Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
66,701–66,750 of 99,067
Real Estate · Austria
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.kammerwest.at represents the Kammer der ZiviltechnikerInnen Arch+Ing for the regions of Tirol and Vorarlberg in Austria. It serves as a professional chamber and service organization for architects and civil engineers, providing member services, continuing education, contract information, job postings, and event announcements. The site targets professionals in civil engineering and architecture as well as clients and stakeholders in the region. Technically, the site is built on a modern Nuxt.js and Vue.js framework, featuring responsive design and moderate performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.
Amt der Stadt Dornbirndornbirn.at
Government · Austria
66Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.dornbirn.at serves as the official digital portal for the city administration of Dornbirn, Austria. It provides a broad range of municipal services and information including citizen assistance, political information, economic development, environmental programs, and cultural activities. The site targets residents and visitors, offering clear navigation and comprehensive content relevant to local governance and community life. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the site is built on TYPO3 CMS, a robust and widely used content management system for government and enterprise websites. The infrastructure supports modern web standards with responsive design and accessibility features, ensuring usability across devices. Performance is moderate, with no critical technical issues detected. SEO and metadata are well implemented, including JSON-LD structured data for enhanced search engine understanding. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies, which are recommended best practices. No vulnerability disclosures or incident response contacts are available, representing an area for improvement. Privacy compliance is partial, as no privacy or cookie policies were found, which may impact GDPR adherence. Overall, the website is trustworthy and professional, reflecting its role as a municipal government portal. The risk level is low, but strategic enhancements in privacy transparency and security policy publication would strengthen its compliance and security posture. Recommendations include adding privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.
TOP Online Casino CZ ᐉ Nejlepší České Online Kasino & Recenze 2025online-casinocz.com
Other
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website online-casinocz.com operates as an online casino affiliate or informational platform primarily targeting Czech-speaking users interested in online gambling. The site provides casino-related content, likely including reviews and guides, but lacks explicit business entity information or contact details. Technically, the site is built on WordPress with Bootstrap framework and uses Cloudflare for DNS and likely CDN services. The site demonstrates basic mobile optimization and moderate performance but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or policies, and no privacy or cookie policies are published, indicating compliance gaps. The domain is relatively new, registered in 2021, consistent with the business type. Overall, the site presents a basic, functional online presence with room for significant improvements in security, privacy, and business transparency.
Other · Czech Republic
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.onlinekasinocz.cz is a Czech-language online casino affiliate and informational portal targeting Czech players interested in licensed and international online casinos. It provides detailed reviews, ratings, bonus offers, legal information, and guides on how to play safely and legally in the Czech Republic. The site is well-structured, professionally designed, and mobile-optimized, offering a comprehensive resource for its niche audience. Technically, it uses modern web standards with responsive design and lazy loading for performance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. Privacy compliance is limited, with no clear privacy policy or terms of service pages found, though a cookie consent banner is present. WHOIS data is unavailable, which reduces trustworthiness but the site content and affiliate partnerships suggest a legitimate business model. Overall, the site scores well on content quality and user experience but should improve transparency and security practices.
- Šikulovi, s.r.o.
chatyachalupy-chatar.cz
Hospitality · Czech Republic
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Šikulovi, s.r.o. operates the website chatyachalupy-chatar.cz, a Czech travel agency specializing in the rental of cottages and chalets primarily within the Czech Republic and Slovakia. The company offers a broad portfolio of verified rental properties, including last-minute deals and special categories such as cottages with pools, by water, for fishermen, and seasonal offers. The website is well-structured, professionally designed, and provides comprehensive contact information and customer support channels. It accepts various benefit vouchers, enhancing its appeal to local customers. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Font Awesome, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and detailed security policies are absent. Overall, the business appears legitimate, stable, and focused on serving Czech-speaking tourists seeking vacation rentals.
- Chata internet marketing s.r.o.
chata.cz
Hospitality · Czech Republic
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Chata.cz is an established online platform specializing in the rental of cottages and chalets primarily in the Czech Republic and Slovakia. The company, operating under Chata internet marketing s.r.o., offers a user-friendly website with comprehensive listings, thematic catalogs, last-minute deals, and booking functionalities. The platform targets families and travelers seeking holiday accommodations in regional destinations, positioning itself as a trusted intermediary in the hospitality sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.
Ověřené chaty a chalupy v ČRchalupyachaty.cz
Hospitality · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Chalupyachaty.cz is a Czech Republic based online platform specializing in verified holiday rentals of cottages, chalets, and similar recreational properties. The website offers direct contact to property owners, ensuring updated availability and verified reviews, targeting families and groups seeking trustworthy vacation accommodations. Technically, the site uses a traditional web stack with jQuery, jQuery UI, Google Tag Manager for analytics, and MapLibre GL for map visualization, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks advanced security headers and uses outdated JavaScript libraries. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain is well-established since 2003, supporting business legitimacy. Strategic improvements in privacy compliance and security hardening are recommended.
JEDNOTA, spotřební družstvo České Budějovicelahudky.online
Retail · Czech Republic
66Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Vltavotýnské lahůdky, operated by JEDNOTA, spotřební družstvo České Budějovice, is a well-established regional food producer and retailer specializing in delicacies made from regional ingredients. The company leverages a Magento-based e-commerce platform to offer online ordering and product browsing, targeting consumers primarily in the South Bohemian region. The website reflects a professional and consistent brand image with clear business and contact information, supporting its market position as a trusted regional food brand. Technically, the website employs modern JavaScript libraries and Magento UI components, with integrations for Google Analytics and Google Tag Manager for marketing and analytics purposes. The site is mobile-optimized and includes a comprehensive cookie consent mechanism supporting GDPR compliance. Performance is moderate, with room for improvement in accessibility and security header implementation. From a security perspective, the site uses HTTPS and enforces cookie consent with opt-in/out capabilities. No critical vulnerabilities or exposed sensitive data were detected in the provided content. However, the absence of explicit security policies or incident response contacts suggests an opportunity to enhance transparency and readiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response documentation would further strengthen its security posture.
TERNOjednotacb.cz
Retail · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Jednota spotřební družstvo České Budějovice is a regional retail cooperative specializing in the supply of quality regional food products and operating retail stores under the brands Terno and Trefa. The website reflects a well-established business with a clear focus on serving members, employees, and the general public in the Czech Republic. The cooperative also supports e-commerce through an online shop for regional delicacies. Technically, the website is built on WordPress with modern plugins and frameworks, providing good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response visibility. The absence of WHOIS registration data limits domain trust verification, but the website content and business presence appear professional and trustworthy overall.
- Nguyen Huu Phuoc
formvalidation.io
Technology · Vietnam
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
FormValidation.io is a specialized software product offering a comprehensive JavaScript form validation library designed for developers and designers. The product supports a wide range of popular CSS and JavaScript frameworks, providing a flexible, plugin-based architecture with extensive localization and validator options. The company behind the product appears to be an individual or small entity based in Vietnam, with a domain registered since 2014, indicating a mature and stable offering. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content including customer testimonials and trusted client logos, positioning it well within its niche market.
Aluminium-Fenster-Institutalufenster.at
Manufacturing · Austria
66Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Aluminium-Fenster-Institut (AFI) operates as a non-profit Austrian industry platform dedicated to the aluminium and metal construction sector. It provides a 30-year established network and communication services, including licensing the Gemeinschaftsmarke ALU-FENSTER brand, organizing industry awards, and fostering cooperation among metal construction companies, architects, and related businesses. The website is professionally designed using WordPress with Bootstrap and FontAwesome, offering good mobile responsiveness and clear navigation. However, contact details are not prominently displayed on the main blog page, and no cookie consent mechanism is present, which may impact GDPR compliance. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Overall, the site is trustworthy, well-branded, and serves its niche audience effectively.
Verband Österreichischer Ziegelwerkeziegel.at
Manufacturing · Austria
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website ziegel.at represents the Verband Österreichischer Ziegelwerke, the Austrian Brick Manufacturers Association, serving as a national industry body advocating for the brick manufacturing sector. The site provides comprehensive information about brick products, technical details, sustainability, and industry news, targeting architects, builders, and stakeholders interested in sustainable construction materials. The business model is that of an industry association focused on information dissemination, advocacy, and member services. Technically, the site is built on Drupal 10 with a modern frontend stack including jQuery and various UI libraries, offering a professional and responsive user experience. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, with minor areas for improvement in security and privacy compliance.
Government · Latvia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.mil.lv is the official online presence of the Latvian National Armed Forces, providing authoritative information on military service, reserves, training, and national defense news. It serves primarily Latvian citizens interested in defense matters and military careers. The site is well-branded, consistent, and professionally maintained, reflecting its governmental status. Technically, it is built on Drupal 9, hosted on Azure, and employs modern analytics and tracking tools such as Matomo and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong, with a comprehensive cookie policy and consent mechanism. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are present. Overall, the site is trustworthy, professional, and serves its public service mission effectively.
Landeshauptstadt St. Pöltenst-poelten.at
Government · Austria
66Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Landeshauptstadt St. Pölten operates as the official municipal government portal for the capital city of Lower Austria, providing residents and visitors with comprehensive information on public services, city news, cultural events, and administrative resources. The website targets local citizens and tourists, positioning itself as a trusted source for city-related information and services. The business model is centered on public service delivery and community engagement, with a medium-sized organizational footprint typical of a city government entity. Technically, the website leverages Joomla CMS with modern JavaScript libraries such as jQuery and plugins like DearFlip for interactive content. Cookiebot is integrated for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. Hosting details are not explicitly identified but appear stable and secure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates a cookie consent mechanism, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the city government. Strategic recommendations include publishing a formal security policy, establishing incident response contact channels, and enhancing accessibility to further strengthen the site's security and user experience.
Swisspearlswisspearl.at
Manufacturing · Switzerland
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Swisspearl is a Swiss family-owned manufacturer specializing in fiber cement products for building envelopes, photovoltaic integration, interior design, and garden applications. The company emphasizes sustainability, quality, and innovative design solutions, targeting architects, builders, and construction professionals. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and tracking tools with consent management, ensuring moderate performance and good SEO. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and public security policies are recommended. The WHOIS data is incomplete, showing no registrar or creation date, which raises moderate concerns about domain transparency but does not detract from the professional business presentation. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.
Sto Ges.m.b.H.sto.at
Energy · Austria
60Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Sto Ges.m.b.H. is a leading technology company specializing in thermal insulation and building materials, offering a comprehensive range of facade paints, interior paints, facade plasters, ventilated facade systems, acoustic and floor coating systems, and concrete repair products. The company targets both B2B and B2C customers in the construction and renovation sectors, positioning itself as a technology leader in energy-efficient building solutions. The website reflects a mature digital presence built on Salesforce Experience Cloud, integrating advanced consent management and multiple payment and analytics platforms. Security posture is strong with HTTPS, strict content security policies, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting Sto's market position effectively.
Government · Austria
60Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website https://zt.at represents the Bundeskammer der Ziviltechniker:innen, the official Austrian chamber for civil engineers and architects. It serves as a professional platform providing information, member services, and resources for Ziviltechniker:innen across Austria. The site is well-structured, modern, and targets professionals and public entities involved in engineering and architecture. The presence of regional subdomains and comprehensive content indicates a mature and established organization with a long history dating back to 1860. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, employs privacy-conscious analytics via Matomo, and is optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers, though it lacks explicit cookie consent and published security policies. Overall, the site is trustworthy, professional, and compliant with GDPR, serving its audience effectively.
- proHolz Steiermark
proholz-stmk.at
Other · Austria
56Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
proHolz Steiermark is a regional association serving as the authoritative voice for forestry and wood industry in Styria, Austria. The organization focuses on public relations, education, consulting, and promotion of sustainable wood use. Their website is well-structured, content-rich, and targets professionals, educators, municipalities, and the general public interested in wood and forestry. Technically, the site is built on TYPO3 CMS with a moderate tech stack including jQuery and various UI libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.
- LINA community
lina.community
Education
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
LINA is a European architecture community platform founded in 2022 that connects emerging creatives with institutions in spatial practices. It offers membership, fellowship programs, architecture events, and educational resources. The platform targets architects, creatives, and institutions interested in European spatial practices. Technically, the website uses modern JavaScript libraries, integrates marketing and analytics tools such as Mailchimp, Google Analytics, and Facebook Pixel, and implements GDPR-compliant cookie consent mechanisms. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers and explicit security policies are absent. The domain is privacy protected but registered with a reputable registrar and shows no suspicious patterns. Overall, the website is professional, trustworthy, and well-positioned in its niche.
ARCHITEKTUR RAUMBURGENLANDarchitekturraumburgenland.at
Other · Austria
54Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
ARCHITEKTUR RAUMBURGENLAND is a small, regionally focused non-profit organization dedicated to promoting architectural culture and community development in Burgenland, Austria. The website serves as a platform for architectural documentation, workshops, events, and publications, targeting architects, local communities, and cultural enthusiasts. The site is built on the Plone CMS platform, utilizing modern JavaScript libraries and responsive design to provide a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security headers and policies could be improved. The domain registration is consistent with the organization's regional focus and history, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
Architektur Haus Kärntenarchitektur-kaernten.at
Other · Austria
51Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Architektur Haus Kärnten is a regional cultural institution in Austria dedicated to architecture and building culture. It provides a variety of services including exhibitions, events, publications, and an architecture library, targeting architects, cultural professionals, students, and the general public interested in architecture. The website is built on the Plone CMS platform and uses modern JavaScript libraries to deliver a responsive and user-friendly experience. It maintains a good security posture with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not present. The domain registration is consistent with the business profile, and the website demonstrates a professional and trustworthy online presence.
Architekturstiftung Österreicharchitekturstiftung.at
Other · Austria
52Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Architekturstiftung Österreich is a small Austrian foundation focused on promoting architecture and building culture through events, publications, and awards. The website is professionally designed using the Plone CMS and integrates modern web technologies including Google Analytics and Leaflet.js. It demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. The domain registration is consistent with the organization's Austrian identity and founding year, supporting legitimacy. Overall, the website serves its cultural and educational mission effectively with a trustworthy online presence.
Initiative Architekturinitiativearchitektur.at
Other · Austria
55Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Initiative Architektur is a well-established non-profit organization based in Salzburg, Austria, dedicated to promoting architectural culture and education. The website serves as a comprehensive platform for events, exhibitions, workshops, and publications related to architecture, targeting a broad audience including professionals, students, and children. The organization maintains strong partnerships with governmental and cultural institutions, enhancing its credibility and reach. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries and ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
Sveriges lantbruksuniversitetinterbull.org
Government · Sweden
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Interbull is a well-established permanent subcommittee of ICAR, hosted by Sveriges lantbruksuniversitet in Sweden, specializing in independent genetic and genomic evaluations for dairy and beef cattle. The organization provides a range of services including data exchange, breeding value calculations, and validation reports, serving a global audience of animal breeding professionals and researchers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its specialized audience. Technically, the site is built on the Web2py framework, utilizing modern JavaScript libraries and is hosted via Loopia Group. While the site is mobile-optimized and performs moderately well, there are opportunities to enhance accessibility and SEO further. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting high legitimacy and trustworthiness.
Other · Italy
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The European Federation Of Animal Science (EAAP) is a well-established non-profit organization founded in 2000, focused on promoting high-quality animal science research and facilitating collaboration among scientific communities, the livestock industry, and civil society groups interested in livestock production. The website serves as a hub for disseminating scientific publications, organizing events such as workshops and annual meetings, and supporting young scientists through its Young Club platform. EAAP maintains a strong presence in the European animal science sector with a medium-sized organizational footprint and a consistent brand identity. Technically, the website is built on WordPress 6.8.1 with Elementor as the primary page builder, supplemented by plugins like JetEngine and Matomo for analytics. The site demonstrates good mobile optimization, clear navigation, and moderate performance. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. However, some technical improvements such as enabling DNSSEC and adding advanced security headers could enhance the security posture. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, indicating domain transfer protection. No WAF or blocking mechanisms are detected, and no critical vulnerabilities or exposed sensitive data were found. However, the absence of a published privacy policy, terms of service, security policy, or incident response information represents compliance and transparency gaps. The domain registration details are consistent with the organization's identity and history, supporting the legitimacy of the website. Overall, the EAAP website is a credible and professional platform serving the animal science community with good technical and security foundations. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing security headers to improve trust and compliance. These steps will strengthen the organization's digital maturity and user confidence.
- DDelex spol. s r.o.
delex.cz
Media · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Delex spol. s r.o. is a Czech advertising and communication agency established in 1992, offering a wide range of marketing, advertising, graphic design, printing, event production, and publishing services primarily targeting businesses in the Plzeň region. The company positions itself as a full-service agency with experience and resources to meet diverse client needs. The website is built on WordPress with common plugins and technologies, providing a professional and user-friendly experience with clear contact information. Security posture is moderate with HTTPS enabled and anti-spam measures in place, but lacks advanced security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data limits domain legitimacy verification, which slightly reduces trustworthiness. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced privacy compliance and security practices.
SiteOne, s.r.o.siteone.cz
Technology · Czech Republic
69Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SiteOne, s.r.o. is a Czech-based digital agency specializing in design, development, and digital transformation services. The company positions itself as a stable partner for businesses seeking to translate their business goals into smart digital solutions. Their website demonstrates a professional and modern design, showcasing a strong portfolio of clients and testimonials, indicating a solid market presence in the technology sector. The company targets businesses looking for comprehensive digital solutions including web design, UX/UI, CMS and CRM integration, and technical consulting. Technically, the website employs modern JavaScript frameworks and tracking technologies such as Google Tag Manager, Google Analytics, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, the absence of WHOIS data raises questions about domain registration transparency. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy and security best practices. Security headers are partially observed, but explicit CSP headers and security.txt files are not detected. No vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS transparency, which should be addressed to enhance trustworthiness. Strategic recommendations include improving security header implementation, publishing incident response contacts, and adding vulnerability disclosure policies.
- Terno
trefasupermarket.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Trefa Supermarket is a Czech regional supermarket chain specializing in fresh and regional food products. The website presents a professional retail business with a customer loyalty program, store locator, and promotional offers. The digital infrastructure is based on WordPress with modern plugins for SEO, analytics, and cookie compliance, indicating a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data reduces transparency but does not negate the legitimacy suggested by the website content and branding. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.
- Terno
terno.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Terno is a Czech regional supermarket chain offering a wide selection of food products from local producers. The website positions itself as a retail platform with customer loyalty programs, recipes, and promotional offers. The digital infrastructure is based on WordPress with modern plugins for SEO, sliders, and analytics integration. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie and privacy policies with user consent mechanisms. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. WHOIS data is unavailable, which slightly impacts trust but the website content and policies indicate a legitimate business. Overall, the site serves its retail audience effectively with good user experience and marketing integration.
Bílé Stopy, s.r.o.bealify.com
Other · Czech Republic
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website bealify.com/en/nordic is operated by Bílé Stopy, s.r.o., a small Czech company founded in 2022, providing real-time information on Nordic skiing trails including grooming status and difficulty levels. The platform targets Nordic skiing enthusiasts and outdoor sports participants, offering a niche service focused on Nordic countries. Technically, the website is built using modern frameworks such as React and Next.js, with Mapbox GL JS for mapping functionalities, hosted on Websupport infrastructure. The site demonstrates good design quality, mobile optimization, and moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Ski areály a sjezdovky - lyžování Česko / ČR - mapaskiarealy-sjezdovky.cz
Other · Czech Republic
53Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.skiarealy-sjezdovky.cz is a specialized informational portal dedicated to ski resorts and ski slopes primarily in the Czech Republic and Slovakia. It offers a comprehensive catalog of over 400 ski areas ranging from small private slopes to large modern resorts, targeting winter sports enthusiasts and families. The site provides search functionality, detailed descriptions, and map-based visualizations to assist users in planning ski trips. Technically, the site employs a mix of older and modern web technologies including jQuery, Google Fonts, FontAwesome, and Mapy.cz API for mapping, alongside Google Adsense for monetization. The site is accessible without any web application firewall or security challenge, indicating open access to content. However, the absence of privacy and cookie policies, as well as lack of WHOIS domain registration data, presents compliance and trust challenges. Security headers are not detected, and SSL configuration details are unknown, suggesting room for improvement in security posture. Overall, the site is content-rich and professionally designed with good user experience but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.
Sporticussporticus.cz
Retail · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sporticus.cz is a Czech Republic-based specialized retail e-commerce website focusing on outdoor and cross-country skiing equipment. The company operates both online and a physical store in Prague, offering a wide range of products including skis, boots, poles, waxing equipment, functional clothing, GPS devices, and accessories for orienteering. The website targets sports enthusiasts, particularly those interested in skiing and outdoor activities, and provides expert advice and discounts for registered customers and sports clubs. Technically, the site uses modern JavaScript libraries such as jQuery, Select2, and Slick Carousel, along with lazy loading for images, indicating a moderate level of digital maturity. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Security-wise, the site enforces HTTPS and uses deferred script loading but lacks visible security headers like CSP or X-Frame-Options, which could improve its security posture. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable, which reduces trust in domain legitimacy, but the website content and contact information appear consistent with a legitimate small retail business. Overall, the site presents a good user experience with clear navigation and professional design but could improve privacy compliance and security headers.
Play Safe Casina Českoplaysafecz.com
Other · Czech Republic
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Play Safe Casina Česko operates as a specialized informational and affiliate platform targeting Czech Republic online casino players. The website offers comprehensive content including casino reviews, bonus offers, payment method guides, and legal information tailored for the Czech market. It positions itself as a trusted guide with expert editorial oversight and a focus on player safety and convenience. Technically, the site is built on WordPress, leveraging modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity, hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and a professional design with clear navigation. Security posture is strong with HTTPS, security headers, and secure form handling, though cookie consent mechanisms and explicit terms of service pages are missing. The domain is newly registered in 2024, consistent with the site's fresh content for 2025. Overall, the site is credible, secure, and well-positioned in its niche, though it could improve privacy compliance and transparency aspects.
- Pivní lázně Svijany
pivnilaznesvijany.cz
Hospitality · Czech Republic
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pivní lázně Svijany is a specialized wellness business offering beer spa treatments and relaxation services integrated within a historic brewery and hotel complex in the Czech Republic. The website presents a professional and well-structured digital presence targeting adults interested in unique wellness experiences involving beer products. The business model focuses on hospitality and niche wellness services, supported by clear contact information and customer testimonials, enhancing trust and credibility. Technically, the website employs a modern tech stack including JavaScript, jQuery, and Google Tag Manager, running on the Public4u CMS platform. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and lack of explicit security policies are areas for improvement. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Despite this, the website content and contact details appear legitimate and professional. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. No incident response or vulnerability disclosure information is present, indicating potential gaps in security readiness. Overall, the website scores well in content quality, privacy compliance, and business credibility but should address WHOIS transparency and enhance security headers to improve trust and security posture.
Cortex a.s.carecloud.cz
Technology · Czech Republic
69Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
CareCloud, developed by Cortex a.s., is a specialized Customer Data Platform and CRM solution targeting industries such as retail, pharma, hospitality, and entertainment. The platform offers integrated applications including customer 360 views, marketing automation, segmentation, loyalty engines, and AI-powered marketing tools. The website demonstrates a professional digital presence with good content quality, clear navigation, and compliance with GDPR and ISO 27001 standards. Technically, the site is built on WordPress with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Bing Ads. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and business credibility. Overall, the website is well-constructed and suitable for its B2B audience but would benefit from enhanced transparency and security disclosures.
- Měření online kampaní | Czechia | CerebroAd
cerebroad.com
—
64Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Other
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at https://i-ert.com/lander is currently a minimal placeholder or parking page with very limited content. It uses a React-based frontend and loads scripts from wsimg.com and Google AdSense for advertising. There is no visible business information, contact details, or policies such as privacy or cookie notices. The domain is registered with GoDaddy.com, LLC since 2020 and is not privacy protected, indicating a legitimate registration but no further business validation can be made from the site content. Technically, the site lacks security headers and there is no evidence of HTTPS enforcement in the provided data, which lowers its security posture. Advertising is present via Google AdSense, but no analytics or tracking beyond that is detected. Overall, the site appears to be underdeveloped or parked rather than an active business presence.
invelt s.r.o.eshopbmw.com
Retail · Czech Republic
61Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
invelt s.r.o. operates a specialized e-commerce platform focused on BMW lifestyle products including clothing, accessories, wheels, and automotive parts. The company targets BMW, MINI, and BMW Motorrad enthusiasts primarily in the Czech Republic, offering fast delivery, free shipping over a threshold, and personal pickup options. The website demonstrates a professional and consistent brand presence with clear contact and legal information, supported by active social media channels. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Owl Carousel, hosted on CDN infrastructure, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, raising concerns about domain registration legitimacy, but the website content and business information appear credible and professional. Overall, the site is well-positioned in its niche retail market with room for security and compliance improvements.
ALPINAalpina-configurator.com
Transportation · Germany
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The ALPINA Car Configurator website serves as a specialized tool for users to customize ALPINA vehicles, targeting car enthusiasts and potential buyers within the luxury automotive segment. The site leverages modern web technologies such as React and Meteor to deliver interactive configuration capabilities. However, the website lacks comprehensive privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Contact and security policy information are also absent, limiting transparency and user support avenues. Technically, the site shows moderate performance and basic mobile optimization but misses advanced SEO and accessibility features. Security posture is limited due to missing security headers and unclear SSL configuration. WHOIS data indicates privacy protection for the domain registration, which is common but reduces transparency. Overall, the site is functional but requires improvements in privacy compliance, security practices, and user support to enhance trust and regulatory adherence.
- MMINI
mini.cz
Transportation · Czech Republic
58Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
MINI Czech Republic operates as the official localized website for the MINI automotive brand, offering new and used vehicles, financing options, servicing, and accessories. The site is well-positioned within the automotive sector in the Czech market and benefits from its association with the BMW Group, enhancing its market credibility and reach. The website targets consumers interested in premium compact vehicles, including electric models, and provides comprehensive product information and digital services such as the MINI Connected app. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and Adobe's analytics and tag management tools. The site demonstrates strong digital maturity with fast performance, mobile optimization, and good accessibility features. Security is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit incident response and security policy disclosures are absent. Overall, the website presents a professional and trustworthy digital presence with clear business information, privacy compliance, and user-friendly navigation. The lack of WHOIS data is a minor concern but is mitigated by the brand's strong trust signals and official status. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website nikonimglib.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business information, contact details, or policies can be extracted or analyzed. The domain is well aged, registered since 2006 with a reputable registrar (1API GmbH), and uses Amazon AWS DNS servers indicating professional hosting infrastructure. However, the lack of accessible content and absence of security headers or privacy policies significantly limits the ability to assess the website's security posture or compliance status. The site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.
- Nikon
nikonrepair.eu
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website 'Nikon Service-System' serves as a repair status tracking portal for Nikon customers, allowing users to log in with credentials provided by dealers or Nikon Service Points. The site is branded with Nikon logos and links to official Nikon Europe privacy and terms pages, indicating an association with the Nikon brand. However, the domain www.nikonrepair.net lacks publicly available WHOIS registration data, raising questions about the domain's registration legitimacy. Technically, the site uses basic web technologies including outdated jQuery 1.7.2, which may expose it to known vulnerabilities. The site is multilingual and mobile-optimized to a basic degree, but lacks modern security headers and cookie consent mechanisms. Google Analytics is used for user tracking, but privacy compliance is minimal. Overall, the site provides a functional but basic user experience with moderate trustworthiness due to branding but diminished by missing WHOIS data and outdated technology.
- NNIKON CORPORATION
nikonimgsupport.com
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.nikonimgsupport.com serves as a worldwide support network portal for Nikon imaging products, providing regional support links and resources. It is branded consistently with Nikon Corporation, a global leader in imaging technology. The site targets Nikon product users globally, offering customer support and product information through localized portals. Technically, the site uses common JavaScript libraries such as jQuery and jQuery UI, with moderate performance and basic mobile optimization. Security posture is moderate with no visible security headers and unknown SSL configuration, and privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the website content and branding strongly suggest it is an official Nikon support site. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.
Mark Roberts Motion Controlmrmoco.com
Technology
75Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Mark Roberts Motion Control is a well-established company specializing in the design and manufacture of advanced motion control camera rigs and broadcast robotics solutions. With a claimed 50 years of industry experience, the company serves film, broadcast, and media production professionals worldwide, offering a broad portfolio including motion control rigs, broadcast solutions, volumetric capture, and product photography automation. The website reflects a strong market position with professional branding and comprehensive product information. Technically, the site is built on WordPress with modern plugins and tracking tools, delivering good performance and mobile optimization. Security posture is solid with HTTPS and some security plugins, though explicit security headers and policies are lacking. Privacy compliance is basic, with a cookie consent mechanism but no clear privacy or terms of service pages. The absence of WHOIS data is a notable concern, potentially indicating domain registration issues or privacy protection, which slightly impacts trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in privacy and security policies.
Deutsches Bienen-Journalbienenjournal.de
Media · Germany
56Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
Deutsches Bienen-Journal is a well-established German beekeeping magazine serving both hobbyist and professional beekeepers. It offers monthly print and digital editions, educational e-learning courses, special issues, and related products through an integrated e-commerce platform. The website demonstrates a mature digital infrastructure built on WordPress with modern plugins and SEO tools, ensuring good performance, accessibility, and user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in formal security policies and incident response disclosures. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR regulations.
Senner Verlag GmbHntz.de
Media · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.ntz.de is a well-established regional news portal serving the Nürtingen, Wendlingen, and surrounding areas in Germany. Operated by Senner Verlag GmbH, it provides comprehensive local news coverage including sports, economy, culture, and politics. The site offers digital subscriptions, e-paper access, and advertising services, positioning itself as a key regional media player. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and implements GDPR-compliant consent management, ensuring a good level of digital maturity. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and user-friendly with good content quality and navigation. The WHOIS data is limited due to DENIC privacy policies but consistent with the business profile. No adult or malicious content is detected, and the site maintains a moderate level of user tracking with appropriate privacy controls.
- DIE RHEINPFALZ
rheinpfalz.de
Media · Germany
70Medium
NIS2 22 · GDPR 60
NIS2 22 · GDPR 60
DIE RHEINPFALZ operates as a prominent regional news media outlet serving the Pfalz region in Germany, offering current news, background stories, and commentary. The website supports a subscription-based business model with integrated paywall technology and provides various services including newsletters, podcasts, and classified ads. The target audience is the general public interested in regional and national news. Technically, the site is built on the redFACT7 CMS and leverages a modern tech stack including Piano.io for subscriptions, Sourcepoint for consent management, and multiple advertising and analytics platforms. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS, employs standard security headers, and integrates GDPR-compliant consent mechanisms. However, explicit security policies and incident response contacts are not publicly available, which could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source of regional news.
University of Hohenheimuni-hohenheim.de
Education · Germany
69Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The University of Hohenheim is a well-established public educational institution based in Stuttgart, Germany, specializing in agricultural sciences, natural sciences, and business-related degree programs. The website serves as a comprehensive portal for prospective students, staff, and other stakeholders, offering detailed program information, research profiles, and campus life insights. The university holds a strong market position in agricultural research and bioeconomy, supported by a consistent and professional online presence. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and FontAwesome, and employs Matomo analytics configured with privacy considerations like Do Not Track and disabled cookies. The site is mobile-optimized, accessible, and SEO-friendly, hosted on academic infrastructure indicated by the belwue.de nameservers. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy and GDPR indicators, but no cookie consent mechanism is present. Overall, the site demonstrates a mature digital infrastructure with room for improvement in security transparency and privacy controls. The risk profile is low given the educational nature, absence of suspicious content, and legitimate domain registration. Strategic recommendations include enhancing security headers, publishing incident response information, and implementing cookie consent to improve compliance and trust.
Deutscher Berufs- und Erwerbsimkerbund e.V.berufsimker.de
Other · Germany
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutscher Berufs- und Erwerbsimkerbund e.V. (DBIB) is a German association founded in 1928 representing professional and hobby beekeepers. It advocates for the interests of beekeepers in political and economic matters, supports family-run beekeeping businesses, and promotes bee protection. The website serves as an information hub, marketplace, and networking platform for its approximately 1,100 members. Technically, the site is built on WordPress using Elementor and related plugins, offering a modern and responsive user experience with good SEO practices. Security posture is solid with HTTPS and spam protection, though security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and partner links enhancing credibility.
- Biosphärengebiet Schwäbische Alb e.V.
biosphaerengebiet-alb.de
Non-profit · Germany
50Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The website www.biosphaerengebiet-alb.de serves as the official information portal for the UNESCO Biosphere Reserve Schwäbische Alb, operated by the non-profit organization Biosphärengebiet Schwäbische Alb e.V. It provides comprehensive regional information, educational content, event announcements, and promotes sustainable tourism and environmental conservation. The site targets a broad audience including tourists, local residents, and environmental enthusiasts. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates privacy-compliant cookie consent mechanisms and Matomo analytics for user tracking. Security posture is good with HTTPS enforced and basic security best practices observed, though additional security headers and explicit security policies could enhance protection. The domain WHOIS data is limited but shows no suspicious patterns, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO.