Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
6,651–6,700 of 99,069
Government · France
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
achatpublic.com is a leading French platform specializing in services for public procurement. It serves over 22,000 public buyers and 125,000 suppliers, providing a comprehensive suite of tools covering sourcing, document drafting, buyer profiling, procedural management, act tracking, archiving, and electronic auctions. The platform also offers professional training tailored to public buyers and companies, positioning itself as a key player in the French public procurement ecosystem. Technically, the website is built on Drupal CMS and integrates modern analytics and consent management tools such as HubSpot, Google Tag Manager, Didomi, and Piano Analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data is a notable concern for domain transparency, though the professional presentation and GDPR compliance indicators suggest legitimate operations. Overall, the site presents a moderate to high level of trustworthiness with room for improvement in security transparency and contact information clarity.
Ville de Vandœuvrevandoeuvre.net
Government · France
54Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.vandoeuvre.fr serves as the official digital presence of the city of Vandœuvre in France, providing residents and visitors with access to city news, event agendas, and a variety of public services including online administrative procedures. The site is positioned as a municipal government portal with a medium-sized audience primarily localized to the city and surrounding region. The content is well-structured, professionally presented, and consistent with official city branding, targeting a general audience with information relevant to local governance and community engagement. Technically, the site is built on WordPress CMS, utilizing common plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The technology stack includes modern JavaScript libraries and UI frameworks, ensuring a good user experience with mobile responsiveness and moderate performance. However, some accessibility features could be improved, and security headers are not explicitly detected in the provided data. From a security standpoint, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, reflecting awareness of privacy regulations. No critical vulnerabilities or exposed sensitive data were identified in the HTML content. However, the absence of a published privacy policy, terms of service, and security incident contact information represents compliance and transparency gaps. The WHOIS data for the domain is unavailable, which reduces trust signals but may be due to AFNIC's query restrictions or privacy protections. Overall, the website demonstrates a solid foundation for municipal digital services with good content quality and technical implementation. Strategic improvements in security headers, privacy documentation, and WHOIS transparency would enhance trust and compliance. The risk profile is moderate with no immediate critical issues detected.
Bureau des Congrès de Nantes & St-Nazairebureaudescongres-nantes.fr
Hospitality · France
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Bureau des Congrès de Nantes & St-Nazaire website serves as a professional platform to assist in organizing various types of corporate events such as seminars, congresses, salons, team-building activities, and hybrid or virtual events in the Nantes and Saint-Nazaire regions. The site positions itself as a creative and eco-responsible destination, targeting event organizers and companies seeking unique and sustainable event solutions. The business model revolves around providing expert guidance and connecting clients with local service providers including venues, caterers, and agencies. Technically, the website is built on Drupal 9 CMS, utilizing modern frontend libraries like Swiper.js for interactive elements. The site demonstrates good mobile optimization and SEO practices, with clear navigation and professional design. However, some accessibility features appear basic, and performance is moderate. No explicit hosting provider or advanced platform details are evident. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and explicit privacy or cookie policies. No contact emails or phone numbers are directly found in the provided content, though a contact form is available. There is no evidence of vulnerability disclosures or incident response information. The absence of WHOIS data suggests privacy protection on domain registration, which is typical for business entities. Overall, the website is professional and trustworthy with a solid business presence, but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.
Reworld Media Connectreworldmediafactory.com
Media · France
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Reworld Media Connect is the advertising sales division of Reworld Media, a leading French thematic media group owning 80 proprietary media brands. The website targets advertisers and media buyers interested in thematic media advertising in France. The business model focuses on media representation and advertising sales. The website is built on WordPress with modern plugins and SEO optimizations, including Google Tag Manager and a GDPR-compliant cookie consent mechanism via Didomi. However, no explicit privacy policy or terms of service pages were detected, and no direct contact information was found in the HTML content. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional website presence, lowering trustworthiness. Security posture is basic with HTTPS enabled but lacking visible security headers or explicit security policies. Overall, the website is professional and functional but would benefit from improved transparency and security disclosures.
- UUNESCO Latvijas Nacionālā komisija
unesco.lv
Education · Latvia
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
UNESCO Latvijas Nacionālā komisija is the official national commission representing UNESCO in Latvia, focusing on education, science, culture, and information sectors. The organization facilitates UNESCO program implementation, promotes sustainable development goals, and engages various stakeholders including educational institutions, scientists, and the general public. The website reflects a strong institutional presence with comprehensive content, clear navigation, and consistent branding aligned with UNESCO standards. Technically, the site is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie policies and clear privacy statements. Overall, the website demonstrates high professionalism and trustworthiness suitable for a governmental/non-profit entity.
Government · Slovenia
58Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Razvojni center Murska Sobota is a regional development institution focused on fostering economic, social, and cultural growth in the Pomurje region of Slovenia. The organization provides project management, entrepreneurship support, and regional development services primarily targeting local businesses, entrepreneurs, and government stakeholders. The website reflects a professional and consistent brand presence with clear contact information and active engagement in regional projects and tenders. Technically, the site employs modern web technologies including jQuery, Slick Carousel, and accessibility tools, hosted by a reputable Slovenian provider. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its audience.
- Mmedhochzwei Verlag GmbH
radiologie-technik.de
Healthcare · Germany
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
RT Radiologie Technik + IT-Systeme is a specialized German trade publication focused on healthcare technology, specifically radiology and medical imaging IT systems. It serves healthcare professionals and decision makers by providing product catalogs, news, and industry insights. The website is professionally designed, uses a modern CMS (Contao), and integrates standard web technologies including jQuery and Google Analytics with privacy controls. The business is part of medhochzwei Verlag GmbH, a recognized publishing house in the healthcare sector. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and offers clear contact information.
- WWebsite in Überarbeitung
egberlin.de
Other · Germany
56Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website egberlin.de is currently under construction, presenting only a placeholder page in German indicating that the site is being revised. The only contact information available is a single email address (info@egberlin.de). There is no additional business information, no privacy or cookie policies, and no visible security or compliance documentation. The domain uses Schlundtech nameservers, a German hosting provider, consistent with the website's language and domain. The technical infrastructure appears minimal with no detectable CMS, analytics, or advanced technologies. Security posture is weak due to lack of HTTPS and security headers. Overall, the site lacks content, business credibility, and compliance features, resulting in a low trust and security score.
GoDaddy Operating Company, LLCfilmodeer.com
Technology · United States
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website filmodeer.com is a domain sales landing page operated by Afternic, a well-known domain marketplace owned by GoDaddy Operating Company, LLC. It offers the domain filmodeer.com for sale with options to buy now or request pricing information. The site targets individuals and businesses interested in acquiring premium domain names and positions itself as a trusted and secure platform for domain transactions. The presence of verified domain badges and a high Trustpilot rating reinforces its market credibility. Technically, the site is built using modern web technologies including React and Next.js, hosted on Akamai CDN infrastructure, and integrates Google reCAPTCHA v2 for form security. The website is well-optimized for performance, mobile responsiveness, and accessibility, providing a good user experience. Security posture is strong with HTTPS enforced, security headers present, and secure transaction messaging. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain marketplace platform demonstrates a mature digital infrastructure and trustworthy business model, with minor gaps in transparency around security governance.
Recenzije Filmova i Serijarecenzijefilmova.com
Media
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Recenzije Filmova i Serija is a small media website focused on providing film and series reviews, news, trailers, and recommendations primarily targeting movie and series enthusiasts. The site is built on WordPress and uses common web technologies such as PHP, JavaScript, and Google Fonts. The digital maturity is moderate with good SEO practices and mobile optimization, but lacks advanced security headers and privacy compliance features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trust and protect user data.
Rotten Tomatoesrottentomatoes.com
Media · United States
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Rotten Tomatoes is a leading entertainment media website specializing in movie and TV show reviews, trailers, showtimes, and ticketing information. Owned by Fandango Media, a subsidiary of NBCUniversal, it holds a prominent market position as a trusted source for quality measurement in the entertainment industry. The site targets a broad general audience interested in film and television content. Technically, the website employs a modern technology stack including JavaScript frameworks, JWPlayer for video content, Google Publisher Tags for advertising, and robust cookie consent management via OneTrust. Hosting and ad services are provided by NBCUniversal's infrastructure, ensuring reliable performance and scalability. Security-wise, the site enforces HTTPS, uses multiple security headers, and integrates ad verification and tracking services responsibly. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, no explicit security policy or incident response contact is publicly available. Overall, the site demonstrates a mature digital presence with excellent content quality, good technical implementation, and a solid security posture, making it a trustworthy platform for users and advertisers alike.
- MIKS GmbH
miks.co
Other · Germany
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
MIKS GmbH is a Hamburg-based company specializing in contemporary brand experience through spatial design, including commercial interiors, exhibition stands, retail environments, and roadshows. The company positions itself as an expert in creating immersive brand experiences that evoke emotions and tell stories through spatial communication. Their market focus is on businesses seeking innovative and impactful spatial branding solutions. Technically, the website is built with modern web standards using HTML5, CSS3, and JavaScript, and integrates Google Analytics for user tracking. The site is moderately optimized for performance and mobile devices, with a professional design and clear navigation. Security-wise, the site uses HTTPS and implements a cookie consent mechanism but lacks visible security headers and a published privacy policy, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and transparency.
- memo-media Verlags-GmbH
eventbranchenverzeichnis.de
Other · Germany
56Medium
NIS2 27 · GDPR 83
NIS2 27 · GDPR 83
The website www.eventbranchenverzeichnis.de operates as a comprehensive German-language event industry directory, offering access to over 20,000 contacts for event professionals including artists, service providers, and locations. It is managed by memo-media Verlags-GmbH, a recognized entity in the event media sector. The platform provides a user-friendly search interface, a free inquiry service, and additional event-related publications and newsletters, positioning itself as a key resource for event planning in Germany. Technically, the site employs modern frontend technologies such as Bootstrap 4.6, jQuery, Font Awesome, Swiper.js, and Typed.js, ensuring a responsive and visually appealing user experience. The use of HTTPS and cookie consent mechanisms reflects a commitment to privacy and security compliance. However, the absence of explicit security headers and incident response policies suggests areas for improvement in security maturity. From a security perspective, the site demonstrates good practices including encrypted connections and minimal exposure of sensitive data. The integration of Fathom Analytics indicates privacy-conscious user tracking. No critical vulnerabilities or malicious content were detected. The WHOIS data aligns with the business profile, showing consistent registration without privacy protection, enhancing trust. Overall, the website presents a professional, trustworthy, and GDPR-compliant platform with solid business credibility and technical implementation. Strategic enhancements in security headers and published security policies would further strengthen its posture and user confidence.
- Gesprächsstoff GmbH
gespraechsstoff-kaffee.com
Hospitality · Germany
65Medium
NIS2 10 · GDPR 58
NIS2 10 · GDPR 58
Gesprächsstoff GmbH operates a specialized coffee catering service focused on providing high-quality coffee experiences for events, trade fairs, and private celebrations across Germany. Their offerings include barista services, coffee bars, and innovative coffee printing technology, positioning them as a niche premium provider in the hospitality sector. The company emphasizes full-service event support, catering to clients with varying budgets while maintaining quality and professionalism. The website reflects a mature digital presence built on WordPress and WooCommerce, featuring clear navigation, professional design, and integrated contact and newsletter forms. Social media integration and detailed FAQs enhance user engagement and trust. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with visible policies and GDPR adherence. Overall, Gesprächsstoff GmbH presents a credible, professional, and trustworthy online presence suitable for its business model and target market.
everso | Live music experienceeversomusic.com
Media · Germany
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
everso is a German-based live music experience provider offering an exclusive artist team of over 80 performers for successful events. The website targets event organizers seeking professional live music entertainment. The business model revolves around artist booking services, positioning itself as a specialized media and entertainment service provider. The website is built on WordPress with the Divi theme and uses modern plugins for multilingual support and SEO optimization. The technical infrastructure is moderately optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website suggests a legitimate business. Overall, the site is trustworthy but would benefit from enhanced transparency and security practices.
- EEBNER MEDIA GROUP GmbH & Co. KG
event-partner.de
Media · Germany
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
EVENT PARTNER is a well-established German media brand specializing in the event industry, providing news, trends, and educational content such as webinars and whitepapers. The website targets event professionals and marketers, offering subscription-based and single-issue sales alongside digital downloads. Technically, the site is built on WordPress with modern integrations including Usercentrics for consent management and Google Tag Manager for analytics and advertising. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.
360ties - photography | fashion | event360ties.de
Media · Germany
50Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
360ties is a small German media company specializing in premium event photography and content production, leveraging innovative bullet time photo booth technology. Their services target event organizers, corporate clients, and marketing agencies, offering unique photo booth experiences and content creation. The website is built on WordPress with modern SEO and multilingual capabilities, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, though lacking some security headers and formal policies. Overall, the site is professional and trustworthy, but could improve compliance by adding privacy and terms of service pages.
- WFB Wirtschaftsförderung Bremen GmbH
wfb-bremen.de
Government · Germany
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
WFB Wirtschaftsförderung Bremen GmbH is a regional economic development agency responsible for promoting and strengthening the business location of Bremen, Germany. The organization provides a comprehensive range of services including business consulting, funding support, real estate and land management, marketing, tourism, and startup assistance. The website reflects a professional and well-structured digital presence targeting businesses, investors, and stakeholders interested in Bremen's economic growth. Technically, the site uses a modern tech stack including Matomo analytics, Bootstrap, and jQuery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and secure forms, though lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, supporting the organization's mission effectively.
Cineplexxcineplexx.at
Media · Austria
70Medium
NIS2 7 · GDPR 83
NIS2 7 · GDPR 83
Cineplexx is a prominent cinema chain operating primarily in Austria, offering movie screenings and related entertainment services to a broad audience. The website reflects a professional and modern digital presence, leveraging React technology and integrating comprehensive cookie consent mechanisms to comply with GDPR requirements. The business targets general moviegoers and positions itself as a leading player in the Austrian cinema market. Technically, the site employs modern frontend frameworks and integrates third-party analytics and advertising platforms such as Google Analytics, Facebook, Pinterest, and TikTok, indicating a mature digital marketing strategy. Security-wise, the website enforces HTTPS, implements strong security headers, and provides a detailed privacy policy, although it lacks visible terms of service and explicit security policy pages. Overall, the site demonstrates good security hygiene and privacy compliance but could improve transparency by publishing additional security and incident response information.
- Mein E-Handwerk Anmeldung
mein-ehandwerk.de
Other · Germany
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website 'Mein E-Handwerk Anmeldung' serves as a login portal for a German craft or trades platform, leveraging Microsoft Azure B2C for user authentication. It provides secure OAuth2.0 authorization code flow for user sign-in, targeting professionals within the German craft sector. The platform's technical infrastructure is modern, utilizing Microsoft cloud services and standard web technologies such as jQuery and Handlebars.js. While the login interface is professionally designed and mobile-optimized, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security practices are generally sound with secure form inputs and CSRF protections, but the absence of HTTP security headers and explicit security policies reduces the overall security posture. The domain is a subdomain of Microsoft's B2C login service, indicating legitimate use, though WHOIS data is unavailable due to the nature of the subdomain. Overall, the site is functional and secure for authentication purposes but would benefit from enhanced privacy disclosures and security transparency.
HŽ Infrastruktura d.o.o.hzinfra.hr
Transportation · Croatia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
HŽ Infrastruktura d.o.o. is a Croatian state-owned enterprise responsible for organizing, regulating, maintaining, and constructing railway infrastructure, which is a public good. The website serves as an informational portal primarily targeting Croatian railway users and stakeholders. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS presumably enabled but lacking visible security headers and explicit security policies. Privacy compliance is limited, with no privacy or terms of service pages detected, though a cookie consent mechanism is present. Overall, the domain registration data aligns well with the business entity, supporting legitimacy. Strategic improvements in privacy transparency, security headers, and contact information visibility are recommended to enhance trust and compliance.
CC Realcc-real.com
Real Estate · Austria
65Medium
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
CC Real is a small Austrian real estate investment and asset management company with a well-established online presence since 2007. The website presents a professional image with clear business descriptions and contact information, targeting investors and clients interested in real estate assets. The technical infrastructure is based on WordPress with modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital setup. Analytics and marketing tools are implemented with GDPR compliance in mind, including cookie consent mechanisms and privacy policies. Security posture is good with HTTPS enabled and domain registration protections, though some security headers could be improved. Overall, the site is trustworthy and professionally maintained, with no critical vulnerabilities or suspicious indicators detected.
Comp-On AG, HR Solutionscomp-on.ch
Other · Switzerland
64Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Comp-On AG is a Swiss-based company specializing in HR compensation solutions, targeting businesses seeking practical and understandable approaches to remuneration questions. The company operates a professional website built on WordPress with the Divi theme, integrating modern SEO and analytics tools such as Yoast SEO and Google Analytics. The website content is well-structured and relevant to its niche market, reflecting a small-sized enterprise with a clear business focus. Technically, the site demonstrates moderate performance and good mobile optimization, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but missing a formal privacy policy and terms of service. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is trustworthy and professional but would benefit from improved privacy and security documentation to enhance compliance and user trust.
Jonatan Heymanheynote.com
Technology
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Heynote is a specialized software tool designed as a scratchpad for developers, enabling efficient note-taking with features such as block-based text buffers, syntax highlighting, and calculator functionality. The product is open source, with releases hosted on GitHub, targeting developers and power users seeking productivity enhancements. The website presents a professional and consistent brand image, with clear navigation and relevant content focused on its niche audience. Technically, the site uses modern web technologies including JavaScript and CSS, and is hosted with Cloudflare DNS and GitHub for releases, ensuring good performance and availability. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms, despite usage of Google Analytics. Business credibility is supported by open source transparency and domain longevity. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.
CoolHotels.incoolhotels.in
Hospitality
54Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
CoolHotels.in is a boutique online platform specializing in discovering and booking unique, luxurious, and curated hotels worldwide. Founded in 2021, the company targets travelers seeking distinctive hotel experiences through expert-curated guides and simple online booking links. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies including Google Fonts, Leaflet for maps, and Google Analytics for tracking, with a custom CMS or framework. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and formal security policies are absent. Privacy compliance is well addressed with a clear privacy and cookie policy. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and no suspicious indicators.
- Coop Pank
cooppank.ee
Finance · Estonia
68Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Coop Pank is a well-established Estonian bank offering a comprehensive range of retail and business banking services including loans, savings, insurance, and payment solutions. The bank positions itself as a local partner for customers both in urban and rural areas, emphasizing innovative and customer-centric financial products. The website reflects a mature digital presence with modern technologies such as React and Next.js, and integrates multimedia content and social media channels effectively. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit cookie consent mechanisms and published security policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives and regulatory requirements.
wimaggucwimagguc.com
Media
67Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The website www.wimagguc.com is a personal newsletter hosted on the Substack platform, focusing on publishing articles and essays under the brand 'wimagguc'. The publication was launched approximately 9 months ago and targets a general audience interested in thoughtful media content. The business model revolves around subscription-based content delivery via Substack, with no direct company contact information or extensive business infrastructure visible on the site. Technically, the site leverages Substack's hosting and CDN services, uses HTTPS with good SSL configuration, and integrates third-party services like Sentry for error tracking and Calendly for scheduling. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance trust. Privacy compliance is good, with clear links to Substack's privacy and terms pages and a cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences, but the lack of WHOIS data and direct contact information limits full business credibility assessment.
- KKADOS s.r.o.
kados.cz
Retail · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
KADOS s.r.o. is a small Czech company specializing in retail sales of construction materials and CNC machining services. The company operates a physical store in Hladké Životice near Nový Jičín and offers a broad range of building products including bagged mixtures, masonry materials, waterproofing, roofing, concrete products, drywall, insulation, and more. Their business model combines retail sales with CNC machining services such as drilling, milling, and turning. The website is professionally designed using WordPress with WooCommerce and the Avada theme, providing a good user experience and clear navigation. Technical infrastructure is modern and includes integration with Google Maps for location display. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and contact information support legitimacy. Overall, the site is safe, professional, and targeted at construction professionals and customers in the Czech Republic.
Zemspol Studénka a. s.zemspol-studenka.cz
Energy · Czech Republic
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Zemspol Studénka a.s. is a medium-sized Czech company specializing in agricultural production and energy generation through biogas plants. The company operates biogas stations, produces animal feed, cultivates oilseeds, cereals, and medicinal plants, and is a leading milk supplier in its region. The website reflects a professional presence with clear business descriptions and contact information, targeting stakeholders in agriculture and energy sectors. Technically, the website is built on WordPress using the Avada theme and Yoast SEO Premium plugin, indicating a modern CMS infrastructure with SEO considerations. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Hosting and domain registration are consistent and long-standing, supporting business credibility. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
- TTJ Niva Hladké Životice
tjniva.cz
Other · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TJ Niva Hladké Životice is an amateur football club based in Severní Morava, Czech Republic, with a long-standing tradition dating back to 1950. The website serves as a community hub providing match results, team rosters, photo galleries, and news updates. It targets local football enthusiasts and community members. The business model is non-profit and community-focused, emphasizing local sports engagement. Technically, the site is built on WordPress using the Avada theme, enhanced with Yoast SEO for search optimization and Google Tag Manager for analytics. The site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy for its purpose but could improve compliance and security practices.
- PPostNord International
postnord.com
Transportation · Sweden
74Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
PostNord International is a leading logistics and postal service provider focused on delivering borderless e-commerce solutions globally. The company offers customizable logistics services that enable clients to expand their markets worldwide, targeting e-commerce businesses and retailers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a global audience. The technical infrastructure leverages modern technologies including Episerver CMS, Azure hosting, and advanced analytics tools such as Google Analytics and Microsoft Application Insights, demonstrating a commitment to performance monitoring and user experience optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and business presence indicate a reputable and established enterprise with a focus on compliance and user privacy.
- Abicart.se
abicart.se
E-commerce · Sweden
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Abicart.se is a Swedish e-commerce platform operated by Textalk AB, offering a comprehensive SaaS solution for businesses to start and manage online shops. The platform provides modern payment integrations, logistics support, multilingual capabilities, and AI-powered features such as automatic product description generation and translations. Positioned as one of Sweden's leading e-commerce platforms, Abicart targets entrepreneurs and businesses seeking affordable and scalable online store solutions. Technically, the website employs modern web technologies including React and Bootstrap, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and a public security policy are absent. WHOIS data for the www subdomain is unavailable, but the main domain and business legitimacy are supported by consistent branding and contact information. Overall, the site demonstrates a professional, trustworthy, and user-friendly e-commerce service with strong market positioning in Sweden and the Nordic region.
Technology
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.textalk.com appears to represent a business focused on e-commerce and digital publishing solutions, referencing services such as E-paper with Prenly, PDF and EPUB accessibility remediation, and the Abicart e-commerce platform. However, the actual website content is minimal and mostly placeholder, indicating either a blocked site or incomplete deployment. The WHOIS data for the domain www.textalk.com is missing, showing no registration record, which raises concerns about the domain's legitimacy or active status. The technical infrastructure includes modern JavaScript modules and a cookie consent mechanism via Cookiebot, but lacks visible security headers or detailed SSL information. Privacy compliance is minimal with no visible privacy or terms of service pages, though cookie consent is implemented. Overall, the security posture is weak due to missing WHOIS data and minimal content, resulting in a low trust score and recommendations to improve domain registration transparency, security headers, and privacy policies.
- Advisible
advisible.com
Technology
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Advisible operates as a modern online advertising platform providing cloud-based digital advertising and marketing technology tailored for publishers, advertisers, and agencies. Their key offerings include a Development Kit for ad integration, native advertising solutions, content display services, and source hosting for ad code. The business model is pay-as-you-go with monthly billing and no upfront fees, positioning them as a developer-friendly and scalable solution in the advertising technology sector. The website is professionally designed with good content quality and clear navigation, targeting a specialized audience in the digital advertising space. Technically, the website employs modern web technologies such as Javascript and Google Fonts, with SVG graphics for branding. The site is mobile optimized and SEO friendly, though no CMS or specific hosting provider information is evident. Performance is moderate with room for improvement in accessibility and security headers. The cookie consent mechanism is implemented, indicating attention to privacy compliance, and privacy and cookie policies are present and accessible. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a notable concern, as it reduces transparency and trustworthiness despite the professional appearance of the website. No direct company contact emails or phone numbers were found, with contact primarily via web form. Overall, the website presents a credible and professional front for a niche advertising technology business but would benefit from enhanced security practices, clearer business contact information, and resolution of WHOIS data transparency to improve trust and compliance posture.
- KKuratorium Deutsche Altershilfe
nachbarschaftshilfe.nrw
Government · Germany
55Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Nachbarschaftshilfe NRW is a regional initiative under the Kuratorium Deutsche Altershilfe, focused on promoting neighborhood help for people with care needs in North Rhine-Westphalia, Germany. The website serves as an information hub offering educational courses, materials, and guidance to volunteers and care recipients. It is positioned as a trusted non-profit supported by government entities and regional offices. Technically, the site is built on WordPress with modern plugins and themes, ensuring good accessibility, mobile optimization, and SEO. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS and no evident vulnerabilities, though DNSSEC is not enabled and some security headers are missing. Overall, the site is professional, trustworthy, and well-aligned with its mission.
- Taquiri GmbH & Co. KG
taquiri.de
Technology · Germany
52Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Taquiri GmbH & Co. KG is a well-established German internet agency specializing in WordPress website development, online shops, SEO, advertising, and web hosting services. With over 25 years of experience, the company targets businesses seeking professional digital presence and marketing solutions. The website reflects a mature digital infrastructure built on WordPress with modern frameworks like Bootstrap and privacy-respecting analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The company demonstrates strong business credibility through consistent branding, comprehensive contact information, and excellent customer reviews. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
- Mmedhochzwei Verlag GmbH
ktm-journal.de
Healthcare · Germany
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
KTM Journal, operated by medhochzwei Verlag GmbH, is a leading German-language specialist publication focused on healthcare technology and management. It targets healthcare professionals and decision-makers in hospitals across the DACH region, providing credible, practical information on trends, innovations, and technologies in healthcare. The publication offers print and online editions, newsletters, events, and advertising services, positioning itself as a trusted media source in the healthcare sector. Technically, the website is built on the Contao Open Source CMS platform, utilizing jQuery and Google Tag Manager with privacy-conscious configurations. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices such as HTTPS enforcement and cookie consent mechanisms are implemented, though explicit security headers and incident response policies are not publicly documented. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent banner with granular user controls. The WHOIS data aligns consistently with the website's business claims, reinforcing legitimacy. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in explicit security policy disclosures and terms of service availability. Strategic recommendations include enhancing security header implementation, publishing a dedicated security policy and incident response contacts, and considering a vulnerability disclosure framework to further strengthen trust and compliance.
SOGOpluginsmarket.com
Technology
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sogo WordPress Plugins Market is a small technology business specializing in the development and sale of WordPress plugins. The website offers a range of plugins including calendar widgets, author recent posts, accessibility tools, and premium support services. The target audience primarily consists of WordPress site owners and developers seeking specialized plugin solutions. The business operates an e-commerce model leveraging the Easy Digital Downloads platform for sales and distribution. The domain age and registration details align well with the business history, supporting legitimacy and trustworthiness. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and several third-party integrations such as Google Analytics, Google reCAPTCHA, and Tawk.to live chat. The site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility plugin and UI controls. Performance is moderate with room for improvement in SEO and technical optimization. From a security perspective, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks explicit security headers and DNSSEC. There is no published security policy or incident response information, and no vulnerability disclosure mechanism is present. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is limited to contact forms without direct emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.
Government
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.ilo.org represents the International Labour Organization, a United Nations specialized agency focused on labour standards and employment issues globally. The organization operates at an enterprise scale with a long history dating back to 1919 and serves governments, employers, workers, and researchers worldwide. However, the current website content is inaccessible due to a Cloudflare Turnstile CAPTCHA challenge, preventing direct analysis of the site's content, metadata, and policies. The technical infrastructure includes Cloudflare protection but no further technology stack details are visible. Security posture is limited to the presence of Cloudflare WAF, with no additional security headers or SSL configuration details available. WHOIS data is unavailable due to a malformed response, but the domain is consistent with a legitimate UN agency. Overall, the site is safe with no adult or explicit content, but the WAF challenge limits comprehensive evaluation.
- Gütegemeinschaft Anwerbung und Vermittlung von Pflegekräften aus dem Ausland e.V.
fair-recruitment-nurse.com
Healthcare · Germany
72Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
The website represents a small healthcare-focused organization dedicated to promoting ethical recruitment of international nursing professionals to Germany. It operates by certifying recruitment agencies with a recognized quality seal, ensuring fair, transparent, and responsible hiring practices. The target audience is internationally educated nurses seeking employment in Germany. The website is built on a modern WordPress infrastructure using Oxygen Builder and Alpine.js, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.
Other · Croatia
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website rosesdesigneroutlet.hr is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of business, contact, or policy information. The domain is registered in Croatia since 2015 with a reputable registrar, indicating a legitimate registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site uses Cloudflare's security services, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site scores low on AI evaluation due to inaccessibility, with recommendations to allow content access for full analysis.
Avenue Mallavenuemall.hr
Retail · Croatia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Avenue Mall is a well-established retail shopping center located in Zagreb, Croatia, offering a wide range of retail stores, food and beverage outlets, and entertainment options. The website reflects a medium-sized business with a strong local market presence and a focus on customer engagement through promotions, events, and a loyalty program. Technically, the site employs modern web technologies including jQuery UI, Slick Slider, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is professional, user-friendly, and trustworthy, supporting the business's retail and hospitality operations effectively.
KING CROSSking-cross.hr
Retail · Croatia
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KING CROSS is a retail shopping center website based in Croatia, offering a variety of products related to sports, home, family, and leisure. The website targets a general audience looking for convenient and affordable shopping options. The site is built on WordPress CMS with SEO optimizations via Yoast and uses modern UI components such as Swiper.js. The technical infrastructure appears moderate in performance and mobile optimization, with HTTPS enabled ensuring basic transport security. However, the absence of visible security headers and explicit privacy and cookie policies indicates room for improvement in security and compliance. No contact information or incident response details are publicly available, which may affect user trust and compliance with GDPR transparency requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.
Arena Center Zagreb d.o.o.arenacentar.hr
Retail · Croatia
68Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Arena Centar is a well-established large retail shopping center located in Croatia, operated by Arena Center Zagreb d.o.o. and owned by the parent company NEPI Rockcastle. The website provides comprehensive information about the shopping center's services, including retail stores, dining, entertainment, parking, and customer engagement via a mobile app and gift cards. The site targets a broad audience including local residents, families, and visitors seeking shopping and leisure experiences. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager, Facebook Pixel, and TikTok Pixel. Hosting and DNS are managed by reputable providers, ensuring stable performance and security. Security posture is good with HTTPS enforced and consent mechanisms for cookies, though explicit security policies and incident response details are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a positive user experience and strong business credibility.
- W
Other
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website ww16.westgate-shopping.com is a parked domain page primarily serving as a placeholder to advertise the domain westgate-shopping.com for sale via the Sedo domain parking service. The site contains minimal content focused on domain resale, with no active business operations, contact information, or company details presented. The technical infrastructure relies on basic HTML, CSS, and JavaScript with embedded Google Ads and Sedo parking scripts. There is no evidence of HTTPS or advanced security configurations, and the privacy policy is a generic Sedo parking policy in German. The domain WHOIS data is unavailable, indicating the domain may be unregistered or privacy protected, which reduces trustworthiness. Overall, the site functions solely as a domain marketplace listing with limited digital maturity and minimal security posture.
Gransy d.o.o.jeftinije.hr
E-commerce · Croatia
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Jeftinije.hr is a Croatian price comparison website operated by Gransy d.o.o., established in 2016. The platform offers comprehensive online price comparisons, shopping guides, and product reviews targeted at Croatian consumers seeking the best deals. It holds a strong market position as a leading price comparison portal in Croatia, leveraging partnerships with regional sites across Central and Eastern Europe. Technically, the website employs modern JavaScript libraries, Cloudflare DNS, and integrates Google Tag Manager and DoubleClick for advertising and analytics. The site is mobile-optimized with good SEO practices but lacks explicit privacy and terms of service documentation in the accessible content. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and incident response information are missing. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.
Other
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website nabava.net is currently inaccessible due to a Cloudflare Turnstile security challenge page that requires human verification before access. This prevents any direct analysis of the website's content, business information, or security posture beyond the presence of the WAF. The domain is registered since 2001 with COREhub, S.R.L., indicating a long-standing registration, but no further registrant details or business information are available. The website uses Cloudflare for security and hosting, with HTTPS enabled and no DNSSEC configured. No privacy, cookie, or terms of service policies are visible, nor any contact information or forms. Overall, the site appears to be protected by Cloudflare but lacks publicly accessible content for detailed analysis.
- Katalozi.net / Svi katalozi na jednom mjestu
katalozi.net
Retail · Croatia
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Katalozi.net is a Croatian retail catalog aggregation website established in 2012, providing users with access to various promotional catalogs and offers from multiple retailers. The site leverages WordPress CMS with Yoast SEO for content management and optimization, and monetizes through Google Adsense advertising. The technical infrastructure includes Cloudflare DNS and hosting via GoDaddy.com, LLC. The website is well-structured with good navigation and content relevance, targeting general retail consumers in Croatia and neighboring regions. Security posture is moderate with HTTPS enabled and domain registration locks, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. No direct contact or incident response information is provided, limiting transparency. Overall, the site is functional and trustworthy for its business purpose but requires improvements in privacy and security disclosures.
- CCOREhub, S.R.L.
gorivo.com
Transportation · Croatia
51Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Gorivo.com operates as a regional ride-sharing platform primarily serving Croatia and neighboring countries. It facilitates peer-to-peer transportation by allowing users to offer and request rides, focusing on routes within Croatia and nearby European nations. The platform has been active since 2003, indicating a mature presence in its niche market. The website's business model centers on connecting drivers and passengers, providing a cost-effective and community-driven transportation alternative. Its market position is niche but stable, targeting individuals seeking carpooling options in the region. Technically, the website is built on ASP.NET WebForms with supporting libraries such as jQuery and Bootstrap, reflecting a legacy but functional technology stack. The site includes standard web fonts, UI components, and Google Adsense for monetization. Performance and mobile optimization are basic, with room for modernization. The site employs cookie consent mechanisms and basic privacy compliance features, though lacks advanced SEO and accessibility optimizations. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, which could be a gap in compliance and trust. Advertising practices involve multiple ad networks and tracking vendors, indicating moderate user tracking. The overall security posture is average, with recommendations to enhance headers, enable DNSSEC, and publish security policies. Overall, Gorivo.com presents a functional but basic digital presence with moderate trustworthiness and compliance. Strategic improvements in security, privacy transparency, and technical modernization would enhance its risk profile and user confidence.
- Naslovnica | Croatia Airlines
croatiaairlines.hr
—
75Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88