabic-speaking players interested in online gambling, providing detailed reviews, bonus information, and categorized casino listings by country. The site is professionally designed with good navigation and mobile optimization, leveraging Cloudflare DNS and HTTPS for secure access. However, it lacks critical privacy and cookie policies, as well as clear contact information, which impacts its trustworthiness and compliance posture. The site uses Google Analytics and Tag Manager for user tracking but does not provide transparency or consent mechanisms for data privacy. Overall, the technical infrastructure is moderate with room for security enhancements, particularly in security headers and policy disclosures.
Online Kasiinod Eestis 2025 - Välismaa Kasiinodonlinecasinoseesti.ee
Other · Estonia
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website onlinecasinoseesti.ee operates as an affiliate and informational platform focused on the Estonian online gambling market. It provides detailed reviews, bonus offers, and game information for online casinos targeting Estonian players. The site is relatively new, launched in 2023, and positions itself as a trusted guide for players seeking reputable online casinos with fast payouts and attractive bonuses. Technically, the site uses standard web technologies with Cloudflare DNS and includes Google Analytics and Tag Manager for user tracking. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. However, the site lacks critical privacy and cookie policies, contact information, and visible security headers, which impacts its compliance and security posture. The WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the site is functional and well-targeted but requires improvements in privacy, security, and transparency to enhance trust and compliance.
Kasyno Online W Polsce 2025 | Polskie Kasyna Internetoweonlinecasinopolski.pl
Other · Poland
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
onlinecasinopolski.pl is a Polish-language online platform specializing in providing curated lists, reviews, and bonus offers for licensed online casinos accessible to Polish players in 2025. The site targets adult Polish gamblers seeking legal and reliable online gambling options, offering detailed casino ratings, payment method information, and game categories. Technically, the website employs modern web technologies including JavaScript, CSS3, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and uses HTTPS, ensuring secure connections. However, it lacks explicit privacy and cookie policies, which is a compliance gap under GDPR. Security-wise, the site has a good SSL configuration but lacks DNSSEC and security.txt disclosures, which could improve trust and security posture. Overall, the domain registration is consistent with the business claims, enhancing legitimacy. Strategic improvements in privacy compliance and security disclosures are recommended to enhance trust and regulatory adherence.
—
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Zdeněk Šmejkalzdesmejkal.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Zdeněk Šmejkal operates a professional website offering web development and graphic design services primarily targeting businesses and individuals in the Czech Republic. The site showcases custom web solutions including order systems for restaurants and simple e-commerce platforms, alongside corporate identity and print material design. The business is positioned as a small independent service provider with a clear focus on technology and creative services. Technically, the website is built on Drupal 7 with jQuery and Lightbox2 libraries, and integrates Google Analytics via Google Tag Manager for visitor tracking. While the site is functional and well-structured, it shows signs of aging technology and lacks modern security headers and privacy compliance features. Mobile optimization and accessibility are basic but adequate for general use. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected. There is no evidence of exposed sensitive data or vulnerable libraries in the HTML content. However, the absence of privacy and cookie policies, as well as missing WHOIS registration data, reduces overall trust and compliance posture. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and suitable for its business purpose but would benefit from enhanced security practices, updated technology, and improved privacy compliance to strengthen trust and reduce risk.
- BBwat | Agence digitale
bwat.fr
—
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Sleede SASUsleede.com
Technology · France
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Sleede SASU is a French digital agency specializing in web and mobile design and development, leveraging technologies such as React, React Native, Ruby on Rails, and Node JS. The company targets startups, large enterprises, and internal projects, emphasizing agile and lean methodologies. Their website showcases a professional portfolio with client testimonials, indicating a strong market position within the French technology services sector. The business model focuses on delivering tailored digital products with a passion for quality and innovation. Technically, the website employs modern JavaScript libraries and frameworks, including Tiny Slider for UI components, and integrates HubSpot tools for marketing and analytics. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR. Nonetheless, no HTTP security headers were detected, and there is no visible security policy or incident response contact information. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and registration transparency. Despite this, the website content and business information appear credible and professional. Overall, the website scores well on content quality and technical implementation but has room for improvement in security posture and domain registration transparency. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.
GIP Maximilienmaximilien.fr
Government · France
51Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
GIP Maximilien operates as a regional government-associated platform focused on digital public procurement and administrative services in the Île-de-France region. The website offers a suite of innovative and secure services tailored for public buyers and enterprises, emphasizing responsible purchasing and digital transformation. The platform is well-positioned as a key regional player facilitating public procurement processes with interoperability and change management support. Technically, the website employs modern web technologies including Alpine.js and tarteaucitron.io for cookie management, hosted by OVH with HTTPS enforced. The site demonstrates good mobile optimization and accessibility, though some security headers could be improved. Security posture is solid with no evident vulnerabilities or exposed sensitive data, and privacy compliance is supported by a clear cookie consent mechanism and a privacy policy page. However, explicit security policies and incident response contacts are not published, representing an area for enhancement. Overall, the website is professional, trustworthy, and aligned with its public service mission.
- CClustaar
clustaar.io
Technology · France
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Clustaar is a French technology company founded in 2017, offering API services as indicated by the minimal website content on clustaar.io. The domain serves primarily as a redirect or placeholder, directing visitors to the main company website at clustaar.com. The company appears to be small-sized and focused on providing technology solutions, likely targeting developers and businesses requiring API integrations. The domain registration details are consistent with the company's identity, enhancing legitimacy. From a technical perspective, the website is minimalistic with no detected CMS, frameworks, or advanced technologies. Hosting is inferred to be on Amazon AWS based on DNS nameservers. The site lacks SEO optimization, accessibility features, and mobile optimization cannot be determined from the limited content. No analytics or tracking scripts were found, indicating minimal data collection. Security posture is weak due to absence of DNSSEC, security headers, privacy policies, and incident response information. The domain uses HTTPS (implied by modern standards though not explicitly stated), but no advanced security best practices are observed. No forms or data collection mechanisms reduce attack surface but also limit user engagement and trust. Overall, the website is low in content quality and security maturity, with a legitimacy score of 85 based on WHOIS consistency. Strategic improvements in content, security policies, and technical implementation are recommended to enhance trust and compliance.
- CCZI, s.r.o.
helpnet.cz
Non-profit · Czech Republic
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Helpnet.cz is a Czech non-profit informational portal dedicated to persons with specific needs, including disabilities and seniors. The website provides news, grant information, event calendars, and media monitoring related to social services and disability support. It is operated by CZI, s.r.o., a Czech company, and targets a specialized audience within the Czech Republic. The site uses Drupal 7 CMS and integrates common web technologies such as jQuery and Google Analytics. The design and content quality are good, with clear navigation and mobile optimization. However, the absence of privacy and cookie policies and the lack of WHOIS data reduce transparency and privacy compliance. Security posture is generally good with HTTPS and CAPTCHA protections, but security headers are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.
HURT s.r.o.rucniovladani.cz
Transportation · Czech Republic
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
HURT s.r.o. is a Czech Republic-based company specializing in vehicle modifications for disabled individuals, offering a range of products including hand controls, vehicle entry aids, wheelchair loading solutions, and electric wheelchair drives. The company has a strong market presence with approximately 29 years of experience and partnerships with notable automotive and mobility organizations. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their target audience of disabled drivers and vehicle users. Technically, the site employs modern web technologies such as Google Tag Manager and AJAX for enhanced user experience, though it lacks some advanced security headers and comprehensive privacy policies. Security posture is moderate with HTTPS enforced and privacy-conscious tracking settings, but the absence of a detailed Content-Security-Policy and vulnerability disclosure mechanisms indicates room for improvement. The missing WHOIS data for the domain is a significant concern for trust and legitimacy, warranting further verification. Overall, the website is functional and trustworthy from a business perspective but requires enhancements in privacy compliance and security transparency.
Non-profit · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Nadační fond KlaPeto is a Czech non-profit foundation dedicated to providing financial support to severely disabled children up to 18 years old. Founded in 2011 by Kateřina Klasnová and Jaroslav Petrouš, the foundation has raised over 15 million CZK and helped hundreds of children. The website serves as an information and fundraising platform, featuring detailed project descriptions, news updates, and donation options including an e-shop. The foundation emphasizes transparency and direct aid, ensuring all funds go to the intended beneficiaries without administrative overhead. The site is well-structured, professionally designed, and optimized for search engines with comprehensive privacy and cookie policies compliant with GDPR.
Opelopel.cz
Transportation · Czech Republic
70Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.opel.cz serves as the official Czech Republic portal for Opel, a well-known automotive brand under the Stellantis group. It provides comprehensive information about Opel's passenger and commercial vehicles, including models like Insignia, Astra, and Corsa. The site offers tools such as vehicle configurators, test drive bookings, and service appointment scheduling, targeting Czech consumers interested in purchasing or servicing Opel vehicles. The website is professionally designed, mobile-optimized, and uses modern web technologies including Adobe Experience Manager and advanced analytics platforms.
5 senses for kids Foundation5senses4kids.org
Non-profit · France
57Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
5 senses for kids Foundation is a small non-profit organization dedicated to supporting educational, cultural, social, and scientific actions aimed at the harmonious development of children through multisensoriality. The foundation provides educational resources, supports scientific research, and engages parents and researchers with relevant content and activities. The website is professionally designed, bilingual (French and English), and features partnerships with recognized scientific and cultural organizations, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress with Bootstrap 4 and jQuery, leveraging modern libraries such as Swiper.js and Tippy.js for UI components. It uses Google Analytics and Google Tag Manager for analytics and tracking, and employs Google reCAPTCHA v3 for form security. Hosting is provided by o2switch, a reputable French hosting provider. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, DNSSEC is not enabled, and some recommended security headers are missing. There is no visible security policy or incident response contact information, and no cookie consent mechanism is implemented, which could be a compliance gap under GDPR. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enabling DNSSEC, adding security headers, implementing a cookie consent banner, and publishing a security.txt file to improve security posture and compliance.
- MMailchimp
mcusercontent.com
Technology
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The domain mcusercontent.com serves as a content delivery endpoint primarily for Mailchimp email campaigns. The page content is minimal, acting as a placeholder informing visitors that the link originated from a Mailchimp campaign. Mailchimp is a well-established marketing platform serving millions of customers globally, with a strong market position as a leading email marketing service provider. The domain is registered with a reputable registrar and shows appropriate domain protection measures, indicating legitimacy. From a technical perspective, the domain uses Google Domains name servers but lacks DNSSEC and security headers, which are recommended for enhanced security. The HTML content is minimal with no scripts, forms, or tracking technologies detected, reflecting a simple content delivery function rather than a full website. Performance and SEO optimization cannot be fully assessed due to the limited content. Security posture is moderate; the domain benefits from domain status protections but lacks visible security headers and DNSSEC. No privacy or cookie policies are present, and no forms or data collection mechanisms exist on this page. Incident response contact is available via Mailchimp's abuse reporting page, which is a positive indicator. Overall, the domain is safe with no adult or questionable content detected. The overall risk is low given the domain's role and protections, but improvements in DNS security and transparency around privacy policies would enhance trust and compliance. The minimal content limits the ability to fully assess technical and business credibility aspects.
DELONG INSTRUMENTS a.s.delong.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Delong Instruments a.s. is a Czech-based company specializing in the design and manufacture of compact transmission electron microscopes (TEMs), targeting laboratories and scientific research institutions. Their product portfolio includes small, affordable, and customizable TEMs, Schottky electron guns (DIGUN), and custom electron optic solutions. The company positions itself as a niche leader in compact TEM technology, emphasizing ease of installation and high imaging contrast. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on Webflow with integration of Google Analytics and Tag Manager, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies and headers. WHOIS data is unavailable, limiting domain trust assessment, but the overall business credibility is high based on website content and contact details.
- TTosoh Bioscience
tosohbioscience.com
Healthcare
66Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Tosoh Bioscience operates as a specialized division of Tosoh Corporation, focusing on scientific and clinical diagnostic products. Their website presents a professional and consistent corporate image, targeting laboratories and healthcare professionals with a broad portfolio of over 500 specialty products in separations, purification, and clinical diagnostics. The site is built on ASP.NET WebForms technology, hosted with Cloudflare DNS services, and incorporates legacy JavaScript libraries alongside modern analytics tools such as Google Analytics and Google Tag Manager. While the website is accessible and well-structured, it lacks some modern security enhancements such as DNSSEC and updated JavaScript libraries, which could pose risks. Privacy and cookie policies are present with a consent mechanism, but explicit security policies and incident response contacts are absent, indicating room for improvement in compliance and transparency.
RedShift BioAnalytics, Inc.redshiftbio.com
Technology · United States
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
RedShift BioAnalytics, Inc. is a specialized technology company focused on providing advanced analytical instrumentation for protein and biomolecule analysis, primarily serving the biopharmaceutical industry. Their innovative solutions, including Microfluidic Modulation Spectroscopy (MMS) and the HaLCon platform, enable rapid, precise structural insights critical for drug discovery, development, and manufacturing. Positioned as an innovative and trusted provider, RedShiftBio targets biopharma companies and life science researchers with a medium-sized business footprint based in the United States. The company's digital infrastructure is built on a modern Webflow CMS platform, leveraging a suite of contemporary web technologies such as Google Tag Manager, Pardot marketing automation, and Cloudflare Turnstile captcha for security. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Integration of multiple analytics and marketing tools indicates a moderate level of user tracking aligned with business growth objectives. From a security perspective, the website enforces HTTPS, employs bot protection mechanisms, and secures user input forms with captchas. However, it lacks explicit published security policies, incident response procedures, and vulnerability disclosure information, which are recommended to enhance trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional website content and business information mitigate some risk. Overall, RedShiftBio presents a professional and trustworthy online presence with strong technical implementation and business credibility. Strategic improvements in transparency around security policies and domain registration verification would further strengthen their security posture and stakeholder confidence.
Applied Photophysics Ltdphotophysics.com
Healthcare · United Kingdom
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Applied Photophysics Ltd is a well-established company specializing in biophysical characterization of biomolecules, with a focus on Circular Dichroism and Stopped-Flow Spectrometry. The company serves a global scientific and biopharmaceutical research audience, offering advanced instrumentation and support services. Recently acquired by Nicoya, it maintains a strong market position with over 50 years of expertise. The website reflects a professional and comprehensive digital presence with clear business information and trust signals such as certifications and warranties. Technically, the site uses modern JavaScript libraries, analytics tools, and cookie consent mechanisms, hosted likely via 123-Reg with domain security measures in place. Security posture is strong with HTTPS and domain locks, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.
HORIBAhoriba.com
Technology · Japan
74Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
HORIBA is a globally recognized enterprise specializing in the manufacture and supply of precision instruments and systems across multiple sectors including automotive, environmental monitoring, medical diagnostics, semiconductor, and scientific research. The company maintains a strong market position with a comprehensive portfolio of products and services tailored to industrial and scientific clients worldwide. The website reflects a mature digital presence with professional design, clear navigation, and detailed business information, supporting its enterprise stature. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap and Font Awesome for responsive and accessible design. The site demonstrates good performance and SEO practices, with mobile optimization and structured metadata enhancing user experience and search visibility. Security measures are robust, featuring HTTPS enforcement and multiple security headers, though explicit security policies and incident response details are not publicly disclosed. From a security perspective, the site shows a solid posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. However, the absence of a vulnerability disclosure program or security.txt file suggests room for improvement in transparency and proactive security communication. Overall, HORIBA's website presents a trustworthy and professional digital front consistent with its business reputation. The lack of WHOIS data limits domain registration trust verification, but the site’s quality and business indicators support legitimacy. Strategic recommendations include enhancing security transparency, improving accessibility features, and establishing formal vulnerability disclosure channels to further strengthen trust and compliance.
RSI Testsysteme GmbH & Co. KGrsi-testsysteme.de
Manufacturing · Germany
67Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
RSI Testsysteme GmbH & Co. KG is a specialized German manufacturer focused on corrosion testing systems and durability test equipment. Their product portfolio includes salt spray cabinets, condensation devices, climate change test chambers, and walk-in test rooms, serving industries such as automotive, electromobility, agriculture, offshore, sanitary, wind energy, and solar technology. The company positions itself as a niche provider with strong technical expertise and longstanding industry experience. The website is professionally designed using WordPress with modern plugins and SEO tools, providing clear navigation and multilingual support (German and English). Privacy and cookie policies are implemented with GDPR compliance, and contact information is prominently displayed. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though security headers and explicit security policies are absent. No vulnerabilities or suspicious content were detected. Overall, the website reflects a credible small manufacturing business with a good digital presence and compliance maturity.
- CTS GmbH
cts-umweltsimulation.de
Manufacturing · Germany
53Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
CTS GmbH is a medium-sized German manufacturing company specializing in environmental simulation devices that simulate various environmental conditions such as temperature, humidity, and pressure. The company also offers calibration services for these devices, including those from other manufacturers. Positioned as a leading expert in their niche, CTS targets industrial clients requiring high-quality testing and simulation equipment. Their website reflects a professional and consistent brand image with clear product and service information. Technically, the website is built on Joomla CMS with Bootstrap and Splide.js for UI components. It is mobile-optimized and uses HTTPS with a valid SSL configuration. However, some security best practices such as security headers and cookie consent mechanisms are missing. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of advanced marketing tools. From a security perspective, the site has a solid foundation with HTTPS and CSRF tokens but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is minimal but consistent with the hosting and author information on the site, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security posture. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance trust and security culture.
Hitachi High-Tech Corporationhitachi-hightech.com
Technology · Japan
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Hitachi High-Tech Corporation operates a global multilingual website serving as a portal for its diverse technology and industrial product offerings. The company is positioned as a major player in scientific instruments, industrial machinery, information systems, electronic components, and materials sectors. The website reflects a professional corporate presence with consistent branding and regional language support, targeting global B2B customers and partners. Technically, the site employs modern JavaScript libraries, Google Tag Manager, Microsoft Clarity, and Adobe DTM for analytics and marketing, hosted likely on Akamai infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content and branding strongly indicate legitimacy. Overall, the site scores well on business credibility and technical implementation but should improve privacy compliance and security best practices.
Karel Troppkareltropp.cz
Technology · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Karel Tropp is a freelance web developer specializing in WordPress and the Yii2 framework, offering custom themes, plugins, large-scale web applications, and web graphic design services. The website presents a professional portfolio with client logos and clear service descriptions, targeting businesses and individuals seeking web development solutions. The domain is registered since 2015, consistent with the business maturity and location in the Czech Republic. Technically, the site runs on WordPress 6.4.1, hosted on DigitalOcean, and employs modern tools such as Google Tag Manager and reCAPTCHA v3 for security and analytics. The cookie consent mechanism is implemented, supporting GDPR compliance to some extent. Security posture is good with HTTPS and reCAPTCHA, but lacks explicit security headers and documented policies. Overall, the site is well-structured, mobile-optimized, and SEO-friendly, though it lacks direct contact emails or phone numbers, relying solely on a contact form.
Other
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at digitalstock.com/lander is a minimal content placeholder or parking page with no substantive business information, contact details, or policies. The domain is registered since 2012 with Gabia, Inc. registrar and is currently active with no privacy protection. The site uses basic JavaScript and CSS assets hosted on wsimg.com and includes Google Adsense advertising scripts. There is no evidence of a content management system or advanced frameworks. The lack of privacy, cookie, and terms of service policies indicates low compliance with data protection regulations. No forms or user input fields are present, reducing attack surface but also limiting user engagement. Security posture is minimal with no security headers detected and DNSSEC not enabled. Overall, the site appears to be a parked domain or placeholder rather than an active business website.
Energy · Germany
62Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website knowh2o.de serves as a specialized knowledge portal dedicated to water management and the water industry, primarily targeting professionals and stakeholders within the German energy and water sectors. It provides educational content and resources to support water management practices. The site is built on a WordPress platform utilizing popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity and a focus on content presentation and SEO. However, the technical infrastructure shows room for improvement in security and privacy compliance, with no visible privacy or cookie policies and a lack of security headers. The absence of contact information and incident response details limits transparency and trustworthiness. Overall, the website is functional and professionally designed but would benefit from enhanced security measures and compliance documentation to improve its risk posture and user trust.
Other · Germany
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Gesellschaft zur Förderung der Abwassertechnik e.V. (GFA) operates a professional German-language website providing specialized news, journals, and services focused on water, wastewater, and environmental technology sectors. The site targets professionals and stakeholders in these industries, offering news updates, quality mark testing services, newsletters, and advertising opportunities. The business model centers on information dissemination and industry service provision, positioning GFA as a niche media and service provider within the German water technology market. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern frontend technologies such as Tiny Slider and jQuery. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data markup. Performance is moderate, with a well-structured navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent with Matomo analytics disabled by default, reflecting good privacy compliance. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published. Security headers are not explicitly detected, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration appears consistent with the business focus, and no blocking or WAF challenges were detected, allowing full content accessibility. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and adding vulnerability disclosure information to strengthen the security posture and trustworthiness further.
Energy · Germany
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e. V. (DWA) operates as a professional association in Germany specializing in water management, wastewater, and waste. The organization provides a comprehensive suite of services including memberships, access to technical standards, e-learning platforms, certifications, publications, and event management. Their market position is strong within the German environmental and water sectors, serving professionals and organizations with authoritative resources and training. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and tiny-slider. The hosting is managed via vistec.net, with a moderate performance profile and good mobile optimization. The site employs HTTPS with secure session management and a cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF protection, and privacy-conscious analytics via Matomo. However, explicit security policies and incident response information are not present, representing an area for improvement. The cookie consent and privacy policies are comprehensive and GDPR compliant, supporting strong privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. The risk profile is low, with no detected vulnerabilities or suspicious activity. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the security posture and user experience.
Government · Germany
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e.V. (DWA) operates the website dwa-digital.de as a platform dedicated to the digital transformation of the water management sector in Germany and Europe. The organization is a leading non-profit association with approximately 14,000 members from diverse sectors including municipalities, academia, industry, and government. The website offers expert knowledge, educational programs such as the Digitale Akademie, and events like the Digitaler Dienstag to foster digital innovation and skills development in water and wastewater management. Technically, the website is built using RapidWeaver with Foundation framework and various stacks plugins, leveraging Matomo for analytics and CookieHub for consent management. The site is well-structured, mobile-optimized, and employs HTTPS with a good security posture. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. However, formal security policies and incident response contacts are not publicly disclosed. Security-wise, the site shows good practices including encrypted connections and no visible vulnerabilities or exposed sensitive data. The use of privacy-respecting analytics and cookie management tools further supports compliance. No WAF or blocking mechanisms interfere with content access, ensuring full transparency and accessibility. Overall, the website represents a credible, professional, and trustworthy digital presence for the DWA, effectively supporting its mission to lead digital transformation in water management. Strategic improvements could include publishing explicit security policies and vulnerability disclosure information to enhance trust and preparedness.
- KKZEI
kzei.sk
Education · Slovakia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KZEI is the Department of Sanitary and Environmental Engineering at the Slovak University of Technology in Bratislava, Faculty of Civil Engineering. The department provides academic education, research projects, and certification services related to water supply and sewage systems. It targets students, researchers, and professionals in the environmental engineering sector. The website reflects a small academic entity with consistent branding and professional content. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Elementor. It uses HTTPS with Google reCAPTCHA for form security and Jetpack for analytics. The site is moderately performant and mobile-optimized, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but should improve privacy compliance and security headers to enhance its security posture and regulatory adherence.
SHIMADZU CORPORATIONshimadzu.com
Technology · Japan
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Shimadzu Corporation is a long-established enterprise specializing in analytical and measuring instruments, medical systems, and industrial equipment. The company has a strong global presence and a history dating back to 1875, positioning itself as a leader in technology and healthcare sectors. The website reflects a mature digital presence with comprehensive business information, investor relations, and sustainability initiatives. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes multilingual support and cookie consent mechanisms, indicating a good level of digital maturity. Security posture is solid with HTTPS and privacy compliance, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable anomaly but does not detract from the professional presentation and trustworthiness of the site. Overall, the site is well-designed, content-rich, and suitable for its target audience of researchers, medical professionals, and industrial clients.
- SSchizofreny s.r.o.
labrulez.cz
Education · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LabRulez, operated by Schizofreny s.r.o., is a specialized online platform dedicated to the analytical chemistry community, primarily serving the Czech Republic. The website aggregates scientific news, educational webinars, a comprehensive document library, and a marketplace for analytical instruments. It targets professionals and companies in the analytical chemistry sector, offering a centralized hub for knowledge sharing and commerce. The platform also plans future expansions including a virtual academy and an e-shop, indicating growth ambitions. Technically, the site is built using modern web technologies such as Gatsby and React, hosted behind Cloudflare for performance and security. The website demonstrates good design quality, mobile optimization, and SEO practices, contributing to a positive user experience. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response information are absent. Privacy compliance is partial, with a basic terms of service PDF available but lacking a dedicated privacy or cookie policy page and consent mechanism. Overall, LabRulez presents a credible and professional digital presence with room for improvement in privacy and security transparency.
- SSchizofreny s.r.o.
labrulez.com
Technology · Czech Republic
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
LabRulez is a specialized online platform dedicated to the analytical chemistry community, offering a comprehensive range of services including news updates, webinars, event listings, a document library, product catalogs, and a marketplace for used laboratory equipment. The platform targets analytical chemists, laboratory professionals, and companies, providing a centralized resource to facilitate knowledge sharing and commercial activities. The company behind the platform is Schizofreny s.r.o., established in 2018, operating primarily in the Czech Republic. Technically, the website is built using modern web technologies such as React and Gatsby, hosted behind Cloudflare for performance and security. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but the absence of DNSSEC and explicit privacy and cookie policies indicates room for compliance enhancement. Overall, the platform is trustworthy and professionally managed, with active social media engagement and a clear business focus.
IWA Publishingiwapublishing.com
Other · United Kingdom
69Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
IWA Publishing is a well-established international publisher specializing in water, wastewater, and environmental research. Founded in 1999, it operates a portfolio of 19 peer-reviewed journals and a range of books, serving a global audience of researchers and professionals in the water sector. The company offers open access publishing with Article Processing Charges and provides editorial and subscription services. The website reflects a strong market position with professional branding and comprehensive content tailored to its target audience. Technically, the website is built on the Silverchair platform, utilizing modern web technologies including jQuery, Google Tag Manager, Google Analytics, Stripe for payments, and MathJax for mathematical content rendering. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Hosting and DNS are managed through reputable providers, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business profile, indicating high legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements could include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.
- International Water Association (IWA)
iwaconnectplus.org
Other
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The International Water Association (IWA) operates a global community portal aimed at water professionals worldwide. The platform facilitates networking, knowledge sharing, and community engagement, positioning itself as a key player in the water management sector. The website promotes membership benefits and hosts information about significant industry events, reflecting an active and professional organization. Technically, the site is built with modern frameworks such as Angular and integrates various analytics and user experience tools like Hotjar and Google Analytics. The presence of HTTPS and Google site verification indicates a baseline of security, though the absence of explicit security headers and privacy policies suggests room for improvement. The WHOIS data is incomplete, which slightly impacts trustworthiness, but the professional content and active communication channels support the site's legitimacy. Overall, the site demonstrates a solid digital presence with moderate technical maturity and a good security posture, though enhanced privacy compliance and security practices are recommended.
TAPItapi.com
Other
75Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
TAPI operates a professionally designed corporate website hosted on WordPress, optimized with modern plugins such as WP Rocket and Yoast SEO. The domain is well-established since 2000, indicating a mature online presence. The technical infrastructure includes Cloudflare DNS and HTTPS with strong SSL configuration, ensuring secure communications. The website employs standard analytics and marketing tools including Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. However, the absence of visible privacy policies, terms of service, and contact information limits transparency and user trust. Security posture is generally good with HTTPS and domain protection flags, but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is safe, professional, and suitable for a general audience, but lacks some compliance and contact details that would enhance credibility and user confidence.
PIXMAN s.r.o.ms-museum.org
Education · Czech Republic
69Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The Czech Museum of Mass Spectrometry is a small, non-profit educational institution focused on the history and technology of mass spectrometry. The website provides detailed information about exhibits, educational quizzes, and virtual tours aimed at scientists, students, and enthusiasts. The museum is affiliated with reputable scientific partners, enhancing its credibility. Technically, the website uses a traditional tech stack including jQuery, Bootstrap, and Google Analytics, but some libraries are outdated, which may pose security risks. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security posture is moderate; while HTTPS is implied and cookie consent is implemented, the absence of security headers and use of outdated libraries are concerns. WHOIS data is unavailable, likely due to privacy protection, but the website content and partner affiliations support legitimacy. Overall, the site is safe, trustworthy, and serves its educational purpose effectively.
Flagpedia.netflagpedia.net
Other
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Flagpedia.net is a niche informational website dedicated to providing comprehensive data about flags of countries, international organizations, and U.S. states. Established in 2008, it offers educational content including quizzes and downloadable flag resources, targeting a general audience interested in geography and vexillology. The website maintains a consistent brand presence and active social media engagement, supporting its position as a trusted reference in its domain. Technically, the site employs a straightforward tech stack with HTML5, CSS3, and JavaScript, hosted via WEDOS Internet and utilizing Cloudflare DNS services. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. However, no major CMS or frameworks are detected, indicating a custom or lightweight implementation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic, with privacy and cookie policies present but no explicit consent mechanisms or GDPR compliance indicators. Contact information is limited to a contact form, with no direct emails or phone numbers published. Overall, Flagpedia.net presents a low-risk profile with a solid business credibility score and good content quality. Strategic improvements in security headers, DNSSEC, and privacy compliance would further strengthen its posture and trustworthiness.
- EEuropean Film Promotion
efp-online.com
Media · Germany
56Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
European Film Promotion (EFP) is a well-established organization founded in 2001 that promotes European films and talent internationally. The website serves as a platform to showcase European cinema excellence and diversity, targeting film industry professionals and enthusiasts worldwide. It offers various programs, film sales support, and networking opportunities, positioning itself as a key player in the European film promotion sector. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Slick Carousel, and Typekit fonts, with a newsletter subscription powered by Brevo (Sendinblue). Hosting is provided by Cronon GmbH, a reputable registrar. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security measures such as cookie consent are implemented, but advanced security headers and DNSSEC are missing. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected in the provided data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website is trustworthy, professional, and serves its business purpose well. Strategic improvements in security headers, accessibility, and explicit policy disclosures would enhance its security posture and compliance standing.
KnownHostknownhost.com
Technology · United States
68Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
KnownHost is a well-established managed web hosting provider operating since 2006, offering a wide range of hosting services including shared, WordPress, VPS, and dedicated hosting. The company targets businesses, developers, agencies, and resellers, emphasizing reliability, performance, and customer support. Their market position is strong with over 1 million domains hosted and a 99.99% uptime guarantee. Technically, the website uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly implemented. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience. However, the absence of WHOIS data limits domain registration verification, which slightly impacts trust analysis.