Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
67,101–67,150 of 99,067
Kankaanpään kaupunkivisitkankaanpaa.fi
Government · Finland
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Visit Kankaanpää is the official tourism website for the city of Kankaanpää, Finland, providing comprehensive information on local attractions, events, accommodation, and cultural activities. The site targets tourists, families, and local residents interested in exploring the city's offerings. It serves as a municipal portal to promote tourism and community engagement, positioning itself as a trusted source for visitors and locals alike. The business model is focused on municipal tourism promotion and information dissemination.
Kankaanpään kaupunkibusinesskankaanpaa.fi
Government · Finland
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Business Kankaanpää is a municipal business portal operated by the city of Kankaanpää, Finland, focused on supporting local economic development, business growth, and investment attraction. The website provides comprehensive information about services, investment opportunities, industrial parks, and community events, targeting businesses and investors interested in the region. The site maintains a consistent brand aligned with official city identity and integrates multiple social media channels to engage its audience. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO for search optimization, Slider Revolution for dynamic content, and GDPR compliance tools. The site is mobile-optimized and uses structured data to enhance search engine visibility. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a municipal entity with consistent registration details. Overall, the website presents a professional and trustworthy digital presence for the city’s business services, with good privacy compliance and moderate security posture. Strategic improvements in security headers and accessibility could further enhance its resilience and user experience.
Fitnesstukkufitnesstukku.fi
E-commerce · Finland
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Fitnesstukku.fi is a leading Finnish e-commerce platform specializing in fitness supplements, workout apparel, and training equipment. It holds a strong market position as the largest selection provider in Finland, targeting health-conscious consumers and fitness enthusiasts. The website offers comprehensive product categories, free delivery over a threshold, price guarantees, and customer-friendly return policies, enhancing its competitive edge. Technically, the site is built on Salesforce Commerce Cloud, leveraging modern analytics, marketing, and customer engagement tools such as Google Tag Manager, reCAPTCHA, and Dixa Messenger. The platform demonstrates good digital maturity with responsive design and structured navigation. Security posture is robust with HTTPS, security headers, and bot protection, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is evident with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for its target market.
Live Arena Sports ABsuomenvahvin.tv
Media
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Suomen Vahvin TV is a niche media streaming website focused on broadcasting Finnish strongman competitions. The site is branded under Live Arena Sports AB and targets fans and followers of strongman sports in Finland. The business model centers on providing live and on-demand sports content, positioning itself as a specialized sports media outlet. The website uses modern web technologies such as the Ionic framework and service workers to deliver content efficiently across devices. However, the content is minimal and primarily serves as a platform for streaming events without extensive additional information or user engagement features. Security posture is basic; no security headers or privacy policies are present, and WHOIS data is unavailable, indicating privacy protection or registry restrictions. This lack of transparency and absence of contact information limits trust and compliance with privacy regulations. Overall, the site is functional and professionally branded but requires improvements in security, privacy compliance, and business transparency to enhance user trust and regulatory adherence.
5.11 Tactical Finland511tactical.fi
Retail · Finland
67Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
5.11 Tactical Finland operates as a specialized retail e-commerce platform and physical store in Helsinki, focusing on tactical clothing and equipment for professionals such as military, law enforcement, emergency responders, and outdoor enthusiasts. The company is positioned as the European flagship store for the 5.11 Tactical brand in Finland, offering a comprehensive product range and leveraging a mature domain established in 2005. The business model centers on direct-to-consumer sales via a Shopify-powered online store complemented by a physical retail presence. Technically, the website is built on the Shopify platform using a modern Enterprise theme, integrating multiple third-party services including Judge.me for customer reviews, Blockify for fraud prevention, and Omnisend for marketing automation. The site demonstrates good performance, mobile optimization, and accessibility, with a well-structured SEO setup and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration, employs fraud detection mechanisms, and uses CAPTCHA protections on forms. While explicit security headers are not directly visible in the HTML, Shopify's platform typically enforces standard security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. Strategic recommendations include publishing a dedicated security policy, adding a vulnerability disclosure or security.txt file, and enhancing incident response contact visibility to further strengthen trust and compliance.
- Fonecta Oy
palvelee.fi
Technology · Finland
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Kotisivukone is a Finnish website building service operated by Fonecta Oy, offering easy-to-use tools for creating websites and e-commerce stores targeted at businesses, associations, and private users. The service includes turnkey website packages and domain registration, positioning itself as a cost-effective and reliable solution in the Finnish market. The website demonstrates professional design and clear navigation, supported by a solid technical infrastructure including modern JavaScript libraries and analytics tools. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and clear links to privacy and terms of service documents. Security posture is strong with HTTPS enforcement and secure form handling, though some advanced security headers could be added for further hardening. Overall, the domain registration and business information are consistent and trustworthy, reflecting a mature and legitimate online presence.
Suomen Painonnostoliitto SPNL rypainonnosto.fi
Other · Finland
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Suomen Painonnostoliitto SPNL ry is the Finnish national weightlifting federation, established in 2004, serving as the governing body for weightlifting and related strength sports in Finland. The organization provides services including competition management, coaching education, anti-doping compliance, licensing, and community building. The website reflects a well-structured and content-rich platform targeting athletes, coaches, clubs, and enthusiasts within Finland. It maintains a consistent brand identity and offers comprehensive information about events, rules, and news.
DATABOX, s.r.o.zivegdpr.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ŽivéGDPR.cz is a Czech Republic based small business operated by DATABOX, s.r.o., specializing in providing comprehensive GDPR compliance documentation and support services. The website offers a complete package of GDPR-related documents, manuals, templates, and expert consultation services targeted at companies seeking to implement GDPR requirements efficiently. The business leverages a professional online presence with clear contact information and a focus on GDPR education and compliance support. Technically, the website uses modern web technologies including Bootstrap and jQuery, with Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and well-structured, providing a good user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks some advanced security headers and formal incident response disclosures. Overall, the domain registration aligns well with the business claims, showing legitimacy and consistency. The website is safe, professional, and trustworthy with no signs of malicious or adult content.
- Databox s.r.o.
skolanadlani.cz
Education · Czech Republic
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ŠkolaNaDlani.cz is an educational communication platform operated by Databox s.r.o., founded in 2013 and based in the Czech Republic. The service facilitates easy and efficient communication between schools and families, targeting teachers, parents, and students. It integrates with popular platforms such as Google Classroom and Microsoft Teams, enhancing its utility in modern educational environments. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience.
E4YOU spol. s r.o.e4you.cz
Technology · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
E4YOU spol. s r.o. is a Czech technology company established in 2000 specializing in developing mobile marketing systems, CRM intranets and extranets, school intranets, web design, SEO, hosting, and technical support services. The company targets businesses requiring comprehensive marketing and IT solutions, offering tailored software and hosting services. Their market position is supported by a long domain history and a client base including reputable international brands. Technically, the website uses modern JavaScript libraries, Google Analytics with consent management via Cookiebot, and demonstrates good mobile optimization and SEO practices. However, security posture is moderate due to lack of visible security headers and published security policies. Privacy compliance is partial with cookie consent but no privacy or terms policies found. Overall, the site is professional and trustworthy with clear contact information and business legitimacy. Strategic improvements in security headers, privacy documentation, and incident response disclosures are recommended.
- Recovery - psychoterapie
psychoterapie-recovery.cz
Healthcare · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.psychoterapie-recovery.cz presents a professional mental health service provider specializing in psychotherapy, addiction counseling, and support for various psychological crises. The site targets individuals seeking mental health assistance in the Czech Republic, offering detailed therapist profiles and clear service descriptions. Technically, the site is built using modern frameworks such as Next.js and React, with good mobile optimization and a clean design. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS domain registration data present concerns regarding compliance and trustworthiness. Overall, the site is functional and informative but would benefit from enhanced security and privacy measures to improve user trust and regulatory compliance.
Zdravotnický deníkzdravotnickydenik.cz
Media · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Zdravotnický deník is a Czech online media publication specializing in healthcare news, policy analysis, and interviews targeting healthcare professionals, policymakers, and the general public interested in healthcare topics. The website offers a rich content experience including articles and video media, supported by a professional design and consistent branding. The business operates primarily in the media and healthcare sectors within the Czech Republic, positioning itself as a leading source of healthcare news in the region. Technically, the website is built on WordPress 6.8.1 with modern SEO tools such as Yoast SEO Premium and uses Google Tag Manager and Adsense for analytics and advertising. The site is mobile-optimized with good performance and basic accessibility features. Privacy compliance is robust, featuring a comprehensive privacy policy and a cookie consent mechanism with granular user controls. From a security perspective, the site enforces HTTPS and employs cookie consent best practices but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy verification and trustworthiness. Overall, the site presents a professional and trustworthy front for healthcare news, but improvements in domain transparency, security headers, and explicit policy disclosures would enhance its security posture and business credibility.
Sport a kultura Hlučínsak-hlucin.cz
Hospitality · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Sport a kultura Hlučín is a community-oriented website providing comprehensive information about sports and cultural events in the town of Hlučín, Czech Republic. It serves residents and visitors by offering event calendars, details about recreational areas, and online reservation services for sports facilities. The website is well-structured, mobile-optimized, and integrates modern technologies such as jQuery, FullCalendar, and Mapy.cz API to enhance user experience. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR standards. However, the absence of WHOIS data and lack of explicit company contact details reduce transparency and business credibility. Security posture is solid with HTTPS and standard security headers, but could be improved with additional policies and disclosures.
Sdružení obcí Hlučínskahlucinsko.eu
Government · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sdružení obcí Hlučínska is a regional association of municipalities in the Hlučínsko area of the Czech Republic. The website serves as an official informational portal providing details about the member municipalities, regional projects, cultural events, tourism, and local services. It targets residents, tourists, and local government stakeholders, positioning itself as a key regional non-profit entity promoting community collaboration and regional development. The business model is focused on information dissemination and regional promotion rather than commercial activities. Technically, the website uses a combination of jQuery, Bootstrap, Swiper.js, and other JavaScript libraries to provide a responsive and interactive user experience. The CMS appears to be a custom or proprietary system. The site is mobile-optimized and moderately performant, with basic SEO and accessibility features. HTTPS is enforced, but security headers are not explicitly detected in the provided data. From a security perspective, the site maintains a good posture with HTTPS and cookie consent mechanisms in place. However, it lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is privacy-protected, which is common and justified for this type of regional non-profit entity. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy, professionally maintained, and serves its regional informational purpose well. Strategic recommendations include enhancing security headers, publishing clear security policies, and improving SEO and accessibility further to strengthen digital maturity and trust.
Muzeum Hlučínskamuzeum-hlucinska.cz
Education · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Muzeum Hlučínska is a regional museum based in the Czech Republic focused on cultural exhibitions and educational programs related to the Hlučínsko region. The website presents a professional and content-rich platform showcasing permanent and temporary exhibitions, educational offerings for schools, and virtual tours. The institution targets a broad audience including local visitors, students, researchers, and tourists. Technically, the website employs modern JavaScript libraries and fonts, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's professional presentation and partner affiliations support its legitimacy.
Muzeum Hlučínskahlucinske-pamatky.cz
Other · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website 'Hlučínské památky' serves as an informational platform dedicated to the cultural and historical monuments of the town of Hlučín in the Czech Republic. It provides detailed listings and descriptions of sacral and secular monuments, targeting a general audience interested in local heritage. The site is managed by 'Muzeum Hlučínska' and features a professional design with good navigation and mobile optimization. Technically, the site uses jQuery libraries, Google Analytics, and Tag Manager, hosted on a CDN provided by arsy.cz. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or terms of service pages. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content appears trustworthy and professionally maintained. Overall, the site is safe for general audiences and provides valuable cultural information but would benefit from enhanced security and compliance features.
SANANIM Charity Services s.r.o.cafe-therapy.cz
Hospitality · Czech Republic
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Café Therapy is a well-established social enterprise restaurant based in Prague, Czech Republic, founded in 2005. It operates as a WISE social firm providing employment and social reintegration for vulnerable populations, including people recovering from addiction and former prisoners. The business offers a modern kitchen with healthy food options, event hosting facilities, and catering services. The website reflects a consistent brand and mission, targeting socially conscious customers and event organizers. Technically, the site is built on WordPress with modern libraries and Cloudflare DNS, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks security headers and formal privacy/cookie policies, which are compliance gaps. Overall, the site is trustworthy and professional but could improve privacy compliance and security best practices.
Other
53Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at rtn.ge is currently inaccessible, displaying only a JSON error message indicating an unauthorized token. This suggests the site is either under development, restricted, or improperly configured. The lack of any visible content, metadata, or structured data prevents meaningful analysis of the business or its services. The WHOIS data is suspicious due to a domain creation date set in the future (January 28, 2025), which undermines trust and legitimacy. No contact information, privacy policies, or security measures are evident from the available data. Technically, the site appears minimal with no detectable technologies, scripts, or frameworks. Hosting is provided by Linode as indicated by the name servers. The absence of HTTPS or security headers further reduces the security posture. The website lacks mobile optimization, accessibility features, and SEO best practices. From a security perspective, the site shows critical weaknesses including inaccessible content, no visible security policies, and suspicious domain registration data. These factors combined result in a very low security score and high risk. Without access to actual content or business information, the overall risk assessment is high, and strategic recommendations focus on establishing proper site access, implementing HTTPS, and publishing essential compliance and security documentation.
- Vorlíček
vorlicek-okna.cz
Manufacturing · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vorlíček is a Czech-based manufacturer and retailer specializing in high-quality plastic windows, doors, and related building products such as shading systems, ventilation, pergolas, and garage doors. The company emphasizes custom solutions tailored to energy savings and comfortable living, with a strong focus on innovation and customer satisfaction. The website reflects a mature business with over 25 years of experience and a solid regional presence in the Czech Republic. Technically, the website uses modern JavaScript libraries and tracking tools, including jQuery, OwlCarousel, Microsoft Clarity, and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms but lacks advanced security headers and incident response contact information. The absence of WHOIS data limits domain trust verification, but the website content and business indicators suggest legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
TRIDO, s.r.o.trido.cz
Manufacturing · Czech Republic
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TRIDO, s.r.o. is a Czech manufacturer specializing in custom garage doors, automatic doors, and industrial door solutions, serving both residential and commercial clients. With over 27 years of market presence, TRIDO positions itself as a reliable and innovative company offering tailored products and professional installation and service. The company maintains a broad network of authorized distributors and service partners across the Czech Republic and Slovakia, enhancing its market reach and customer support capabilities. The website reflects a mature digital presence with comprehensive product information, customer service options, and multimedia content to engage visitors effectively. Technically, the website is built on Drupal 10, leveraging Bootstrap 3.4.5 for responsive design and integrating modern web technologies such as Google Fonts, YouTube embeds, and consent management via Cookiebot. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. From a security and compliance perspective, the site includes privacy and cookie policies with GDPR compliance indicators and provides clear contact information for customer support and service. However, the absence of WHOIS data and lack of explicit security policy or vulnerability disclosure pages slightly reduce trustworthiness. No critical vulnerabilities or adult content were detected, and the site maintains a professional and safe environment for its users. Overall, TRIDO's website is a well-structured, content-rich platform supporting its manufacturing business with a good balance of technical sophistication and user experience. Strategic improvements in security headers and domain registration transparency would further enhance its credibility and security posture.
- Silike Keramika s.r.o.
samotky.cz
Manufacturing · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
šamotky.cz is a Czech e-commerce website specializing in the sale of high-quality refractory chamotte products such as bricks, plates, and wedges for stoves, fireplaces, and ovens. The business operates as a direct manufacturer, Silike Keramika s.r.o., with production facilities located in Děčín, Czech Republic. The website targets both professional and home users seeking durable and heat-resistant materials. The platform is built on the Shoptet e-commerce system and integrates common web technologies including jQuery, Google Tag Manager, and Facebook SDK for marketing and analytics purposes. The site demonstrates compliance with GDPR through a comprehensive privacy policy and cookie consent mechanism.
Tescomatescoma.at
Retail · Austria
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Tescoma is a well-established European kitchenware brand operating a professional e-commerce platform targeting consumers in Austria and neighboring countries. The website offers a wide range of kitchen utensils, household helpers, and related products, supported by a customer loyalty program and warranty services. The technical infrastructure is modern, leveraging React and Next.js frameworks, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the website presents a trustworthy and professional online retail presence.
Tescoma Spatescoma.it
Retail · Italy
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Tescoma Spa operates a professional e-commerce and retail website focused on kitchen utensils, table accessories, and home appliances. The company is well-established in Italy with a broad product portfolio and a loyalty program to engage customers. The website is designed with modern technologies such as Next.js and integrates analytics and marketing tools like Google Tag Manager and Microsoft Clarity. Security is robust with HTTPS and standard security headers implemented, although explicit security policies and incident response information are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business model and market position.
TESCOMA s.r.o.tescoma.uk
Retail · United Kingdom
72Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
TESCOMA s.r.o. operates a well-established e-commerce and retail website specializing in kitchen tools, accessories, and home appliances. The company targets consumers primarily in the UK and Italy, offering a broad range of products with an emphasis on reliability and modern design. The website features rich content including product categories, recipes, and company information, supporting a strong brand presence. Technically, the site is built on modern frameworks such as Next.js and the ShopSys e-commerce platform, with integrations for analytics and marketing tools like Google Tag Manager and Microsoft Clarity. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies. The domain WHOIS data is unavailable due to registration constraints, but the website content and branding indicate a legitimate business. Overall, TESCOMA presents a professional and trustworthy online presence with room for enhanced security transparency.
- TESCOMA s.r.o.
tescoma.com
Retail · Czech Republic
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
TESCOMA s.r.o. operates a multilingual website offering a comprehensive range of kitchen stainless steel cookware, utensils, and accessories for cooking and table use. The company targets a broad general audience interested in kitchenware products and maintains a consistent brand presence across multiple country-specific domains. The business model is retail-focused, serving customers primarily in the Czech Republic and other European markets. The website content is professionally presented with good design and navigation, although mobile optimization and accessibility are basic. Technically, the website uses standard HTML, CSS, and JavaScript technologies, including an outdated version of jQuery (1.4.4) and Google Analytics for tracking. The site lacks modern security headers and does not provide visible privacy or cookie policies, which impacts compliance and user trust. Performance is moderate, and SEO optimization is good based on meta tags and multilingual support. From a security perspective, the site uses Google Analytics asynchronously but lacks visible HTTPS confirmation and security headers in the provided data. The WHOIS lookup failed to return registrar or registrant information, raising concerns about domain registration legitimacy. No contact information or incident response details are provided, limiting transparency and trust. Overall, the security posture is moderate but requires improvements in SSL configuration, security headers, and compliance documentation. The overall risk assessment indicates a functional and professional retail website with some technical and compliance gaps. Strategic recommendations include updating JavaScript libraries, implementing HTTPS and security headers, publishing privacy and cookie policies, and improving transparency with contact and incident response information to enhance trust and security posture.
—
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
—
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Tescomatescoma.de
Retail · Germany
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Tescoma is a well-established kitchenware and household products brand operating a professional e-commerce platform targeting German-speaking customers. The website offers a broad product range with over 2500 items, including kitchen utensils, cookware, and DIY sets. The company emphasizes quality, warranty, and direct manufacturer sales, supported by a customer loyalty program (Tescoma Club). Technically, the site uses modern frameworks like Next.js and integrates analytics and personalization tools such as Google Tag Manager, Microsoft Clarity, and Persoo. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, though some security headers are not explicitly detected. Privacy and cookie policies are present and GDPR compliant, but explicit security policies and incident response contacts are not found. Overall, the site is trustworthy and professionally managed, with no signs of malicious content or suspicious domain registration patterns.
Tescomatescoma.hu
Retail · Hungary
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Tescoma.hu is the Hungarian localized e-commerce website for Tescoma, a leading Czech kitchenware brand. The site offers a wide range of original kitchen tools for cooking, baking, and table setting, targeting general consumers interested in quality kitchen products. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern web technologies including Next.js and Google Tag Manager, hosted on a CDN for fast performance. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Privacy and cookie policies are present and GDPR compliant. Contact information includes a clear phone number and contact form. The domain registration details align well with the business claims, indicating high legitimacy. Overall, the site is a trustworthy and professional retail platform for kitchenware products in Hungary.
TESCOMAtescoma.pl
Retail · Poland
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
TESCOMA is a well-established retail brand specializing in kitchenware and cooking accessories, operating a professional e-commerce platform targeting consumers in Poland and multiple European countries. The website demonstrates a mature digital presence with modern technologies such as Next.js, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and product information. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. No WHOIS data is available from the .pl registry, likely due to privacy protection, but the website's consistency and multi-country presence support its legitimacy. Overall, TESCOMA's website is professional and trustworthy, though improvements in privacy compliance and security best practices are recommended.
Citadelicitadeli.com
Retail · Georgia
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Citadeli is a Georgian-based company specializing in the retail and distribution of high-quality construction and renovation materials, as well as construction equipment. The company operates an e-commerce platform that facilitates easy online purchasing for construction professionals and retail customers. The website is well-structured with a comprehensive product catalog and multi-language support, targeting primarily the Georgian market. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components and integrates marketing and analytics tools like Facebook Pixel and Google Analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses domain registration locks to protect the domain, but lacks DNSSEC and visible security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security policy transparency.
- Vorlíček Okna a dveře
oknavorlicek.cz
Manufacturing · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vorlíček Okna a dveře is a Czech-based manufacturer and supplier specializing in high-quality plastic and aluminum windows, doors, shading technology, ventilation systems, pergolas, and garage doors. Established in 1997, the company serves residential and commercial building markets primarily within the Czech Republic. Their business model integrates manufacturing, direct sales, consultation, installation, and after-sales service, positioning them as a reputable medium-sized player with a strong regional footprint. The website reflects a professional and consistent brand image with detailed product categorization and customer references, supporting their market credibility. Technically, the website employs modern JavaScript libraries such as jQuery and OwlCarousel, alongside analytics and tracking tools including Google Tag Manager, Microsoft Clarity, and Adform. The site is mobile-optimized with good SEO practices and clear navigation, though some accessibility features appear basic. Performance is moderate, with room for optimization. The absence of explicit CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, no explicit privacy policy or terms of service were found, and security headers are not detected, which could expose the site to certain risks. The WHOIS data for the domain is unavailable, raising concerns about domain registration transparency and trustworthiness. No incident response or vulnerability disclosure information is present, suggesting limited formal security governance. Overall, the website is functional, professional, and business-focused but would benefit from enhanced transparency in domain registration, explicit privacy and security policies, and improved security header implementation. These improvements would strengthen trust and compliance posture, reducing potential risks and enhancing customer confidence.
SILIKE keramika s.r.o.silike.cz
Manufacturing · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SILIKE keramika s.r.o. is a Czech manufacturer specializing in fireproof ceramic products for industrial and hobby use, with a production facility located in Děčín. The company offers a wide range of products including shamotte bricks, plates, and other stove-building materials, complemented by technical consulting, installation, and training services. Their market position is supported by a long-standing tradition dating back to 1889, with a modern business foundation established in 1992. The website reflects a professional digital presence with comprehensive content, clear navigation, and multilingual support.
PETA | Gemeinsam für Tierrechtegemeinsam-fuer-tierrechte.de
—
62Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
- TTierquälerei erkennen und melden: Jetzt Tieren helfen!
tierquaelerei.de
—
62Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
- TTerezia Company
terezia.sk
Healthcare · Slovakia
59Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Terezia.sk is an e-commerce website specializing in dietary supplements made from mushrooms and plants, targeting the Slovak and Czech markets. The business operates in the healthcare sector, focusing on natural health products. The website demonstrates a consistent branding approach and provides a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Technically, the site uses modern tools such as Google Tag Manager, Cookiebot for cookie consent, and integrates third-party analytics and marketing services. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and publishing security policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. The site collects extensive user data via cookies and tracking pixels, with a comprehensive cookie consent mechanism in place.
Zážitkovky Albi – Přijďte se bavitalbizazitkovky.cz
E-commerce · Czech Republic
60Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website 'Zážitkovky Albi' appears to be an e-commerce platform focused on selling experience-based gifts or entertainment activities, targeting a Czech audience. The site is built on WordPress and uses popular plugins such as LayerSlider and Slider Revolution, with Cookiebot managing cookie consent. The technical infrastructure is modern and supports HTTPS with a good SSL configuration. However, the absence of WHOIS data and registrant information raises concerns about domain legitimacy. The website lacks explicit privacy policy and terms of service pages, and no direct contact information is found, which impacts business credibility and privacy compliance. Security posture is moderate with HTTPS and cookie consent but missing security headers and incident response details.
jfnetwork GmbHjfnet.de
Technology · Germany
52Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
jfnetwork GmbH is a medium-sized German IT service provider specializing in intelligent process and IT solutions, consulting, integrated SaaS solutions, and e-commerce/database applications primarily for the automotive and fashion industries. With over 25 years of experience and a strong project portfolio, the company positions itself as a trusted partner in these sectors. The website reflects a professional and consistent brand image with clear contact information and business focus. Technically, the site is built on WordPress with modern libraries such as jQuery, Bootstrap, and Swiper.js, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, supporting the company's market position.
Education · Czech Republic
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Elektrotechnický zkušební ústav, s. p. operates the EZÚ EDU website, providing specialized electrotechnical training and workshops primarily in the Czech Republic. The company positions itself as the leading authority in electrotechnical testing and education, offering courses on cybersecurity, product market introduction, and quality management. Their target audience includes professionals and organizations in the electrotechnical sector seeking expert training. Technically, the website is built on a modern WordPress CMS with WooCommerce and Elementor, supported by Cloudflare DNS and REG-WEDOS registrar. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of marketing and analytics tools such as Google Tag Manager and SmartEmailing. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-maintained, with no signs of blocking or malicious content.
- WWhat is my IP number - my IP address - MyIpNumber.com
myipnumber.com
Technology
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MyIpNumber.com is a small informational website dedicated to providing users with their IP address and educational content about IP numbers, DNS, NAT, and related internet technologies. The site targets general internet users seeking to understand their IP address and networking concepts. It operates primarily through advertising revenue, leveraging Google Adsense and social sharing tools like AddThis. The website content is straightforward, focusing on technical explanations and IP address display without commercial transactions or user accounts. Technically, the site uses basic HTML, CSS, and JavaScript with embedded Google Adsense scripts for monetization. The design and navigation are functional but basic, with limited mobile optimization and accessibility features. No modern frameworks or CMS platforms are detected. Performance is moderate, with no explicit indicators of advanced hosting or CDN usage. From a security perspective, the site lacks HTTPS/SSL information in the provided data, and no security headers are detected. There are no privacy or cookie policies, nor contact information for security or incident response. The absence of WHOIS data raises concerns about domain registration legitimacy and transparency. No vulnerabilities or malicious content are evident, but the security posture is weak due to missing best practices. Overall, the site is safe for general audiences, providing educational content without adult or explicit material. However, the lack of privacy compliance, security measures, and contact information limits trustworthiness and business credibility. Strategic improvements in security, privacy policies, and domain registration transparency are recommended to enhance user trust and compliance.
DLC Websitesrandomnumbergenerator.com
Technology
57Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
RandomNumberGenerator.com is a niche utility website operated by DLC Websites since 1999, providing free random number generation tools primarily for lottery and gaming purposes. The site offers customizable random number tables and educational content about randomness. It is monetized through Google AdSense advertising and maintains a simple, functional design with basic mobile responsiveness. The website does not collect personal data or provide contact information, privacy policies, or terms of service, which limits its compliance posture. Technically, it uses standard web technologies including HTML, CSS, JavaScript, and Google Ads scripts. Security posture is moderate with no visible security headers or advanced protections, and the random number generation relies on JavaScript's Math.random(), which is not cryptographically secure but sufficient for casual use. Overall, the site is legitimate and consistent with its domain registration data but would benefit from improved privacy and security practices.
- DDomains By Proxy, LLC
gatsby.tech
Technology · United States
55Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at gatsby.tech currently presents only minimal content, consisting solely of a placeholder message 'OK'. There is no metadata, structured data, or business information available on the site. The domain is registered through Go Daddy with privacy protection by Domains By Proxy, LLC, and hosted on Amazon AWS infrastructure. This suggests a legitimate technical setup but lacks transparency and business identity on the website itself. The absence of privacy policies, cookie consent mechanisms, terms of service, or contact information indicates a very low level of digital maturity and compliance. Security posture cannot be fully assessed due to lack of data, but no WAF or blocking mechanisms were detected. Overall, the site appears to be either under development or abandoned, providing no meaningful information to visitors or customers.
- Happy Returns
happyreturns.com
E-commerce · United States
73Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Happy Returns is a medium-sized e-commerce technology and logistics company specializing in returns software and reverse logistics solutions. Backed by UPS, it operates an extensive network of 8,000 Return Bar® locations, targeting e-commerce merchants and shoppers to streamline the returns process. The website reflects a professional and consistent brand presence with clear messaging and a focus on customer loyalty and operational efficiency. Technically, the site is built on Squarespace with integrations including HubSpot and Google Tag Manager, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but improvements are recommended in DNSSEC and HSTS implementation. Privacy compliance is partial, with a cookie consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the site is trustworthy and business credible, though compliance gaps should be addressed.
eSports.cz, s.r.o.sportytv.cz
Media · Czech Republic
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
SPORTY TV is a Czech-based media platform operated by eSports.cz, s.r.o., offering free live streaming of various sports including volleyball, basketball, hockey, and more. The website targets general sports fans in the Czech Republic and provides additional content such as articles and TV program schedules. The business model focuses on free access to sports content, likely monetized through advertising and partnerships. Technically, the site uses modern web standards with responsive design and integrates Google Analytics for user tracking. Hosting is provided by websupport.cz, a known Czech hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Privacy compliance is basic but present, with clear privacy and cookie policies. The domain registration is transparent and consistent with the business identity, supporting legitimacy. Overall, the website is professional, safe, and well-structured, though improvements in security policies and contact transparency could enhance trust.
Bizzdesign BVbizzdesign-academy.com
Education · Netherlands
55Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Bizzdesign Academy is a professional online training platform specializing in enterprise architecture and related software solutions such as Horizzon, Alfabet, and MEGA HOPEX. The platform offers a variety of free and paid eLearning courses, certifications, and role-based tutorials targeting enterprise users and professionals seeking to enhance their skills in Bizzdesign products. The website is built on the Moodle LMS platform with a modern tech stack including YUI, RequireJS, and jQuery, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security measures include HTTPS enforcement and Google reCAPTCHA v3 for bot protection, although explicit security headers and cookie consent mechanisms are not fully implemented. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration legitimacy, but the professional content and consistent branding support the site's credibility. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and security header implementation.
Suomalainen työsuomalainentyo.fi
Non-profit · Finland
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Suomalainen työ ry is a well-established non-profit organization dedicated to promoting Finnish work and products. With a history spanning over 100 years, it serves a broad membership base ranging from small workshops to international corporations. The organization offers certification marks such as Avainlippu, Design from Finland, and Yhteiskunnallinen Yritys, alongside events, training, and research to support its mission. The website reflects a professional and consistent brand image, targeting Finnish consumers and businesses interested in domestic products and services. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance. It employs Google Tag Manager, Facebook Pixel, and Hotjar for marketing and user behavior tracking, all integrated with a cookie consent mechanism. The site is mobile-optimized, accessible, and performs moderately well, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for privacy compliance. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the organization's identity, enhancing trustworthiness. Overall, Suomalainen työ ry's website demonstrates a strong security posture, good privacy compliance, and a professional online presence. It effectively supports the organization's mission and stakeholder engagement.
- CIRCULAR PATH X AMANDA MURRAY
circularpathshoes.com
Retail
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Circular Path X Amanda Murray is a niche luxury footwear brand offering unique and limited edition shoes and accessories crafted in Italy. The brand targets fashion-conscious women inspired by iconic New York City fashion culture. The website is hosted on the AliveShoes platform and integrates modern technologies including Stripe and Adyen for secure payments, Google reCAPTCHA for bot protection, and tracking tools like Google Analytics and Mouseflow. While the site is professionally designed with good mobile optimization and SEO practices, it lacks a visible privacy policy page and explicit security headers, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and secure website presence suggests a legitimate business. Overall, the site demonstrates a moderate security posture and good business credibility but should enhance transparency and security practices to improve trust and compliance.
E4YOU spol. s r.o.smartweb.cz
Technology · Czech Republic
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
E4YOU spol. s r.o. is a Czech technology company specializing in developing mobile marketing systems, CRM intranets and extranets, school intranets, web design, SEO, and IT infrastructure services including hosting and technical support. Established since 2000, the company serves a broad B2B audience with a focus on marketing and CRM solutions, supported by a portfolio of notable clients such as Electrolux and Coca-Cola. The website reflects a professional and consistent brand image with detailed service descriptions and comprehensive contact information. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrates Google Analytics for user tracking, and uses Cookiebot for cookie consent management, although the domain is not authorized in the Cookiebot Manager, causing a minor error. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS with good SSL configuration but does not publish a privacy policy or terms of service, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms a long-standing domain registration consistent with the company's history, enhancing trustworthiness. Overall, the website is professional and trustworthy but would benefit from improved privacy documentation, enhanced security headers, and formalized incident response information to strengthen compliance and security posture.
Other · Turkey
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website demellos.com serves as a Turkish-language guide to popular and reliable online betting sites, providing users with information on betting platforms, license details, and financial transaction options. It targets Turkish-speaking users interested in sports betting and gambling, operating primarily as an affiliate or informational portal rather than a direct betting service. The website content is basic and focused on gambling-related topics, which require mature audience consideration. From a technical perspective, the site uses basic HTML and CSS with Cloudflare DNS services and is registered through GoDaddy.com, LLC. There is no evidence of advanced frameworks, CMS platforms, or analytics tools. Mobile optimization and accessibility are basic, and SEO practices are minimal. The website lacks privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is limited; no security headers were detected, and DNSSEC is not enabled, although the domain is protected by registrar-level client prohibitions. No forms or data collection mechanisms were found, reducing the attack surface but also limiting user engagement features. The absence of contact information and incident response channels reduces transparency and trustworthiness. Overall, the website presents moderate risk primarily due to compliance gaps and limited security best practices. Strategic improvements in privacy policy publication, security header implementation, and contact transparency are recommended to enhance trust and compliance.
SANANIM Z. Ú.sananim.cz
Non-profit · Czech Republic
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SANANIM is a well-established Czech non-profit organization specializing in addiction treatment and support services. The website reflects a professional and comprehensive digital presence, offering detailed information about their services, projects, and educational initiatives. They maintain a strong market position within the non-profit healthcare sector, targeting individuals affected by addiction and their families. The site features clear navigation, modern design, and multiple trust indicators including NGO certifications and partner endorsements. Technically, the website employs modern web technologies such as Google Tag Manager, SmartEmailing for marketing, and lazy loading for performance optimization. It uses a custom CMS by VIZUS.CZ and demonstrates good mobile responsiveness and accessibility. Privacy compliance is robust, with a clear cookie consent mechanism and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and secure form handling, though the absence of certain security headers suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data reduces domain trust slightly but is likely due to registry policies or privacy protection, which is acceptable for a non-profit entity. Overall, SANANIM's website is a trustworthy, well-maintained platform that effectively supports its mission. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture.