Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
67,851–67,900 of 99,067
- SSencor
sencor.rs
Retail · Serbia
67Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Sencor is a well-established retail brand specializing in consumer electronics and home appliances, operating primarily in Serbia with a broad European presence through localized sister sites. The website offers a comprehensive catalog of products ranging from televisions and audio-video equipment to kitchen and household appliances, targeting general consumers interested in quality and design. The business model focuses on direct product sales supported by dealer networks and customer service. Technically, the site leverages modern web technologies including Google Tag Manager, Bootstrap, and Kentico CMS, providing a good user experience with responsive design and structured data for SEO. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, DNSSEC is not enabled and security headers are missing, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.
- SSencor
sencor.lt
Retail · Lithuania
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sencor is a consumer electronics and home appliance brand with a strong online presence targeting consumers interested in televisions, audio-video equipment, kitchen appliances, and personal care products. The website is well-structured, multilingual, and provides comprehensive product categories and customer service information. The company appears to operate primarily in Lithuania and surrounding European markets, with a medium-sized business profile. Technically, the website uses modern web technologies including Bootstrap, Google Tag Manager, and Kentico CMS, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and privacy and cookie policies are not clearly presented. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.
- SSencor
sencor.sk
Retail · Slovakia
65Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Sencor.sk is the Slovakian e-commerce and retail website for Sencor, a traditional electronics brand founded in 1969 in Japan with operations across 30 countries in Europe and Asia. The website offers a comprehensive catalog of consumer electronics and household appliances, targeting general consumers in Slovakia and neighboring markets. The site is professionally designed with clear navigation and rich content, supporting a strong market position as an established brand in the retail electronics sector. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and various JavaScript libraries to enhance user experience and marketing capabilities. The site is mobile optimized and uses structured data for SEO and contact information. Security posture is good with HTTPS enforced and secure login forms, though explicit security headers and policies are not published. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, with minor gaps in privacy and security policy transparency.
- SSencor
sencor.com
Retail · Czech Republic
75Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Sencor is a consumer electronics and home appliances brand offering a wide range of products including televisions, audio-video equipment, kitchen appliances, household devices, and health and beauty products. The company targets consumers looking for quality and design in their electronics and household goods. The website presents a professional and consistent brand image with detailed product categories and customer support information. Technically, the site uses modern web technologies such as Google Tag Manager, RequireJS, and Bootstrap, and appears to be built on Joomla CMS. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and structure indicate a legitimate business presence. Overall, the site is well-designed and trustworthy for its target audience.
- SSencor
sencor.pl
Retail · Poland
65Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Sencor is a leading Polish retailer specializing in electronic devices, small household appliances, and audio-video equipment. The website presents a comprehensive product catalog with a strong focus on kitchen appliances, home electronics, and personal care devices. The company targets general consumers in Poland, offering an e-commerce platform with customer login, dealer locator, and promotional campaigns. Technically, the site employs modern web technologies including Google Tag Manager, Adform tracking, and various JavaScript libraries to enhance user experience and marketing effectiveness. The site is mobile-optimized and features good SEO practices. Security posture is solid with HTTPS and CSRF protections, though improvements such as Content-Security-Policy headers and a published security.txt file are recommended. The absence of WHOIS data from the Polish registry introduces some uncertainty in domain legitimacy, but the professional presentation and business information support a credible online presence. Overall, the site is well-structured, trustworthy, and serves its retail function effectively.
- SSencor
sencor.it
Retail · Italy
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sencor is a consumer electronics and home appliances brand targeting lifestyle-conscious consumers in Italy and broader European markets. The website showcases a broad product portfolio including televisions, audio-video equipment, kitchen appliances, health and beauty devices, and office supplies. The company provides customer support and dealer location services, indicating a retail and e-commerce business model. Technically, the website is built on the Kentico CMS platform, uses Bootstrap 4 for responsive design, and integrates Google Tag Manager for analytics and marketing. The site is well-structured with good navigation and mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. WHOIS data aligns with the website's business claims, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security transparency.
- SSencor
sencor.hu
Retail · Hungary
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Sencor.hu is a professional e-commerce website representing the Sencor brand, specializing in consumer electronics and household appliances targeted primarily at the Hungarian market. The site offers a broad product catalog with detailed categories and supports customer account management and product support services. The business is positioned as a medium-sized retail entity with a consistent brand presence and international regional sites. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and analytics tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS enforcement, secure login forms, and standard security headers, though explicit privacy and terms policies are missing, indicating room for compliance improvement. Overall, the site is trustworthy, safe, and professionally maintained, with clear contact information and no suspicious elements detected.
- SSencor
sencor.hr
Retail · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sencor.hr is a regional website representing the Sencor brand, a well-established company specializing in consumer electronics and household appliances. The company has a prestigious history dating back to the 1960s in Japan and offers a wide range of products including televisions, audio-video devices, kitchen appliances, and health and beauty products. The website targets general consumers interested in quality electronics and household goods, positioning itself as a reliable retail brand in the Czech Republic and surrounding regions. The business model focuses on retail sales supported by a comprehensive product catalog and regional partner sites in multiple languages.
- SSencor
drobnespotrebice.com
Retail · Czech Republic
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Sencor is a consumer electronics and home appliances brand offering a wide range of products including televisions, audio-video equipment, kitchen appliances, and health and beauty devices. The website serves as a retail and informational platform targeting general consumers primarily in the French language market, with multiple regional versions available. The company provides customer support, product downloads, and dealer location services, positioning itself as an established player in the retail electronics sector with a medium-sized market presence based in the Czech Republic. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, Bootstrap 4, and Kentico CMS. It employs structured data (JSON-LD) for enhanced SEO and contact information presentation. The site is mobile-optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate with use of Google Fonts and asynchronous JavaScript loading. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is no visible cookie consent mechanism, which may impact GDPR compliance. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional, professional, and trustworthy in content and design but would benefit from improved security headers, cookie consent implementation, and verification of domain registration details to enhance trust and compliance.
Le Gouvernement du Grand-Duché de Luxembourglu-alert.lu
Government · Luxembourg
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LU-Alert is the official Luxembourg government website dedicated to the national alert and information system for the population. It provides timely alerts issued by public authorities and promotes the LU-Alert mobile application available on iOS and Android platforms. The website targets residents and citizens of Luxembourg, aiming to enhance public safety through effective communication channels. The site is well-branded with consistent government identity and offers content primarily in French with language alternatives.
Government · Luxembourg
65Medium
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
The website etat.public.lu serves as the official directory and portal for public administration websites of the Grand Duchy of Luxembourg. It provides comprehensive listings and links to government ministries, agencies, and related public services primarily in French. The site is government-operated, targeting public sector employees, citizens, and stakeholders seeking official information. The business model is informational and public service oriented, with a strong market position as the authoritative government directory. Technically, the site is built on Adobe Experience Manager, uses modern web standards, and is mobile optimized with good accessibility features. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and incident response information. The absence of WHOIS data limits domain trust verification, though the content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves its public information purpose effectively.
Government · Luxembourg
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Guichet.public.lu is the official government portal of Luxembourg dedicated to providing citizens with easy access to a wide range of public services and administrative information. The website offers comprehensive coverage of topics such as financial aids, citizenship, family and education, taxation, immigration, inclusion, justice, housing, leisure, health, transport, and employment. It serves as a centralized digital gateway for Luxembourg residents to navigate government procedures efficiently. Technically, the site is built on Adobe Experience Manager (AEM), leveraging modern web technologies including SVG icons, JavaScript, and CSS for a responsive and accessible user experience. The presence of Adobe Dynamic Tag Manager indicates a mature approach to analytics and marketing tag management. The site is mobile-optimized and includes accessibility features, ensuring usability for a broad audience. From a security perspective, the website enforces HTTPS and integrates secure login mechanisms linking to official government authentication services. Cookie consent and privacy policies are clearly presented, reflecting compliance with GDPR requirements. While explicit security headers are not fully visible in the provided data, the overall posture appears strong with no evident vulnerabilities or exposed sensitive data. Overall, guichet.public.lu demonstrates a high level of professionalism, trustworthiness, and user-centric design, making it a reliable resource for Luxembourg citizens. The main limitation in the analysis is the absence of WHOIS data, which restricts domain registration trust assessment. Nonetheless, the official branding and domain extension support its legitimacy.
Le Gouvernement du Grand-Duché de Luxembourgluxembourg.lu
Government · Luxembourg
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website luxembourg.public.lu is the official government portal of the Grand Duchy of Luxembourg, providing comprehensive information about the country’s culture, living conditions, tourism, education, work, and investment opportunities. It serves a broad audience including residents, tourists, investors, and the general public. The site is well-branded with consistent government logos and multilingual support, reflecting Luxembourg’s multicultural and multilingual identity. Technically, the site is built on Adobe Experience Manager, uses modern web technologies, and includes accessibility and SEO best practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. The absence of WHOIS data is likely due to registry restrictions rather than malicious intent, but it slightly impacts trust metrics. Overall, the site is professional, trustworthy, and well-maintained.
Le gouvernement luxembourgeoisgouvernement.lu
Government · Luxembourg
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website gouvernement.lu is the official portal of the Luxembourg government, providing authoritative information, news, and access to public services. It serves a broad audience including citizens, residents, businesses, and international partners. The site is well-structured, multilingual, and professionally designed, reflecting its role as a government information hub. Technically, it is built on Adobe Experience Manager CMS and uses Adobe DTM for tracking, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. WHOIS data is unavailable due to query rate limits, but the domain's .lu TLD and official branding support legitimacy. Overall, the site demonstrates strong business credibility and good privacy compliance.
- KALTMEYER s.r.o.
kaltmeyer.cz
Real Estate · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
KALTMEYER s.r.o. is a Czech Republic based company specializing in mechanical and mechatronic access control systems for residential buildings. With over 30 years of market presence, the company offers a range of products including key systems, chip systems, self-locking locks, and innovative bike storage solutions. They also provide a unique lost key return service protected by utility model rights. The company targets property managers, owners, and residents, positioning itself as a trusted local provider with ISO 9001 certification and a solid reputation. Technically, the website is built on a Bootstrap framework with jQuery and Font Awesome, featuring responsive design and moderate performance. Google Analytics is used for visitor tracking. The site includes secure login and contact forms but lacks some advanced security headers and a dedicated privacy policy page, which are areas for improvement. Cookie consent is implemented via a banner. From a security perspective, HTTPS is enforced, and forms use password fields, but the absence of explicit security headers and a published security policy reduces the overall security posture. No critical vulnerabilities or WAF blocks were detected. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
- VTP soft a.s.
poolbilliard.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Český poolbilliard is a niche sports community website focused on pool billiards in the Czech Republic. It provides news, tournament information, player rankings, and educational content to its audience of billiard enthusiasts and players. The site is built on WordPress and integrates common plugins for photo galleries and GDPR compliance. The presence of official partner logos and links indicates a legitimate and community-supported platform. Technically, the site uses standard web technologies including jQuery and Google Fonts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and updated libraries. The absence of WHOIS registrant data reduces domain transparency and slightly impacts trustworthiness. Overall, the site is professional and trustworthy for its intended audience but could improve in security and contact transparency.
Education · Czech Republic
72Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
EKO Gymnázium Poděbrady is a private secondary educational institution in the Czech Republic specializing in gymnasium studies with an ecological and multimedia focus. The website presents a well-structured, content-rich platform targeting students, parents, and educational stakeholders in the Poděbrady region. The institution emphasizes sustainable development and extended foreign language education, supported by ISO 9001 certification indicating quality management standards. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and a proprietary CMS (WebActive). It is mobile-optimized with good navigation and content relevance. However, some security best practices such as HTTP security headers are not detected, and no explicit privacy or terms of service pages are present. Cookie consent is implemented effectively, reflecting basic GDPR compliance. Security posture is moderate with no critical vulnerabilities detected in the content, but the absence of WHOIS data limits domain legitimacy verification. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its educational purpose. Recommendations include improving security headers, publishing comprehensive privacy and terms policies, and verifying domain registration details to enhance trust and compliance.
- LOUDA Alform, výrobní družstvo
alform.cz
Manufacturing · Czech Republic
71Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
LOUDA Alform, výrobní družstvo is a Czech manufacturing cooperative specializing in precision machining, tooling, and assembly services for various industrial sectors including automotive, glass, ceramic, and rubber industries. The website presents a professional and well-structured digital presence with clear navigation and relevant content targeting industrial clients and educational institutions. The company leverages modern web technologies such as ASP.NET WebForms, jQuery, and Bootstrap, complemented by Google services for analytics and bot protection. Cookie consent is implemented comprehensively, reflecting GDPR compliance. However, the absence of WHOIS data and security headers slightly detracts from the overall trustworthiness and security posture. The site is accessible without WAF or security challenges, indicating stable hosting and infrastructure.
CAR4WAY a.s.car4way.cz
Transportation · Czech Republic
65Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CAR4WAY a.s. operates a Czech Republic-based carsharing and vehicle leasing service, targeting individuals and businesses interested in flexible vehicle access solutions. The website presents a professional and consistent brand image with a clear focus on transportation services such as carsharing, operational leasing, and car rental. The business model is centered on providing smart mobility solutions to a general audience within the Czech market. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, complemented by analytics and marketing tools such as Google Tag Manager, Hotjar, and Adform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.
Kongresové centrum ILF a.s.kcilf.cz
Transportation · Czech Republic
52Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Kongresové centrum ILF a.s. operates multimodal logistics centers in the Czech Republic, specializing in strategic connections for road, rail, and water freight transport. Established in 1995, the company has a strong market presence with over 25 years of experience and a portfolio of subsidiaries offering complementary logistics, storage, and related services. The website reflects a professional business model focused on investment, development, and leasing of logistics centers, targeting business clients in transportation and real estate sectors. Technically, the site is built on WordPress with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and privacy controls, though some security headers and policies could be improved. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable, limiting transparency.
KAPRAIN Groupkaprain.cz
Finance · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
KAPRAIN Group is a Czech investment group founded in 2016, focusing on multiple sectors including real estate, industry, retail, entertainment, finance, and media. The company positions itself as one of the fastest growing investment groups in the Czech Republic, emphasizing long-term value creation for its portfolio companies and stakeholders. The website presents a professional and consistent brand image with detailed portfolio and team information, targeting investors and business partners. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and CookieYes for analytics and cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. Overall, the site is well-structured, mobile-optimized, and trustworthy, but could improve privacy compliance and security best practices.
- Local Gear Inc.
locally.com
Retail · United States
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Locally.com is a platform operated by Local Gear Inc. that connects shoppers, brands, and local retailers to facilitate online-to-offline commerce, enabling consumers to shop online and pick up or receive products locally. Founded in 2013, the company positions itself as a leading decentralized shopping network bridging digital and physical retail. The website demonstrates a modern technical infrastructure using lightweight JavaScript frameworks and CDN-hosted assets, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The absence of WHOIS data for the domain introduces some trust concerns, though the professional website and consistent branding mitigate these. Overall, Locally.com presents a credible retail technology business with room for improvement in security and privacy compliance.
- SSimple Avia Solutions
avia-solutions.com
Transportation · United Arab Emirates
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Simple Avia Solutions is a newly established ACMI provider operating on four continents, specializing in aircraft leasing with crew, maintenance, and insurance services. The company targets airlines and businesses requiring flexible capacity solutions globally, positioning itself as a reliable and well-distributed operator. The website reflects a basic but professional digital presence with clear contact information and consistent branding. Technically, the site uses standard web technologies such as Bootstrap and jQuery, hosted behind Cloudflare DNS, but lacks advanced security configurations like DNSSEC and security headers. No privacy or cookie policies are published, indicating gaps in compliance. The security posture is moderate with room for improvement, especially in implementing best practices and transparency. Overall, the website is safe, accessible, and credible but would benefit from enhanced security and privacy measures to strengthen trust and compliance.
Government · Lithuania
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Meteo.lt is the official Lithuanian government meteorological service operated under the Ministry of Environment. It provides comprehensive weather forecasts, climate data, warnings, and meteorological monitoring services to the public and government agencies. The website is well-structured, professionally designed, and offers a wide range of meteorological information including real-time data, forecasts, and specialized services such as APIs and archival data access. The target audience includes general public users, businesses, and governmental bodies requiring accurate weather information. Technically, the website is built on WordPress and utilizes modern web technologies including jQuery and Google reCAPTCHA for form security. It implements GDPR-compliant cookie consent mechanisms with detailed user controls. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, it lacks visible security headers such as CSP or HSTS, which could enhance security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the .lt domain is noted but likely due to registry restrictions rather than malicious intent. Overall, Meteo.lt presents a trustworthy and professional government service website with strong privacy compliance and good technical implementation. Strategic improvements in security headers and publishing a security policy would further strengthen its security posture.
- EElsevier
scopus.com
Education
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Elsevier's Scopus is a leading global abstract and citation database providing comprehensive access to peer-reviewed literature across multiple disciplines including science, technology, medicine, social sciences, and humanities. The platform targets researchers, academics, and institutions, offering subscription-based access to extensive research content and author profiling services. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React and advanced monitoring tools like New Relic and Adobe Launch, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit cookie consent mechanisms could be improved. The absence of publicly available WHOIS data suggests privacy protection, which is justified given the enterprise nature of the business. Overall, the site reflects a professional, trustworthy, and well-maintained academic resource.
Education · Denmark
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Directory of Open Access Journals (DOAJ) is a well-established non-profit organization founded in 2003, dedicated to indexing and providing free access to scholarly open access journals globally. The platform serves researchers, academic institutions, publishers, and the general public by offering a comprehensive and community-driven index of quality open access content. DOAJ operates on a donation-supported model, emphasizing transparency and accessibility. Technically, the website employs modern web technologies including jQuery, Bootstrap, Select2, and Google Fonts, hosted behind Cloudflare DNS and CDN services. The site is optimized for performance, mobile responsiveness, and accessibility, with a clean and professional design that supports excellent user experience and navigation clarity. Privacy is respected with a clear cookie consent mechanism and a comprehensive privacy policy. From a security perspective, the site enforces HTTPS with a strong SSL configuration and domain transfer protections. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Analytics are handled via privacy-focused Plausible Analytics, ensuring minimal user tracking. Overall, DOAJ presents a high level of trustworthiness, professionalism, and compliance with privacy standards. The domain registration details align well with the organization's mission and history, reinforcing legitimacy. Strategic improvements could include enabling DNSSEC, adding security headers, and publishing a security policy to further enhance security posture.
Bez paragrafu s.r.o.petradolejsova.cz
E-commerce · Czech Republic
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Petra Dolejšová operates a specialized legal consultancy and training business under the brand Bez paragrafu s.r.o., focusing on marketing law, e-commerce compliance, data protection, and brand protection. The company targets marketing professionals, e-commerce businesses, and firms requiring tailored legal training and consulting services. The website demonstrates a strong market position with over 500 companies trained and extensive client testimonials, supported by a professional and consistent brand presence. Technically, the website is built on the Webflow platform, leveraging modern web technologies including Google Fonts, Google Analytics, and a comprehensive cookie consent mechanism. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in mechanisms, reflecting good privacy compliance. However, explicit security headers and a public security policy or incident response information are not evident, representing areas for improvement. The absence of WHOIS data for the domain limits the ability to fully verify domain legitimacy, though the professional content and business information mitigate some concerns. Overall, the website is a well-executed digital presence for a niche legal consultancy with strong content quality and privacy compliance, but would benefit from enhanced transparency in security policies and domain registration details.
ILINČEV s.r.o.ilincev.com
Other · Czech Republic
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ILINČEV s.r.o. is a Czech-based small business specializing in UX design and conversion rate optimization (CRO) services. The website presents a professional image with extensive case studies, blog content, and clear contact information, positioning the company as a recognized expert in its field within the Czech market. The business model focuses on consulting, workshops, and long-term optimization services for web and app clients. Technically, the site is built on WordPress with modern optimization and tracking tools, delivering fast performance and excellent mobile responsiveness. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though security headers and formal policies are lacking. The absence of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.
Denisa Rohunová | Inovace díky AIdenisarohunova.cz
Technology · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.denisarohunova.cz presents a professional online presence for Denisa Rohunová, focusing on innovation through artificial intelligence. The business appears to provide consulting and practical AI training services aimed at individuals and companies seeking to unlock AI's potential. The site is designed using Framer and integrates modern analytics and tracking technologies such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. However, the absence of WHOIS registration data limits the ability to fully verify domain legitimacy and ownership. The website lacks visible privacy, cookie, and terms of service policies, which impacts compliance and trust. Security headers are not detected, and no explicit contact information is provided, which may affect user confidence and regulatory adherence.
BBiOboutiqueostravica.cz
Real Estate · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Boutique Ostravica (BBiO) is a creative and business incubator space located in Ostrava, Czech Republic, offering flexible offices, coworking, event venues, a rooftop garden, and unique amenities such as a fitness and 3D reality studio. The business targets local professionals and companies seeking modern, design-oriented workspace and community engagement. The website is built on WordPress with modern plugins ensuring GDPR compliance and user-friendly interaction, including a contact form protected by Google reCAPTCHA v3. Social media integration and clear contact information enhance business credibility. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for its audience.
- sitour Slovakia
sitour.sk
Media · Slovakia
52Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
sitour Slovakia operates as a key player in the tourism advertising sector, providing innovative and flexible advertising solutions primarily in ski resorts, aquaparks, and online platforms. As part of the larger sitour International network, it leverages a strong market position across Alpine regions to deliver targeted out-of-home and digital advertising services. The website reflects a professional and modern digital presence, utilizing the Astro framework and integrating Google Tag Manager for analytics and marketing purposes. Privacy and cookie consent mechanisms are robust and GDPR compliant, enhancing user trust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site demonstrates a mature business with a clear focus on tourism advertising and technology, supported by consistent branding and comprehensive content.
- The Waterfront
underdogbarnyc.com
Hospitality · United States
53Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Waterfront website represents a hospitality business, likely a restaurant or event venue located in Venice, California. The site is built on the Squarespace platform, featuring a gallery of images and navigation for about, menus, reservations, and scheduling. The technical infrastructure is modern with good mobile optimization and basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented via iubenda, but lacks advanced security headers and visible privacy or terms policies. The absence of WHOIS data for the queried domain underdogbarnyc.com and mismatch with the website content reduces trustworthiness and raises questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance disclosures.
- BBest Western Amsterdam
thebaysiderestaurant.com
Hospitality · Netherlands
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website content provided corresponds to Best Western Amsterdam, a hospitality business offering hotel accommodation and direct booking services in Amsterdam. The site is built on Joomla CMS using the Helix Ultimate framework and incorporates modern web technologies such as Bootstrap, jQuery, and FontAwesome. The technical infrastructure is moderately modern and optimized for mobile devices, with good SEO practices. However, the security posture is average, lacking visible security headers and explicit privacy or cookie policies. The WHOIS data for the queried domain www.thebaysiderestaurant.com is missing, indicating the domain is unregistered or inactive, which raises legitimacy concerns. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.
- BBest Western Amsterdam
partyboatlaketahoe.com
Hospitality · Netherlands
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Best Western Amsterdam operates a professional hotel accommodation website primarily targeting travelers seeking lodging in Amsterdam. The site offers direct booking capabilities and leverages modern web technologies including Joomla CMS, Bootstrap, and various JavaScript libraries for enhanced user experience. The technical infrastructure is moderately mature with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and trust. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness. Strategic improvements in privacy compliance and security best practices would enhance the site's risk profile and user trust.
- PPalmetto Podiatry Associates, LLC
wetpetsdothan.com
Healthcare · United States
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Palmetto Podiatry Associates, LLC is a healthcare provider specializing in comprehensive foot and ankle care, serving the Columbia, SC area since 1999. The website content reflects a well-established local medical practice with professional services ranging from routine podiatric care to surgical interventions. The business is positioned as a trusted healthcare provider with recognized certifications and awards, targeting local patients seeking specialized foot and ankle treatment. Technically, the website employs standard web technologies including jQuery, FontAwesome, and an accessibility widget to enhance user experience. The site is mobile-optimized and demonstrates good SEO practices, though it lacks some modern security headers and cookie consent mechanisms. The WHOIS data for the domain wetpetsdothan.com is missing, and the website content actually corresponds to a different domain, indicating a possible misconfiguration or domain aliasing issue. From a security perspective, the site uses HTTPS and links to a HIPAA policy, indicating awareness of healthcare data privacy requirements. However, the absence of WHOIS registration data for the domain and missing security headers reduce the overall security posture. No incident response or vulnerability disclosure policies are published, and no tracking or analytics scripts are detected, which limits data privacy concerns but also reduces marketing insights. Overall, the website is professional and trustworthy in content and design but suffers from domain registration inconsistencies and lacks some security and privacy best practices. Strategic improvements in domain registration clarity, security headers, and privacy compliance would enhance trust and security posture.
- BBest Western Amsterdam | Official website | Book direct discount
austinpergolaco.com
Hospitality · Netherlands
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The analyzed website content corresponds to Best Western Amsterdam's official site, a hospitality business offering hotel accommodation services in Amsterdam. The site is built on Joomla CMS with modern frontend technologies such as Bootstrap and Font Awesome, integrating booking APIs and third-party scripts for enhanced user experience. However, the WHOIS data for the domain www.austinpergolaco.com is missing or indicates the domain is unregistered, suggesting a mismatch between the domain and the content provided. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The site lacks visible contact information and compliance documentation, which impacts trust and privacy compliance scores. Overall, the site is professionally designed and safe for general audiences but requires improvements in security and compliance documentation.
- The Waterfront
sweetmelissascafe.com
Hospitality · United States
67Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Waterfront is a hospitality business operating as a restaurant located in Venice, California. The website serves as an online presence providing information about the restaurant, menus, reservations, and scheduling. The business appears to be a small local restaurant with a focus on dining services and event scheduling. The website is built on the Squarespace platform, leveraging standard web technologies and third-party scripts such as Iubenda for cookie management, although no active cookie consent mechanism or privacy policy is present. The site is moderately optimized for performance and mobile devices, with a clean and consistent branding approach. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures to improve trust and compliance.
Visiting Nurses Association of America (V.N.A.A.)bayoudogs.org
Non-profit · United States
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Visiting Nurses Association of America (V.N.A.A.) is featured on a professional and comprehensive website hosted under the Young Survival Coalition domain, a reputable non-profit organization focused on young adults facing breast cancer. The site provides detailed information about V.N.A.A.'s advocacy, education, and community-based home health services. The target audience includes young women diagnosed with breast cancer and their support networks. The website demonstrates a strong market position within the non-profit healthcare advocacy sector, offering key services such as resource directories and community support. Technically, the website employs modern web technologies including FusionCMS, Google Analytics, Google Tag Manager, Facebook Pixel, and Google Maps API. The site is mobile-optimized, accessible, and SEO-friendly, with a clean and consistent branding approach. Performance is moderate, with room for optimization in loading speed and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible exposed sensitive data. However, security headers are not detected, and privacy compliance could be enhanced by implementing explicit cookie consent mechanisms and clearer GDPR indicators. The WHOIS data is privacy-protected, which is typical for non-profit organizations, and no suspicious patterns were found, supporting the site's legitimacy. Overall, the website is trustworthy, professional, and well-maintained, serving its community effectively. Strategic improvements in security headers and privacy compliance would further strengthen its posture.
- Center for Sustainable Energy
theapostolicchurch.org
Energy · United States
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Clean Vehicle Grants Project website serves as the official information portal for the California Clean Vehicle Rebate Project (CVRP), administered by the Center for Sustainable Energy on behalf of the California Air Resources Board. It provides comprehensive resources including eligibility guidelines, rebate application access, FAQs, and program updates targeted at California residents and businesses interested in electric vehicle incentives. The site is positioned as an authoritative source within the clean energy and transportation sectors, supporting California's sustainability goals. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Analytics, Google Tag Manager, and social media pixels for marketing and analytics purposes. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable delivery and moderate performance. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs domain registration protections but lacks DNSSEC and advanced security headers, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Contact information is clearly provided with multilingual support, enhancing trust and accessibility. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in security hardening and privacy compliance. The domain registration details align well with the business purpose, supporting legitimacy and trustworthiness.
Hospitality · Netherlands
65Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website content provided corresponds to Best Western Amsterdam, a hospitality business offering hotel accommodation and direct booking services. The site is built on Joomla CMS using the Helix Ultimate framework and incorporates modern frontend technologies such as Bootstrap, jQuery, and FontAwesome. The business targets travelers and tourists seeking comfortable stays in Amsterdam with a best price guarantee. However, the WHOIS data for the queried domain www.4unails.com is missing or indicates the domain is unregistered, which is inconsistent with the active website content. This discrepancy raises concerns about domain legitimacy and trustworthiness. The website lacks critical privacy and cookie policies, contact information, and security headers, which negatively impacts its security posture and privacy compliance. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Overall, the site demonstrates good content quality and technical implementation but suffers from significant security and compliance gaps.
Other
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website thearmoredgarage.com is currently inaccessible due to a Cloudflare security block, preventing access to any substantive content. As a result, no business information, contact details, or policies are available for analysis. The domain is registered since 2015 with NameCheap and uses Cloudflare DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. The security posture cannot be fully evaluated beyond the presence of Cloudflare's WAF blocking access, which suggests some level of protection against attacks but also restricts transparency. Overall, the site is currently non-functional for external users, resulting in a low AI score and incomplete analysis.
Other
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website car-er.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This prevents any direct analysis of the site's content, business information, or technical implementation. The domain is registered since 2013 via NameCheap and uses Cloudflare DNS and security services, indicating a mature and legitimate domain registration. However, the lack of accessible content and absence of business or compliance information limits the ability to assess the company's market position, services, or security posture. The site shows no privacy or cookie policies, no contact information, and no visible forms or scripts due to the block. Overall, the site is effectively protected by Cloudflare but currently unavailable for detailed analysis.
- The Waterfront
yourfitnesspath.com
Hospitality · United States
69Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The website content analyzed corresponds to 'The Waterfront', a hospitality business likely operating as a restaurant or event venue. The site offers menus, reservation options, and scheduling links, targeting general public customers. The technical infrastructure is based on Squarespace CMS, leveraging standard web technologies and third-party services like Iubenda for cookie management. The site is mobile optimized and has moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The WHOIS data for the provided domain yourfitnesspath.com is missing, and the website content does not match the domain, indicating a possible domain-content mismatch or error in the provided URL. This discrepancy impacts trust and legitimacy assessments. Overall, the site is professionally designed but requires improvements in privacy compliance, contact transparency, and security best practices.
Other
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website newwavefoods.com is currently inaccessible, returning a 404 error with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered with NameCheap, Inc. since 2015 and uses Cloudflare DNS services, indicating a legitimate registration and hosting setup. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. Security posture is minimal with no security headers detected and DNSSEC not enabled. Privacy and cookie policies are absent, and no contact or incident response information is available on the site. Overall, the site appears to be down, under maintenance, or misconfigured, resulting in a low AI score and limited insights.
- WWaveFoods Catering & Private Events
shotstop.net
Hospitality · Canada
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
WaveFoods Catering & Private Events is a small local catering business based in Halifax, Nova Scotia, specializing in event catering services including weddings, corporate events, and private parties. Their offerings include custom menu planning, handcrafted cocktails, and desserts, targeting event organizers and private clients in the hospitality sector. The website presents a professional and clean design with clear navigation but lacks advanced technical features and compliance documentation. Technically, the website is built with basic HTML and CSS without detectable CMS or advanced frameworks. It lacks HTTPS information and security headers, which weakens its security posture. The site does not include privacy or cookie policies, nor does it show evidence of analytics or tracking tools, indicating minimal user tracking but also a lack of compliance with common privacy standards. From a security perspective, the absence of HTTPS and security headers, combined with no visible incident response or security policies, suggests a low security maturity level. The WHOIS data is missing, raising concerns about domain registration legitimacy and increasing risk. The contact method is limited to a form without alternative contact details, which may impact trust and user confidence. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and domain legitimacy verification to enhance trustworthiness and reduce risk.
- PPalmetto Podiatry Associates, LLC
alfordwildlife.com
Healthcare · United States
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Palmetto Podiatry Associates, LLC is a small healthcare provider specializing in comprehensive foot and ankle care in Columbia, South Carolina. Established in 1999, the practice offers a range of podiatric services including surgical and non-surgical treatments. The website presents a professional image with clear business information, contact details, and trust indicators such as professional certifications and awards. Technically, the site uses modern web technologies like jQuery and FontAwesome, and includes an accessibility widget to enhance compliance. However, there is no cookie consent mechanism or explicit privacy policy beyond a HIPAA PDF, and no visible security headers were detected. The WHOIS data for the analyzed domain palmettopodiatry.com is missing, indicating a domain mismatch or unregistered domain, which reduces trustworthiness. Overall, the site is safe, well-structured, and suitable for its target audience but could improve in privacy compliance and security transparency.
Sedlecký kaolin a.s.sedlecky-kaolin.cz
Manufacturing · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Sedlecký kaolin a.s. is a leading international producer of kaolin and related mineral raw materials, with a history dating back to 1892. The company focuses on mining, processing, and supplying kaolin, bentonite, clay, and sandstone primarily for industrial clients in manufacturing and construction sectors. They emphasize innovation, environmental responsibility, and collaboration with research institutions to maintain high quality standards. The website reflects a professional and consistent brand image targeting industrial customers. Technically, the site is built on modern React and Next.js frameworks, with integrations for Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional, supporting the company's market position as a reputable mineral producer.
Holoubek koncernholoubek.cz
Other · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Holoubek koncern is a Czech business entity with an online presence hosted on the Wix platform. The website provides corporate information primarily in Czech language but lacks detailed business descriptions or service listings. The site integrates standard Wix technologies and Google Analytics for visitor tracking. However, the absence of WHOIS registration data and privacy policies limits the ability to fully verify the business legitimacy and compliance. The website is accessible without any WAF or security challenge blocking content. Technical infrastructure is typical for small businesses using Wix, with moderate performance and basic mobile optimization. Security posture is minimal with no advanced headers or policies detected, and privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site appears functional but lacks critical trust and compliance elements.
Media · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kamelot.cz operates as a regional cultural and advertising monthly magazine serving the Czech regions of Kladno, Karlovy Vary, and Liberec. The website provides information on local culture, sports, and services, with a business model centered on free distribution supported by advertising revenue. The site targets local residents and businesses seeking regional event information and advertising opportunities. Technically, the website employs common web technologies including jQuery, Bootstrap, FontAwesome, and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate; HTTPS is used, but security headers and privacy compliance elements such as privacy and cookie policies are missing, representing compliance gaps. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact information suggest a legitimate business presence. Overall, the site is safe for general audiences and functions well as a regional media outlet.
ZAK TVzaktv.cz
Media · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ZAK TV is a regional television broadcaster serving the Plzeňský and Karlovarský regions of the Czech Republic. The website offers live streaming of current broadcasts, an archive of programs, and services such as advertising and studio rental. The business operates as a small media entity with a consistent brand presence and active social media channels. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Fancybox, AOS, and Clappr for video playback, supported by Google Analytics and Hotjar for analytics and user behavior tracking. While the site is accessible and professionally designed, it lacks critical privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with no visible security headers and no explicit SSL/TLS configuration details provided. Overall, the site is functional and credible but would benefit from enhanced security and privacy measures.