Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
65,201–65,250 of 99,067
Sciendosciendo.com
Education · Poland
73Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Sciendo is a reputable academic publishing solutions provider, part of the De Gruyter Brill Group, offering a broad range of services including publishing, distribution, and library support for scholarly journals, books, and conference proceedings. The company serves a global audience with a strong presence in academic institutions and professional organizations. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Sciendo presents a professional, trustworthy, and well-maintained digital presence.
- AAgrofilm
agrofilm.sk
Media · Slovakia
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Agrofilm is an international film festival dedicated to agri-food issues, primarily targeting filmmakers, agricultural professionals, media, and the general public interested in agriculture and food production topics. The website serves as an information hub for festival news, program details, film catalogs, and media relations. It is positioned as a niche cultural event within Slovakia and the broader international agri-food community. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve by adding explicit contact details and security policies.
- NNaše zdravotnictví
nasezdravotnictvi.cz
Healthcare · Czech Republic
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Naše zdravotnictví is an online magazine focused on delivering news, stories, and expert opinions related to the Czech healthcare sector. The website targets healthcare professionals such as doctors and nurses, as well as the general public interested in healthcare topics. It operates as a niche media outlet providing specialized content in the healthcare domain within the Czech Republic. The business was established around 2017, consistent with the domain registration date, and maintains a focused editorial approach without apparent parent or subsidiary companies.
- MODEL PACK SHOP Bratislava
packshop.sk
Retail · Slovakia
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MODEL PACK SHOP Bratislava operates a well-established e-commerce platform specializing in packaging materials including cardboard boxes, adhesive tapes, foils, and bags. With over 24 years of tradition and own manufacturing capabilities under the parent company Model Obaly, a.s., the company holds a strong position in the Slovak packaging market. The website offers a comprehensive product catalog, loyalty programs, and free shipping above a purchase threshold, targeting both businesses and individual customers. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and Ekko Lightbox, with responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages were found. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.
- EEscapeDiem Live Escape Room Hamburg
escapediem.de
Hospitality · Germany
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
EscapeDiem is a specialized live escape room provider based in Hamburg, Germany, offering immersive and professionally designed escape room experiences. The company holds a strong market position locally, supported by multiple awards and a top Tripadvisor ranking. Their target audience includes friends, families, and teams seeking entertainment and team-building activities. Technically, the website is built on a modern stack using UIkit and ProcessWire CMS, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is basic with visible cookie consent and privacy policy, but no explicit data protection officer or incident response contacts. Overall, the website is professional, trustworthy, and content-rich, supporting the business's credibility and customer engagement.
OWL-GAMESowl-games.de
Hospitality · Germany
51Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
OWL-GAMES is a small hospitality business based in Paderborn, Germany, specializing in indoor leisure and entertainment activities such as escape rooms, laser tag, virtual reality, and mind games. The company targets a broad audience including families, friends, and corporate clients seeking team-building events. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their offerings. Technically, the site is built on WordPress with modern JavaScript libraries and SEO plugins, ensuring good performance and search visibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy disclosures and some security headers. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Ravensberg Basecamp GmbHravensbergbasecamp.de
Hospitality · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Ravensberg Basecamp GmbH operates a multi-faceted business in Bad Sachsa, Germany, combining an indoor climbing arena (Clip 'n Climb Harz), a burger restaurant (Backwood Burger), a coffee shop (Backwood Coffee), and an outdoorshop retail store. The company targets families, outdoor enthusiasts, and local visitors, offering entertainment, food, and retail products. The website is well-structured, professionally designed, and provides clear information about services, pricing, and contact details. Social media integration and SEO optimization are evident, supporting digital presence and customer engagement. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its business scope.
Aktuelle Nachrichten aus Hamburg und der Welt | MOPOdiscovery-dock.de
—
74Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
try2escape Bünder GmbHtry2escape.events
Hospitality · Germany
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
try2escape Bünder GmbH operates a specialized live escape game business based in Rheine, Germany, offering immersive indoor escape rooms and outdoor adventure tours targeting families, children, and corporate groups. The company has established a strong local presence with a well-designed website that facilitates online bookings and provides detailed information about their offerings. The technical infrastructure is built on WordPress with Elementor, ensuring a modern and responsive user experience. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the business demonstrates legitimacy and professionalism with clear contact channels and social media engagement.
Teambreakout Hamburgteambreakout.de
Hospitality · Germany
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Teambreakout Hamburg operates as a well-established live escape game provider offering immersive indoor and outdoor escape experiences, as well as interactive crime games for home use. The company targets a broad audience including families, friends, and corporate teams, positioning itself as a leading entertainment venue in Hamburg with multiple positive customer reviews and awards. The business model centers on event-based entertainment with online ticket sales and team event hosting. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Facebook Pixel for marketing and analytics. Hosting is provided by rzone.de, with proper HTTPS encryption and moderate performance. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, uses secure forms with validation, and maintains good privacy compliance including GDPR-aligned privacy and cookie policies. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and continuous monitoring of third-party scripts.
THE ROOMthe-room-berlin.com
Hospitality · Germany
63Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
THE ROOM is a small hospitality business based in Germany specializing in immersive escape room experiences in Berlin. The company has established a strong market position with multiple industry awards and a professional online presence. Their website is built on WordPress with Elementor and includes modern tracking and consent management technologies. The site is well-designed, mobile-optimized, and provides clear information about their escape room offerings, targeting groups of 2-6 players interested in live entertainment. Security posture is good with HTTPS and cookie consent, though some security headers and policies could be improved. No privacy policy or terms of service were found, which is a compliance gap. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.
Adventurebox Karlsruheadventurebox-karlsruhe.de
Hospitality · Germany
64Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Adventurebox Karlsruhe is a specialized event service provider offering escape rooms, outdoor exit games, city challenges, home games, and remote events primarily targeting groups and individuals in Karlsruhe, Germany. Founded in 2021, the company has established a strong local market presence with a focus on team-building and entertainment experiences. Their website is professionally designed, mobile-optimized, and rich in relevant content, providing users with clear navigation and comprehensive event filtering options. Technically, the website is built on WordPress using modern plugins such as Revolution Slider, PixelYourSite for tracking, and Borlabs Cookie for consent management. The hosting appears to be managed via UI-DNS nameservers, and performance is moderate with caching enabled. Security best practices are observed, including HTTPS enforcement and security headers, although no explicit security policy or incident response information is published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The business credibility is reinforced by numerous positive customer reviews and trust signals such as the ProvenExpert widget and TripAdvisor award mentions. Overall, the website and business demonstrate a mature digital presence with good security hygiene and privacy awareness, suitable for their hospitality and entertainment sector. Strategic improvements could include publishing formal security and incident response policies and enhancing accessibility features.
Nexus Exitnexus-exit.de
Hospitality · Germany
68Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Nexus Exit is a specialized entertainment provider offering next-level escape room experiences in Gelnhausen, Germany. The company holds a strong market position as the highest-rated escape room provider in the Hessen region, supported by excellent customer reviews on Tripadvisor, Facebook, and Google. Their services include a variety of escape rooms, outdoor adventures, online games, group offers for companies, schools, bachelor parties, and consulting services under Nexus Creations. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as Google Fonts, Matomo analytics, and Google reCAPTCHA for security. Hosting is provided by a reputable German provider (Netcup), and the site employs HTTPS with good SSL configuration. While security headers are not explicitly detected, the site follows good security practices including cookie consent and bot protection. Analytics usage is moderate with privacy compliance considered good. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, there is room for improvement by implementing additional security headers and publishing a security policy or incident response contact. The absence of terms of service and vulnerability disclosure pages are minor gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The overall risk assessment is low, with the site presenting a professional and secure front to customers. Strategic recommendations include enhancing security headers, formalizing security policies, and maintaining up-to-date software to sustain and improve security posture.
Time-Busters Wientime-busters.at
Hospitality · Austria
65Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Time-Busters Wien is a specialized provider of handcrafted escape room experiences located in Vienna, Austria. The company emphasizes sustainability by using up to 90% recycled materials in their escape rooms and offers a variety of missions suitable for small groups, families, corporate teams, and large groups. Their market position is strong within the local hospitality and entertainment sector, supported by excellent customer reviews and a professional online presence. Technically, the website is built on WordPress with modern SEO and privacy compliance tools, including cookie consent management and analytics tracking via Matomo and Google Tag Manager. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the detailed contact information and business transparency. Overall, the website and business demonstrate a mature digital presence with strong compliance and user experience.
Escape Room Theater - OPOLUMtwistedrooms.com
Hospitality · Germany
52Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
OPOLUM is a specialized entertainment business operating in Hamburg, Germany, offering modern escape room experiences with live actors. The company targets groups ranging from small parties to large groups (2-120 persons) and provides both indoor and outdoor escape games. It holds a strong market position supported by over 1,700 positive Google reviews and an award (1. Platz ADAC Tourismuspreis), indicating high customer satisfaction and recognition. The business model focuses on immersive, interactive entertainment experiences, appealing to tourists and locals alike. Technically, the website is built on WordPress using Elementor, with integrations including Google Tag Manager, Sendinblue, and Borlabs Cookie for marketing and consent management. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Hosting and domain registration are stable and consistent with the business profile, registered through IONOS SE. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks advanced DNS security (DNSSEC) and security policy disclosures. No critical vulnerabilities or exposed sensitive data were detected. Tracking and marketing tools are extensively used, with a moderate to extensive user tracking level. Privacy compliance is basic, with no explicit privacy policy found in the provided content. Overall, OPOLUM presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements include publishing a privacy policy, enhancing DNS security, and adding security and incident response information to strengthen compliance and trust.
Skurrilum St. Pauliskurrilum.de
Hospitality · Germany
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Skurrilum St. Pauli is a well-established, award-winning escape room business located in Hamburg, Germany, operated by the creative team behind the Hamburger Schmidt Theater. The company offers five uniquely themed escape rooms targeting families, friends, and corporate groups for events and team building. The website is professionally designed, mobile-optimized, and provides comprehensive information about the business and its offerings. Technically, the site is built on WordPress with modern plugins and integrates third-party services such as Vimeo, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS enforced, cookie consent management, and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with a good digital presence.
SATJAM, s.r.o.satjam.sk
Manufacturing · Slovakia
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SATJAM, s.r.o. is a medium-sized manufacturing company specializing in metal roofing products and accessories, serving primarily the Slovak and Czech markets. The company emphasizes quality Czech manufacturing standards and offers a broad product portfolio including steel and aluminum roof coverings, trapezoidal sheets, and roofing accessories. Their website reflects a professional digital presence with clear navigation, mobile optimization, and integration of marketing and analytics tools. However, the absence of a dedicated privacy policy and terms of service pages indicates room for improvement in compliance and transparency. Security posture is solid with HTTPS and cookie consent mechanisms, but could be enhanced with additional security headers and published security policies. Overall, the website supports the company's market position as a trusted regional player with recognized certifications and active customer engagement.
Ripper Casinoripperpokies.com
Other · Denmark
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Ripper Casino operates as an online gambling platform offering a variety of casino games to adult users. The website's content and branding focus on providing a simple and engaging gambling experience. The domain is relatively new, registered in 2021, which aligns with a startup or recently launched online casino business. The technical infrastructure includes Matomo analytics for tracking and Kameleoon for marketing optimization, hosted behind Cloudflare DNS services. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust in the gambling industry. Security measures such as DNSSEC and security headers are absent, indicating room for improvement in protecting user data and site integrity.
Desert Nightsdesertnightscasino.com
Hospitality
71Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Desert Nights Casino is an online gambling platform offering a wide variety of real money casino games, including slots, table games, and video poker. The website features a desert and genie-themed branding with numerous promotions, bonuses, and a VIP club to engage players. The platform targets adult online casino players seeking a secure and entertaining gaming experience. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, enhanced by Matomo analytics and live chat support, indicating a moderate to advanced digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and cookie consent mechanisms suggests room for improvement. The lack of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration inconsistencies, which slightly impacts trustworthiness. Overall, the site presents a professional and engaging user experience with a solid foundation but would benefit from enhanced transparency and compliance features.
Claim Your Generous Welcome Bonus at Ozwin Casino!ozwincasino.com
Other
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Ozwin Casino is an online gambling platform offering a variety of casino games including slots, jackpots, and live action games. The website targets adult users interested in online casino entertainment, providing generous welcome bonuses and 24/7 support. The platform is built on Joomla CMS with Bootstrap framework, integrating Matomo analytics and PushAlert for user engagement. The site demonstrates good mobile responsiveness and a professional design, enhancing user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS enabled and CSRF tokens present, but lacks visible security headers and formal privacy or cookie policies. Overall, the site is functional and appealing to its target audience but would benefit from improved transparency and compliance documentation.
Slots Capital Casinoslotscapital.lv
Hospitality
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Slots Capital Casino operates as an online gambling platform specializing in slot games and casino entertainment. The website offers a broad selection of over 300 games, including slots, table games, and video poker, complemented by various bonuses and promotions to attract and retain players. The platform targets adult users interested in online casino gaming and provides 24/7 customer support primarily via live chat and email. The business model centers on online gambling revenue streams with affiliate partnerships enhancing market reach. Technically, the website is built on Joomla CMS with Bootstrap 5.3.2 framework, integrating modern web technologies and responsive design to ensure usability across devices. The site demonstrates moderate performance and basic accessibility features, with SEO optimization evident through meta tags and structured data. Analytics are implemented via Matomo, indicating moderate user tracking. From a security perspective, the site enforces HTTPS with strong SSL configuration but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The WHOIS data is privacy protected, common in the gambling industry, but reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, Slots Capital Casino presents a professional and functional online gambling platform with room for improvement in privacy compliance and security best practices to strengthen trust and regulatory adherence.
Red Stag Casinoredstagcasino.eu
Other
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Red Stag Casino operates as an online gambling platform offering over 200 games, exclusive bonuses, and VIP-level support. The website targets adult users interested in online casino gaming and positions itself as a niche player with a focus on customer experience and exclusive offers. The business model revolves around online gambling services with a VIP customer support approach. The site content and branding are consistent and professionally presented, catering to an adult audience with gambling interests. Technically, the website employs modern web technologies including Bootstrap 5 for responsive design and Matomo for analytics and tracking. The site is well-optimized for mobile devices and includes standard SEO and accessibility features, though accessibility could be improved. The infrastructure appears stable with no signs of blocking or WAF interference, and the site uses HTTPS with appropriate security headers, indicating a good security posture. Security-wise, the site implements HTTPS and several security headers, and maintains a security policy page. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is supported by comprehensive privacy and cookie policies with GDPR considerations. Overall, the site presents a moderate risk profile typical for online gambling platforms. The lack of WHOIS registrant transparency due to privacy protection is common in this industry but slightly reduces trust. Strategic recommendations include adding a vulnerability disclosure policy, improving incident response contact visibility, and enhancing accessibility features to strengthen compliance and user trust.
Uptown Acesuptownaces.eu
Hospitality
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Uptown Aces is an online casino platform offering a wide range of slot games, promotions, and VIP programs targeting adult gambling enthusiasts. The site is built on Joomla CMS with modern frontend technologies like Bootstrap and slick sliders, and uses Matomo for analytics, indicating a moderate level of digital maturity. Security posture is decent with HTTPS and CSRF tokens, but lacks explicit security headers and a cookie consent mechanism, which are recommended for compliance and protection. The business information is consistent with an online casino operator, though no direct contact emails or phone numbers are provided on the site. Overall, the website is professional, user-friendly, and provides a safe gambling environment for adults.
Hotel Kaštieľ Mojmirovcekastielmojmirovce.sk
Hospitality · Slovakia
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Hotel Kaštieľ Mojmirovce is a historic hospitality business located in Slovakia, offering accommodation, wellness, gastronomy, and event hosting services. The website reflects a well-established regional hotel with a focus on quality guest experience, leveraging its historic charm and modern amenities. The business targets general audiences including leisure travelers, corporate clients, and event organizers. Technically, the website is built on WordPress with the Divi theme, integrating modern JavaScript libraries and SEO best practices. It supports multilingual content and online booking via a partner platform. Security posture is solid with HTTPS, security headers, and secure form handling, though lacks published privacy and terms policies. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and accessibility.
Technická univerzita vo Zvolenetuzvo.sk
Education · Slovakia
62Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Technická univerzita vo Zvolene is a Slovak public university specializing in technical and environmental education and research. The website provides comprehensive information about faculties, academic programs, events, and organizational units, targeting students, researchers, and the academic community. The university maintains a moderate digital maturity with a Drupal 7 CMS platform, Bootstrap framework, and integration of common analytics and marketing tools such as Google Analytics and Facebook Pixel. While the site is well-structured and professionally designed, it uses some outdated technologies, notably an old jQuery version and an end-of-life CMS, which pose security risks. The security posture is adequate with HTTPS and anonymized analytics but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site is trustworthy and serves its educational mission effectively but would benefit from modernization and enhanced security practices.
Other · Slovakia
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Výskumný ústav potravinársky (VÚP) is a Slovak national research institute specializing in food science, research, and related services. Established in 2003, it provides scientific research outputs, consulting, testing laboratory services, and publishes journals and bulletins targeting both professional and general audiences interested in food and nutrition. The website reflects a well-established institutional presence with consistent branding and a clear focus on its research mission. Technically, the site uses a traditional web stack with jQuery and related UI libraries, delivering moderate performance and good mobile responsiveness. Security posture is adequate with cookie consent and privacy policy compliance, though some improvements in security headers and library updates are recommended. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
Other · Slovakia
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Slovenský zväz prvovýrobcov mlieka (SZPM) is a Slovak professional association established in 2003 representing raw cow milk producers. The website serves as a portal for sector news, market price information, and member-exclusive content, positioning SZPM as a key national entity in the dairy sector. The site uses modern web technologies including Bootstrap, jQuery, and analytics tools, hosted behind Cloudflare DNS with DNSSEC enabled, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-maintained, with room for enhanced privacy and security documentation.
Government · Slovakia
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Slovenská poľnohospodárska a potravinárska komora (SPPK) is a well-established Slovak non-profit chamber focused on representing and supporting the agricultural and food sectors. Founded in 2003, it provides a broad range of services including legislative updates, market statistics, education, and international cooperation. The website serves as a comprehensive information portal for stakeholders in agriculture and food industries, policymakers, and the general public interested in these sectors. It maintains a strong presence through multiple language options and social media channels, enhancing its outreach and engagement. Technically, the website is built on a custom CMS leveraging the Yii PHP framework, with a tech stack including jQuery, jQuery UI, and various UI enhancement libraries. It is hosted behind Cloudflare with DNSSEC enabled, ensuring good baseline security and performance. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics and AddThis for analytics and marketing. While the site is moderately optimized for mobile and accessibility, there is room for improvement in security headers and updating legacy libraries. From a security perspective, the site enforces HTTPS and uses DNSSEC, indicating a strong commitment to secure communications. However, the absence of advanced security headers like CSP and potential use of outdated JavaScript libraries present moderate risks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in security headers, library updates, and enhanced mobile optimization could further strengthen its posture and user experience.
Government · Slovakia
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Národné poľnohospodárske a potravinárske centrum (NPPC) is a Slovak government-affiliated institution specializing in agricultural and food research, innovation, and services. It serves a broad audience including firms, the public, and state entities, positioning itself as a leading national research center. The website reflects a mature digital presence built on WordPress with Elementor, featuring modern design and accessibility compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, NPPC demonstrates a professional and trustworthy online presence aligned with its governmental role.
Other · Slovakia
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website agroporadenstvo.sk is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. As a result, no business descriptive content, contact information, or policy documents are available for analysis. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or attacks. The technical infrastructure relies on Cloudflare services, but no CMS or additional technologies are detectable from the limited HTML content. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site presents a low visibility and trust profile in its current state, with critical gaps in transparency and compliance documentation.
Inštitút znalostného pôdohospodárstva a inováciíagroinstitut.sk
Government · Slovakia
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Inštitút znalostného pôdohospodárstva a inovácií (IZPI) is a Slovak government-affiliated institute focused on agricultural knowledge, innovation, and education. It operates under the Ministry of Agriculture and Rural Development of Slovakia, providing advisory services, accredited training, conference facilities, and hotel accommodations. The website reflects a well-structured government entity with clear communication channels and a strong partnership ecosystem. The target audience includes agricultural professionals, government stakeholders, and educators. The business model is primarily government-funded with service offerings in education and event hosting.
Energotel, a.s.energotel.sk
Telecommunications · Slovakia
64Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
Energotel, a.s. is a Slovak telecommunications company providing nationwide optical network services and 24/7 cyber security protection. With over 25 years of operation, it holds a strong market position in Slovakia, serving telecommunication operators and corporate clients. The company offers key services including security services, telecommunication services, and network demarcation, supported by ISO certifications that enhance its trustworthiness. Technically, the website is built on OpenCart CMS with modern libraries such as jQuery, Bootstrap, and Google Maps API, delivering a responsive and user-friendly experience. The infrastructure reflects moderate performance with room for SEO and accessibility improvements. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of a dedicated security policy and vulnerability disclosure limits transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable digital presence for Energotel. Strategic enhancements in security documentation and technical SEO could further strengthen its position.
- SSuspected phishing site | Cloudflare
contabostorage.com
Other
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website contabostorage.com is currently inaccessible due to a Cloudflare phishing warning page, indicating it has been reported for malicious activity aimed at stealing sensitive information. The domain is relatively new, registered in 2022, and uses Cloudflare for DNS and security services. No legitimate business content, contact information, or policies are present on the site, severely limiting the ability to assess the business or technical maturity. The security posture is poor, with the site being actively blocked for phishing, and no visible security headers or privacy compliance measures. Overall, the site presents a high risk and should be treated with caution.
- Plastové clony | Portaflex.cz
plastove-clony.cz
—
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
INPORTANTE s.r.o.ihygiena.sk
Retail · Slovakia
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
INPORTANTE s.r.o. operates the ihygiena.sk website, a professional B2B e-commerce platform specializing in hygiene and cleaning products for businesses in Slovakia. The company offers a wide range of dispensers, refills, cleaning chemicals, protective equipment, and packaging materials, targeting hospitality, horeca, and industrial sectors. The website is well-structured, with clear navigation and product categorization, supporting an online shop powered by WooCommerce. Technical infrastructure is based on WordPress with modern plugins including Yoast SEO, WPBakery, and Slider Revolution, indicating a mature digital presence. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and explicit policies are recommended. Privacy compliance is basic but present, with GDPR considerations evident. Overall, the website reflects a legitimate, trustworthy business with good user experience and professional content.
INPORTANTE s.r.o.orac.sk
Retail · Slovakia
55Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
INPORTANTE s.r.o., operating under the brand Artica Décor, runs the e-commerce website orac.sk, specializing in decorative home products such as moldings, 3D panels, and related accessories. The company targets general consumers in Slovakia seeking home improvement and decorative solutions. The website presents a professional and consistent brand image with a clear business focus on retail decorative elements. The domain has been registered since 2015, supporting a stable business presence in the regional market. Technically, the website is built on WordPress using WooCommerce and Elementor, hosted on DigitalOcean. It employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security is well-managed with HTTPS and a cookie consent mechanism that complies with GDPR principles, although explicit privacy and terms of service pages are missing. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response contact information indicates room for improvement. The cookie consent implementation is comprehensive, but privacy compliance could be enhanced by publishing detailed policies. Overall, the site demonstrates a moderate to good security and privacy maturity suitable for a small retail business. The overall risk is low, with recommendations focusing on enhancing privacy transparency, adding security policies, and improving security headers. These steps will strengthen trust and compliance, supporting business growth and customer confidence.
- ARICOMA
autocont.cz
Technology · Czech Republic
75Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ARICOMA is a leading enterprise IT service provider based in the Czech Republic, offering a broad range of end-to-end IT solutions and digital transformation services primarily targeting commercial firms and the public sector across Europe. The company positions itself as the number one player in its market segment, supported by a large professional workforce and extensive certifications. Technically, the website is built on a modern stack including Kentico CMS, Bootstrap, jQuery, and integrates multiple analytics and marketing tools such as Microsoft Clarity, Google Tag Manager, and Facebook Pixel. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security-wise, the site enforces HTTPS, uses reCAPTCHA for forms, and implements cookie consent mechanisms, though it lacks some security headers and explicit incident response contacts. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the strong business presence and certifications. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving direct contact availability.
- Stephen Pelling
stephenpelling.com
Other · United Kingdom
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Stephen Pelling's website serves as a professional portfolio showcasing his work as a creative art director, designer, and musician based in London. The site highlights various projects spanning from 2017 to 2021, targeting a general audience interested in creative arts and design. The business model is personal branding and portfolio presentation, with no e-commerce or direct sales functionality. The website is hosted on Cargo Collective and registered via GoDaddy, reflecting a small-scale, niche creative professional presence. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with templating via Handlebars.js. It is mobile optimized and performs moderately well, though it lacks advanced SEO and accessibility features. Hosting and domain registration are consistent and appropriate for the site's scope. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for improved protection. No privacy, cookie, or terms of service policies are present, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is professional and functional as a portfolio but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact information to improve trust and regulatory adherence.
- For Best Clients, s.r.o.
grandus.sk
E-commerce · Slovakia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
For Best Clients, s.r.o. operates the Grandus eshop system, providing custom ecommerce platform development, consulting, and integration services primarily in Slovakia. The company positions itself as a trusted partner for businesses seeking innovative and high-performance eshop solutions. The website reflects a mature digital presence built on modern technologies such as Next.js and React, with a professional design and clear navigation. Security posture is strong with HTTPS and relevant security headers, though privacy compliance documentation is lacking. Contact information is transparent, including direct owner contact details, enhancing business credibility. Overall, the site is well-structured and trustworthy, serving a B2B audience effectively.
Government · Slovakia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website hk8.sk represents the Združenie hlavných kontrolórov samosprávnych krajov SR (HK8), a Slovak professional association for chief controllers of self-governing regions. The organization focuses on enhancing the expertise and effectiveness of control activities within local government, supporting professional development, legislative advocacy, and cooperation with similar institutions domestically and internationally. The site content is primarily informational, targeting professionals in Slovak regional government oversight. The business model is membership-based, funded by contributions from regular and honorary members, positioning HK8 as a niche professional association within the Slovak government sector. Technically, the website is built using static HTML generated by Artisteer, with CSS and jQuery for styling and interactivity. Hosting appears to be provided by Websupport, inferred from the nameservers. The site demonstrates basic mobile responsiveness and accessibility but lacks advanced SEO and performance optimizations. No analytics or tracking technologies are detected, indicating minimal user tracking. From a security perspective, the domain benefits from DNSSEC, indicating a commitment to DNS integrity. However, the website lacks visible HTTPS confirmation in the provided data, security headers, and privacy or cookie policies, which are critical for GDPR compliance and user trust. No forms or contact mechanisms are present to facilitate incident reporting or user communication. These gaps suggest a moderate security posture with room for significant improvement. Overall, the website is functional and serves its informational purpose but requires enhancements in security, privacy compliance, and user engagement features to improve trustworthiness and regulatory adherence.
Únia miest Slovenskauniamiest.sk
Government · Slovakia
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Únia miest Slovenska is a Slovak non-profit organization advocating for democracy, public administration reform, and European integration with a focus on strengthening cities. The website is built on the Wix platform, leveraging standard Wix technologies and scripts, and presents a professional design with good content relevance. However, it lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate with HTTPS enabled and some security hardening scripts but could be improved with additional headers and policies. Overall, the website is legitimate and consistent with the organization's mission but requires enhancements in privacy compliance and security transparency.
Ordem dos Engenheirosordemdosengenheiros.pt
Education · Portugal
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Ordem dos Engenheiros is the official professional association for engineers in Portugal, providing a comprehensive range of services including membership management, professional certifications, training, events, and advocacy. The website serves as a central hub for engineering professionals and students, offering access to news, events, job boards, and regulatory information. The organization holds a leading position in the Portuguese engineering sector with a strong focus on professional development and international cooperation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and YouTube APIs, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement in adding advanced security headers and incident response disclosures. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which should be addressed to meet GDPR requirements fully. Overall, the site is professional, trustworthy, and well-maintained, serving its target audience effectively.
Contabocontabo.com
Technology · Germany
69Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Contabo GmbH is a Germany-based cloud and dedicated server hosting provider established in 2003, offering affordable VPS and bare metal servers across multiple global regions. The company positions itself as a cost-effective hosting solution with a strong uptime record and award-winning customer support. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site employs modern JavaScript libraries and tracking tools, including Google Tag Manager, LinkedIn Insight, and Bing Ads, supported by a cookie consent mechanism. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not evident in the provided data. The WHOIS data aligns well with the business claims, indicating legitimacy and stable domain ownership. However, the absence of explicit privacy and terms of service policies in the analyzed content suggests room for improvement in privacy compliance. Overall, the website is professional, trustworthy, and serves its target audience effectively.
- AAlbixon a.s.
albixonportal.com
Manufacturing · Czech Republic
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Albixon a.s. operates the albixonportal.com website as a business and partner portal focused on manufacturing and retail of enclosures, swimming pools, and related accessories. The site provides product catalogues, support resources, news, and partner login functionality, targeting business partners and customers in the pool and enclosure markets. The company appears to be a medium-sized manufacturer with an established online presence since 2015. Technically, the website is built on an ASP.NET WebForms platform using common libraries such as jQuery, Bootstrap, and Font Awesome, with Google Analytics for tracking. The site is moderately optimized for mobile and accessibility, with basic SEO practices in place. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service. Contact information is limited to a company email and social media links, with no phone or physical address explicitly listed. Overall, the website is professional and trustworthy but could improve in security and compliance documentation.
Empowered Hosted By Meg Ryanempoweredprogram.com
Media
74Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Empowered Hosted By Meg Ryan is a small media and educational content production company focused on creating and distributing educational television programming. Their content aims to inform and inspire audiences by highlighting critical global stories and innovations. The company distributes content across multiple platforms including public television, corporate image videos, and network content, leveraging partnerships with well-known networks. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and formal policies are lacking. The absence of WHOIS data raises concerns about domain registration legitimacy, but the professional website and active social media presence support business credibility. Overall, the company presents a trustworthy and professional front but should improve privacy compliance and domain registration transparency.
- WEI
wippeducationinstitute.org
Education
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.wippeducationinstitute.org represents an educational institute branded as WEI. The site is built on the Wix platform, indicating a moderate level of technical infrastructure suitable for small to medium-sized organizations. The content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Technically, the site uses standard Wix scripts and polyfills, with HTTPS enabled, but lacks advanced security headers and privacy policies. The absence of WHOIS data and registrant information reduces the trustworthiness and raises concerns about domain legitimacy. Overall, the site appears functional but lacks maturity in security, privacy compliance, and business transparency.
WBENCbuywomenowned.com
Retail · United States
61Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
BuyWomenOwned.com is a professionally maintained website operated by the Women’s Business Enterprise National Council (WBENC), a leading non-profit organization focused on certifying and advocating for women-owned businesses in the United States. The site serves as a platform to promote women entrepreneurs, provide certification services, and offer a curated directory of women-owned brands. It also features educational content such as podcasts and campaigns to raise awareness and support for women-owned businesses. The website targets consumers and businesses interested in supporting women entrepreneurs and fosters a community around this mission. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for interactive features. It integrates Google Analytics and Google Tag Manager for user tracking and marketing analytics. The site is hosted by GoDaddy and uses HTTPS with a valid SSL certificate, though DNSSEC is not enabled. The website is mobile optimized with good SEO practices and basic accessibility features. From a security perspective, the site follows standard best practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks advanced security headers and does not provide explicit incident response or vulnerability disclosure information. No security contact emails or security.txt files were found. The domain registration is consistent with the business claims, showing no suspicious patterns. Overall, the security posture is solid but could be improved with additional security headers and transparency around incident response. Overall, BuyWomenOwned.com is a trustworthy and credible platform with excellent content quality and a clear mission. It effectively supports women-owned businesses through certification, advocacy, and consumer engagement. Strategic improvements in security transparency and DNS security could further enhance its trustworthiness and resilience.
energetickesluzbyenergetickesluzby.sk
Energy · Slovakia
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Energetickesluzby.sk is a Slovak energy services provider specializing in flexibility of consumption, heating and cooling solutions, lighting, photovoltaics, electromobility, and other related energy services. The website targets a general Slovak audience interested in energy solutions. The business model appears to be service-oriented, focusing on energy commodities and related technologies. The company maintains a consistent brand presence with a professional website built on WordPress using Elementor and Jet plugins, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and third-party integrations such as Google Tag Manager and Cookiebot for analytics and consent management. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is functional, moderately optimized for mobile, and presents a trustworthy business image with no detected malicious or suspicious elements.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.kelkoo.co.uk is currently inaccessible due to a bot mitigation challenge page served by captcha-delivery.com, indicating the presence of a Web Application Firewall or similar security mechanism blocking direct content access. The WHOIS lookup for the domain failed with an error stating the domain name contains too many parts, suggesting that 'www.kelkoo.co.uk' is not a registered domain but rather a subdomain or misused domain name. Consequently, no registrar, creation, expiry, or registrant information is available. The website HTML content is minimal, containing only scripts and an iframe for bot verification, with no visible business, contact, or policy information. This severely limits the ability to analyze the site's business model, security posture, or compliance status. Overall, the site appears to be protected by aggressive bot mitigation, and the domain itself lacks proper registration data, which raises concerns about legitimacy and accessibility.
- NETIO Solutions s.r.o.
netio.cz
Technology · Czech Republic
54Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
NETIO Solutions s.r.o. is a Czech-based hosting service provider specializing in multihosting, virtual servers, domain registration, and SSL certificates. The company targets businesses and individuals seeking reliable and customizable hosting solutions. Their market position is that of a small but established player in the Czech hosting industry, offering tailored services with a focus on performance and ease of administration. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and the Nette Framework. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site is mobile-optimized with good navigation and professional design, though accessibility features could be improved. From a security perspective, the site uses HTTPS and has no visible exposed sensitive data. However, it lacks important security headers and does not publish a security policy or incident response information. The absence of WHOIS data reduces transparency and trust slightly, though the website content and contact information appear legitimate. Overall, the website is professional and trustworthy with moderate technical maturity and a solid business focus. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.