Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
6,851–6,900 of 99,069
Krka, tovarna zdravil, d. d., Novo mestolekarna-na-dom.si
Healthcare · Slovenia
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Lekarna-na-dom.si is an established Slovenian online pharmacy platform specializing in the sale of Krka pharmaceutical and veterinary products. The website serves consumers seeking convenient access to self-medication and veterinary products, positioning itself as a niche e-commerce retailer within the healthcare sector in Slovenia. The platform offers product search, categorized listings, and delivery services, leveraging Krka's brand recognition. Technically, the site is built on modern JavaScript frameworks including Nuxt.js, with integration of Google Tag Manager and advertising technologies. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but lacks explicit security policy and incident response disclosures. WHOIS data confirms domain legitimacy with consistent registration details dating back to 2010. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and contact information visibility could enhance user trust and compliance.
Healthcare · Ukraine
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
KRKA is a well-established pharmaceutical company specializing in the development, production, and sale of generic, over-the-counter, and veterinary medicines. With nearly 70 years of experience, it holds a strong market position as a leading generic pharmaceutical manufacturer, serving over 100 million patients in more than 70 countries. The website targets healthcare professionals, patients, and veterinary users, providing comprehensive product information and corporate news. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification, but the overall digital presence and content quality support legitimacy.
Krka Sverige ABkrka.se
Healthcare · Sweden
71Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Krka Sverige AB operates as a subsidiary of the Krka pharmaceutical group, specializing in generic medicines with a 70-year history. The company focuses on development, production, marketing, and sales of prescription and non-prescription medicines for humans and animals, targeting healthcare professionals and consumers primarily in Nordic countries. The website reflects a professional and consistent brand image with clear business information and international presence links. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js and includes performance and accessibility optimizations. It employs Google Tag Manager for analytics and marketing purposes and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, some security headers are not evident, and WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear policies and consent mechanisms. Business credibility is supported by detailed contact information and social media presence. The main risk lies in the lack of WHOIS data and absence of an incident response contact, which should be addressed to improve trust. Overall, the website is professional and functional but would benefit from enhanced transparency on domain registration and security policies to strengthen trust and compliance.
Healthcare · Lithuania
71Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Krka is a globally recognized pharmaceutical company with a 70-year history, offering prescription, non-prescription, and veterinary products. The website reflects a professional and consistent brand presence targeting healthcare professionals and patients, with a focus on quality and sustainability. Technically, the site uses modern frameworks such as Nuxt.js and includes essential features like cookie consent and privacy policies, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis but does not detract from the overall legitimacy of the business presence online.
Healthcare · Armenia
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
KRKA is a well-established pharmaceutical company with nearly 70 years of experience specializing in the development, manufacturing, and sales of generic medicines and veterinary products. The Armenian website serves as a regional representation of the global KRKA group, providing detailed company information, product descriptions, and career opportunities. The site targets healthcare professionals and the general public, emphasizing quality and sustainability. Technically, the website is built on modern JavaScript frameworks (Nuxt.js) and integrates Google Tag Manager for analytics, demonstrating a moderate to good level of digital maturity. The site is mobile-optimized and accessible, with clear navigation and multilingual support. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response contacts are missing. Privacy compliance is partially addressed with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, the website projects a professional and trustworthy image consistent with a large healthcare enterprise.
Healthcare · Serbia
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Krka is a well-established pharmaceutical company specializing in the development, production, marketing, and sale of generic prescription drugs, over-the-counter medicines, and veterinary products. With over 70 years of experience and a strong international presence, Krka holds a leading market position in the generic pharmaceuticals sector. The website targets healthcare professionals, patients, media, and potential employees, providing comprehensive corporate, product, and investor information. Technically, the site is built on modern JavaScript frameworks (Nuxt.js), uses Google Analytics and Tag Manager for tracking, and is mobile optimized with good accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism is observed. Business credibility is high, supported by clear contact information, corporate transparency, and trust signals such as awards and published financial reports.
Healthcare · Slovakia
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Krka is a well-established pharmaceutical company specializing in generic medicines with over 70 years of experience. The company operates internationally with a strong presence in Slovakia and multiple other countries. Their website reflects a professional corporate identity, offering detailed information for healthcare professionals, patients, and media. The business model focuses on the development, production, marketing, and sales of prescription, over-the-counter, and veterinary medicines. The company maintains a strong market position as a leading generic pharmaceutical manufacturer. Technically, the website is built on modern frameworks such as Nuxt.js, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy policies and GDPR compliance are clearly addressed. Overall, the website demonstrates high professionalism and trustworthiness.
Healthcare · Portugal
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
KRKA Farmaceutica, Unipessoal Lda. is a well-established pharmaceutical company specializing in generic medicines with over 70 years of experience. The company operates in Portugal as part of the larger Krka group, a recognized global player in the healthcare sector. Their website clearly communicates their business focus on prescription, non-prescription, and veterinary medicines, targeting both healthcare professionals and general consumers. The site is professionally designed, mobile-optimized, and provides comprehensive corporate and product information.
Healthcare · Belarus
57Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
KRKA, tovarna zdravil, d.d., Novo mesto is a well-established pharmaceutical company specializing in the development, manufacturing, and sales of generic, over-the-counter, veterinary, and dietary supplement products. With nearly 70 years of experience, the company holds a strong market position as a leading global generic pharmaceutical manufacturer. The website targets healthcare professionals, consumers, and veterinary sectors primarily in Belarus and globally through multiple localized domains. The business model focuses on high-quality pharmaceutical products supported by a robust corporate presence and strategic international footprint. Technically, the website is built on modern frameworks such as Nuxt.js, employs industry-standard analytics tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers and incident response disclosures could be improved. Overall, the site reflects a professional and trustworthy corporate image with comprehensive privacy and cookie policies, clear contact information, and consistent branding.
Krkakrka.be
Healthcare · Belgium
71Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Krka is a leading generic pharmaceutical company with nearly 70 years of experience, offering a broad portfolio of prescription medicines, over-the-counter products, and animal health products. The company maintains a strong international presence with localized websites and multilingual support. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, providing good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is restricted due to registry policies, but the website's professionalism and content quality support its legitimacy.
Healthcare · Azerbaijan
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Krka Azerbaijan is a regional website representing Krka, a leading generic pharmaceutical company with approximately 70 years of experience. The company specializes in the development, manufacturing, and sales of prescription, over-the-counter, and veterinary pharmaceutical products. The website targets healthcare professionals and general consumers in Azerbaijan and provides comprehensive information about the company, its products, career opportunities, and sustainability initiatives. The site is professionally designed, mobile-optimized, and includes multiple language and country-specific links reflecting a global presence. Technically, the website is built on the Nuxt.js framework, leveraging modern JavaScript technologies and Google Tag Manager for analytics. The site demonstrates good performance, accessibility, and SEO optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some security headers are missing, and there is no explicit incident response or vulnerability disclosure information. Overall, the website is trustworthy and credible, supported by consistent WHOIS data that aligns with the company's identity and history. Privacy and cookie policies are present and reasonably comprehensive, indicating a commitment to GDPR compliance. Contact information is available, though no direct company emails are listed. Social media presence on LinkedIn, Instagram, and YouTube enhances brand visibility. Strategic recommendations include improving security headers, adding incident response contacts, and publishing a vulnerability disclosure policy to further strengthen security and compliance posture.
KRKA Pharma GmbHkrka.at
Healthcare · Austria
71Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
KRKA Pharma GmbH is a well-established generic pharmaceutical company with over 70 years of experience, operating primarily in Austria and internationally. The company focuses on the development, production, and marketing of prescription medicines, maintaining a strong market position as a leading generic drug manufacturer. The website reflects a professional and consistent brand image, targeting medical professionals and the general public interested in healthcare products. Technically, the site uses modern JavaScript frameworks such as Nuxt.js and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. The website is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though explicit security headers and a dedicated security policy page are absent. Overall, the site demonstrates a strong security posture with room for improvement in transparency and incident response readiness. The domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.
Healthcare · Albania
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Krka is a leading pharmaceutical company specializing in generic medicines with over 70 years of experience. The Albanian localized website reflects its international presence and commitment to high-quality pharmaceutical products, including prescription, over-the-counter, and animal health products. The site targets healthcare professionals and general consumers in Albania, providing comprehensive product information and corporate insights. Technically, the website is built on a modern Nuxt.js framework with good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.
- Reuzenpanda
reuzenpanda.nl
Retail · Netherlands
64Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Reuzenpanda is a small retail business operating a website built on WordPress using the Elementor page builder. The site presents a professional and consistent design with good mobile optimization and user experience. The business appears to target a general audience in the Netherlands, offering products or services typical of a retail ecommerce model. Technically, the site uses modern frontend libraries such as Swiper.js and Font Awesome, but lacks advanced analytics or marketing tools. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.
Untyped BVgetuntyped.ai
Technology · Netherlands
72Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Untyped BV offers an AI-powered email drafting solution integrated with Gmail and Outlook, targeting professionals who want to save time on repetitive email responses. The company positions itself as a productivity enhancer with a subscription-based SaaS model and early bird pricing. The website is professionally designed, mobile-optimized, and GDPR compliant, reflecting a mature digital presence. Technically, the site uses modern web technologies including Webflow, Google Tag Manager, and GSAP, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is incomplete, likely due to privacy protection, which is common for startups but slightly reduces domain trust verification. Overall, Untyped presents as a credible, professional technology startup with a focus on privacy and user-centric AI services.
- SLOTPARTNERS
slotpartners.com
Other
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Slotpartners is an established online casino affiliate network founded in 2008, offering a portfolio of casino brands and attractive revenue share deals to affiliates. The website is professionally designed using WordPress and associated plugins, with a focus on promoting their affiliate program and brands. The technical infrastructure includes Cloudflare DNS and standard web technologies, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain status locks, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and credible within its niche but would benefit from enhanced privacy and security disclosures.
Soliticssolitics.com
Technology
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Solitics is a technology company specializing in AI-powered real-time user engagement and gamification solutions tailored for regulated industries such as trading, banking, and iGaming. Their platform enables businesses to create hyper-personalized user journeys, leveraging AI and automation to boost engagement, retention, and performance. The company positions itself as an innovative leader with a strong focus on compliance and security, catering to enterprises that require fast, secure, and compliant marketing automation tools. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, lazy loading, and integrations with HubSpot, Google Tag Manager, Hotjar, and Google reCAPTCHA Enterprise. The hosting infrastructure appears to be AWS-based, with DNS managed by AWS DNS servers. The site demonstrates excellent mobile optimization, SEO, and accessibility features, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and integrates advanced bot protection via Google reCAPTCHA Enterprise. However, there is room for improvement in DNS security (DNSSEC not enabled), explicit security headers, and incident response transparency. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks visible cookie consent mechanisms and vulnerability disclosure information. Overall, Solitics presents a professional, trustworthy, and technically sound web presence with a strong business focus on regulated sectors. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and customer trust.
PANT (spolek PANT)eustory.cz
Education · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Eustory.cz is a Czech non-profit educational website dedicated to organizing a history competition for high school students with a European scope. The competition has been running since 2001 and is organized by the association PANT. The website serves as an information hub for the competition, providing resources, event details, and links to international partners. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and offering a responsive design suitable for mobile users. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and cookie consent mechanisms. Privacy policy is present and appears GDPR compliant, though cookie policy and terms of service are missing. The WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the site is professional, trustworthy, and well-positioned within its niche educational sector.
Other
55Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at imrmbb.site currently contains no accessible content beyond a minimal placeholder message 'Not found'. There is no metadata, structured data, forms, or business information available to analyze. The domain is newly registered in November 2024 with a two-year expiry and uses Cloudflare DNS servers without DNSSEC enabled. No privacy, cookie, or terms of service policies are present, and no contact or security incident response information is provided. The lack of content and transparency significantly limits the ability to assess the business or security posture meaningfully. From a technical perspective, the site appears to be hosted behind Cloudflare but lacks modern security headers and DNS security features. The absence of HTTPS status information and security headers suggests a basic or incomplete security configuration. No analytics, advertising, or tracking technologies are detected, indicating minimal digital maturity or possibly an inactive site. Security posture is weak due to the lack of visible security best practices and policies. No vulnerabilities can be assessed due to the absence of content. The domain registration is transparent and consistent but the lack of business information and website content reduces trustworthiness. Overall, the site presents a high risk for users due to the lack of information and transparency. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, implementing HTTPS with strong TLS, adding security headers, and providing clear contact and incident response information to improve trust and compliance.
- LLunuBet
lunubet.com
Other
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
LunuBet is an online gambling platform targeting German-speaking users, offering betting and casino services. The website is relatively new, with domain registration in early 2024, and lacks transparency in business and compliance information. Technically, the site uses Cloudflare DNS and Google Fonts, with moderate performance and basic mobile optimization. Security posture is weak, with no DNSSEC, no security headers detected, and no visible privacy or cookie policies. No contact or incident response information is provided, which raises concerns about user support and compliance. Overall, the site presents a moderate risk profile typical of new gambling platforms with limited trust signals.
Loading...20bet.com
Other · Germany
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website bet20play.com is an online gambling platform launched recently in 2024, targeting German-speaking adult users interested in sports betting, live betting, casino games, live casino, and horse racing. The platform offers various gambling-related services including promotions, forecasts, and results. The domain is newly registered and hosted using modern cloud infrastructure including Cloudflare DNS and Amazon CloudFront CDN. The site uses React-based frontend technologies and Google Fonts for styling. However, the website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is basic with no DNSSEC enabled and no visible security headers, though HTTPS is implied but not explicitly confirmed in the data. Advertising is present via TrafficJunky ad network. Overall, the site is functional but has significant gaps in privacy compliance and security best practices.
- SSportaza
sportaza.com
Other
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Sportaza is an online gambling platform primarily targeting German-speaking users, offering a variety of services including sports betting, live betting, casino games, live casino, jackpots, and virtual sports. The platform appears to be relatively new, with the domain registered in early 2023. The website is built using modern web technologies, notably Angular 14, and leverages Cloudflare DNS services for hosting and security. It integrates Google Tag Manager and reCAPTCHA v3 for analytics and bot protection respectively. However, the site lacks visible privacy policies, terms of service, and contact information, which are critical for user trust and regulatory compliance in the gambling industry. Security measures are partially implemented with HTTPS and reCAPTCHA, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the site is functional and professionally designed but requires enhancements in compliance and security transparency.
- PPowbet
powbet.com
Other
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Powbet is an online sports betting and casino gaming platform launched in 2023, targeting adult users interested in gambling entertainment. The website offers a variety of sports betting options and casino games, positioning itself competitively in the online gambling market. The business model revolves around providing digital betting and gaming services with promotional bonuses to attract users. Technically, the site is built as a modern Angular single-page application, leveraging popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Optimize. The infrastructure includes Cloudflare DNS and GoDaddy as the domain registrar, indicating a standard hosting and domain setup for such platforms. Security-wise, the site uses HTTPS and has domain status protections, but lacks DNSSEC and visible security headers. There is no explicit privacy policy or terms of service found in the analyzed content, which is a compliance gap. No contact or incident response information is publicly available, limiting transparency. Overall, the site is functional and professionally designed but would benefit from enhanced security practices and compliance disclosures.
ZotaBetzotabet.com
Other
61Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
ZotaBet operates as an online casino and sportsbook platform offering a wide range of gambling services including over 10,000 games, sportsbook betting, promotions, and VIP programs. The website targets adult users interested in online gambling and sports betting. The platform supports multiple languages and provides secure payment options along with 24/7 customer support. Technically, the site is built using modern JavaScript frameworks such as React, with integrations for customer tracking and payment processing. The site is mobile optimized and SEO friendly, providing a good user experience. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available security policies or vulnerability disclosure programs. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.
- WinWin Unique Casino
uniquecasino.com
Other
57Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website 'WinWin Unique Casino' is a gambling-related site that is currently inaccessible due to regional blocking, as indicated by the minimal HTML content displaying a message in German restricting access to players from the user's region. No substantive content, policies, or contact information are available for analysis. The technical infrastructure cannot be assessed due to the lack of accessible content, and no security headers or SSL configuration details are present in the provided data. The security posture is unknown but likely weak given the absence of visible security measures. Overall, the site appears to be a small-scale gambling business with limited transparency and accessibility. Strategic recommendations include improving accessibility, publishing comprehensive privacy and cookie policies, and enhancing security measures.
DialMedia Ltdomnislots.com
Other · Malta
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Omni Slots, operated by DialMedia Ltd, is a Malta-based online casino platform offering a wide range of casino games including slots, table games, and live casino options. The website targets adult online gamblers globally, providing attractive welcome bonuses and ongoing promotions to engage users. The company holds a valid Malta Gaming Authority license, reinforcing its legitimacy and regulatory compliance. The platform is positioned as a leading online slots casino with a strong portfolio and user engagement features such as VIP clubs and tournaments. Technically, the website is built using modern web technologies including React, integrates multiple analytics and marketing tools like Google Analytics, Hotjar, and Facebook Pixel, and is protected by Cloudflare services. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Security measures include HTTPS enforcement, reCAPTCHA v3 integration, and password complexity rules, although some improvements like enabling DNSSEC and publishing a security.txt file are recommended. From a security perspective, the platform demonstrates a solid posture with no visible critical vulnerabilities or blocking mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The business credibility is high, supported by transparent WHOIS data, regulatory licensing, and trust indicators such as responsible gaming links and social media presence. Overall, Omni Slots presents a professional, secure, and compliant online gambling platform with a strong market position. Strategic recommendations include enhancing DNS security, formalizing vulnerability disclosure, and strengthening security headers to further improve trust and resilience.
Other
66Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
The website www.mapumaia.nz appears to be a small-scale Wix-built site with minimal content and no publicly available WHOIS registration data, raising concerns about domain legitimacy. The site uses standard Wix hosting and scripts, including Google Analytics and Google Tag Manager for tracking, but lacks essential business information such as contact details, privacy policies, and terms of service. Technically, the site is basic with moderate performance and limited mobile optimization. Security posture is weak due to absence of security headers and no visible security policies or incident response mechanisms. Overall, the site presents a low trust profile with significant gaps in compliance and business credibility.
- Asian Family Services
asianfamilyservices.nz
Non-profit · New Zealand
71Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Asian Family Services is a New Zealand-based non-profit organization dedicated to providing culturally tailored mental health, gambling harm minimisation, and wellbeing support services to Asian communities nationwide. Established in 2015, the organization operates multiple branches and offers multilingual support including English, Mandarin, Cantonese, Korean, Japanese, Thai, Vietnamese, and Hindi. The website reflects a professional and community-focused service provider with clear contact information, leadership visibility, and active social media presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and integrates multiple analytics and tracking pixels including Google Analytics, TikTok, and Facebook. Hosting and DNS are managed via reputable providers including Dreamscape Networks and Cloudflare, ensuring good performance and security. The site is mobile optimized and accessible with a clear navigation structure. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though improvements are recommended in implementing security headers and publishing formal security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but GDPR compliance is not explicitly indicated. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively. Strategic recommendations include enhancing security headers, formalizing security and incident response policies, and improving privacy compliance transparency.
swisspor Gruppeswissporgroup.com
Real Estate · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
swisspor Gruppe is a Swiss family-owned company specializing in sustainable building products, systems, and services aimed at creating energy-efficient and economically viable buildings. The company emphasizes sustainability, architectural quality, safety, and technical feasibility, targeting builders and partners in the construction industry. The website is professionally designed, multilingual, and provides comprehensive information about the company's offerings and values. Technically, the site uses modern web technologies including Google Tag Manager and CookieHub for consent management, ensuring GDPR compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. The WHOIS data is missing, which raises concerns about domain legitimacy, but the professional presentation and valid contact details mitigate some risk. Overall, swisspor presents a credible business presence with room for improvement in security transparency and domain registration clarity.
swisspor AGswisspor.com
Energy · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
swisspor AG is a Swiss-based manufacturer specializing in energy-efficient building envelope products, including thermal insulation and sealing membranes. The company positions itself as a leader in Switzerland with a comprehensive product portfolio and a strong emphasis on quality and sustainability. Their website reflects a mature digital presence with multimedia content, configurator tools, and detailed product information. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but does not detract from the overall legitimacy and professionalism of the business. Contact information and social media presence further reinforce trustworthiness.
Solid Solutionssolidsolutions.so
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Solid Solutions is a small technology company specializing in AI-driven SaaS products and solutions. Their website showcases an ecosystem of AI tools including custom AI agents, AI email writers, and sales agents for WhatsApp. The company targets developers, engineers, and growth professionals interested in AI innovation. The technical infrastructure is based on Webflow CMS with standard web technologies and moderate performance. The website is well designed, mobile optimized, and provides clear contact options but lacks formal privacy and security policies. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. Overall, the company appears legitimate but should improve transparency and security documentation.
Farma HOLANY s.r.o.farmaholany.cz
Energy · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Farma HOLANY s.r.o. operates an ecological farm in the Czech Republic focused on sustainable agriculture, energy production via biogas, and hospitality services including stylish accommodation. The company positions itself as a regional leader in ecological farming with diversified offerings that include conventional and organic agriculture, livestock breeding, and renewable energy production. The website reflects a professional digital presence with clear business information and user-friendly navigation. Technically, the site uses common web technologies such as jQuery, Revolution Slider, and CookieHub for cookie consent management, alongside Google Analytics for visitor tracking. Security posture is moderate with cookie consent implemented but lacks visible security headers and published privacy or terms policies. WHOIS data is unavailable, which impacts trustworthiness but the presence of verified company badges and consistent branding supports legitimacy. Overall, the website is well-structured and informative but would benefit from enhanced security and compliance documentation.
- Jakub Kokeš
kotviacatechnika.sk
Manufacturing · Slovakia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Jakub Kokeš operates a specialized anchoring technology business primarily serving construction and industrial sectors in Slovakia and the Czech Republic. The company offers a wide range of fastening products such as screws, anchors, rivets, and related accessories, complemented by professional consulting and logistical services including free delivery and material returns. The website reflects a regional market position with multiple branch offices and localized contact points, targeting professional contractors and businesses in the construction industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Google Analytics, with a custom or proprietary CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. SEO and accessibility are adequately addressed, though some advanced security headers are missing. From a security perspective, the site enforces HTTPS and anonymizes user IPs in analytics, demonstrating a baseline security posture. Cookie consent mechanisms comply with GDPR requirements, providing users control over tracking preferences. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security maturity. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a moderate risk profile. Strategic enhancements in security transparency and technical hardening would further strengthen its posture.
Workbenchdigitizer.app
Technology
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Workbench' hosted at digitizer.app is a technology-focused single-page application built with Angular 14 and Material Design components. It appears to be a workbench or platform application, but lacks descriptive business content, contact information, or policy disclosures. The technical infrastructure includes modern frontend frameworks and integration with Document360 for documentation support, indicating a moderate level of digital maturity. Security posture is weak due to absence of visible HTTPS enforcement details, security headers, and privacy or cookie policies. No contact or incident response information is provided, limiting trust and compliance assurance. Overall, the site is functional but minimalistic, with room for significant improvements in security, privacy, and business transparency.
Other
56Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website media-play.pl currently presents no accessible content beyond an empty HTML structure, indicating either a placeholder or an inactive site. There is no metadata, scripts, or business information available to assess the company's operations, market position, or services. The lack of content and technical elements suggests a very low digital maturity level. Security posture is minimal with no HTTPS or security headers detected, and no privacy or compliance policies are present. Overall, the site poses a low trust and credibility profile due to the absence of meaningful content and security measures.
Government · Poland
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website represents the Court of Arbitration at the Polish Chamber of Commerce in Warsaw, a well-established institution providing arbitration and mediation services primarily to businesses and legal professionals in Poland and the surrounding region. The institution has a strong market position as the largest and best-known arbitration body in its area, with a history dating back to 1950. The website effectively communicates its services, events, and legal resources, targeting a professional audience seeking dispute resolution mechanisms. Technically, the site is built on WordPress with modern web technologies including Bootstrap, jQuery, and Google Analytics, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site is professional, trustworthy, and aligned with its institutional role.
PyWawpywaw.org
Technology · Poland
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
PyWaw is a well-established Python user group based in Warsaw, Poland, founded in 2011. It serves as a community hub for Python enthusiasts ranging from students to professional developers. The website provides information about regular meetings, speakers, sponsors, and partners, fostering knowledge exchange and community integration. The business model is community-driven, relying on sponsorships and partnerships to support events and activities. Technically, the site is built on a Python/Django stack with Bootstrap and jQuery for frontend, and integrates Google Maps and Google Analytics for enhanced user experience and tracking. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and serves its community well, but could enhance compliance and security practices.
- CEUR Workshop Proceedings
ceur-ws.org
Education · Germany
50Medium
NIS2 72 · GDPR 70
NIS2 72 · GDPR 70
CEUR-WS.org is a well-established academic open-access publishing platform specializing in computer science and information systems workshop proceedings. Operated by volunteers under the auspices of RWTH Aachen University, it provides free online access to scientific papers and maintains a recognized ISSN publication series. The website hosts a large volume of proceedings with detailed editorial and submission information, targeting researchers and academic workshop organizers. Technically, the site uses basic HTML and CSS, hosted by Sun SITE Central Europe, with moderate performance and basic mobile optimization. Security posture is moderate with domain transfer protections but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic, relying on legal disclaimers without explicit GDPR adherence or cookie policies. Overall, the domain registration is consistent and legitimate, reflecting a stable and trustworthy academic service.
Duplexduplex.com
Technology
72Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Duplex presents itself as a technology platform focused on enhancing digital content discovery and audience engagement to drive revenue. The website content is professionally designed using modern web technologies such as Next.js and React, indicating a contemporary digital infrastructure. However, the absence of WHOIS registration data and domain legitimacy information raises concerns about the domain's registration status or privacy protections in place. Security posture evaluation is limited due to missing SSL and security header information, and no privacy or cookie policies were detected, indicating potential compliance gaps. Overall, while the business proposition appears credible and the website is functional and well-structured, the lack of verifiable domain registration and security best practices lowers the trust and security confidence.
European Atherosclerosis Societyeas-society.org
Healthcare
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The European Atherosclerosis Society (EAS) operates a professional community website focused on sharing knowledge about the causes, treatment, and prevention of atherosclerosis and related diseases. The site targets healthcare professionals, researchers, and interested community members, positioning itself as a specialized non-profit knowledge-sharing platform in the healthcare sector. Founded in 2002, the society maintains a consistent and professional online presence with a clear mission and relevant content. Technically, the website is built on WordPress with the BuddyBoss platform, leveraging Cloudflare DNS services. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. The site uses minimal tracking via Fathom Analytics, reflecting a privacy-conscious approach. Overall, the website is trustworthy and safe for general audiences, but could improve in privacy transparency and security best practices.
- Intro
angiology.cz
Healthcare · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.angiology.cz/intro serves as an entry point for healthcare professionals, restricting access to medical content intended solely for this audience. The site uses a basic ASP.NET WebForms framework with legacy JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The content is minimal and primarily serves as a gatekeeper rather than a full informational portal. Security posture is moderate with HTTPS implied but lacking visible security headers and using outdated libraries. Privacy compliance is basic, with a cookie consent banner present but no accessible privacy policy on this page. WHOIS data is unavailable, likely due to privacy protection, which reduces transparency and trustworthiness. Overall, the site is functional but could benefit from modernization and enhanced security and compliance measures.

Healthcare · Czech Republic
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website slg.cz represents the official portal of the Czech Society of Medical Genetics and Genomics, affiliated with the Czech Medical Society Jana Evangelisty Purkyně. It provides comprehensive information on medical genetics, genomics, rare diseases, and related professional activities including conferences, seminars, and educational courses. The site targets healthcare professionals, geneticists, and researchers primarily in the Czech Republic and Slovakia. The business model is that of a non-profit professional society offering educational resources, event organization, and professional guidelines. The domain has been active since 2005, indicating a well-established presence in the medical genetics community.
- Hands Digital Ltd
handsdigital.co.uk
Technology · United Kingdom
59Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Hands Digital Ltd is a small, established digital agency based in Essex and Greater London, specializing in bespoke website design, development, SEO, PPC, and online marketing services. The company emphasizes a collaborative team with over 15 years of experience and does not outsource work or rely on templates, positioning itself as a trusted regional service provider. The website is built on WordPress CMS and integrates common digital marketing tools such as Google Analytics and Google Tag Manager, reflecting a moderate level of digital maturity and technical infrastructure. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and secure contact forms, but lacks advanced security headers and incident response disclosures. Privacy and cookie policies are present, though cookie consent mechanisms could be improved for GDPR compliance. The WHOIS data extraction failed due to querying the 'www' subdomain, which is invalid per Nominet rules, reducing domain trustworthiness from a registration perspective. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in security and privacy transparency.
- Východoslovenská distribučná, a.s.
vsdeshop.sk
Energy · Slovakia
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Východoslovenská distribučná, a.s. operates an online eShop portal providing electricity distribution-related services and equipment rental primarily for Slovak residential and commercial customers. The website offers a range of professional services including installation, maintenance, measurement, and rental of electrical devices, positioning itself as a regional energy distribution service provider. The site is well-structured, with clear navigation and relevant content in Slovak, targeting local customers. Technically, the website uses modern JavaScript libraries such as jQuery and Nivo Slider, with a cookie consent mechanism in place, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks explicit security headers and dedicated security policy pages. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is professional and trustworthy, though improvements in security policies and accessibility could enhance its posture.
- GLOBESY, s.r.o.
vypadokelektriny.sk
Energy · Slovakia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.vypadokelektriny.sk is a Slovak service platform operated by GLOBESY, s.r.o., focused on reporting and visualizing electricity outages. It provides users with a map-based interface to view current and planned outages and allows reporting of outages via multiple input methods. The platform targets Slovak electricity consumers and residents, offering a niche but essential public utility service. Technically, the site is built using Angular 10, integrates Google Maps API for geospatial visualization, and employs modern web technologies including Material Design components. It is hosted behind Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit privacy and security policies are missing. No direct contact information or incident response channels are provided, which is a compliance gap. Overall, the site is professional, trustworthy, and well-structured but would benefit from enhanced privacy and security disclosures.
Zväz odpadového priemysluzopsr.sk
Energy · Slovakia
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Zväz odpadového priemyslu (ZOPSR) is a Slovak industry association focused on promoting sustainable and efficient waste management solutions within Slovakia. The organization advocates for environmentally responsible waste processing technologies, energy recovery, and legislative improvements. Positioned as a key national player, ZOPSR serves waste industry stakeholders, policymakers, and environmental professionals through advocacy, research, and events. The website reflects a professional and consistent brand image, providing comprehensive information about the association's mission, activities, and membership.
OLOolo.sk
Energy · Slovakia
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
OLO is a Slovak company specializing in waste management and energy services for the Bratislava region. Established in 2003, it holds a strong local market position as a public utility provider focused on environmental sustainability and energy supply. The website reflects a professional and modern digital presence using React and Next.js technologies, supported by Cloudflare for DNS and CDN services. The company demonstrates good digital maturity with GDPR-compliant cookie consent mechanisms and integration of analytics tools like Microsoft Clarity. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security and incident response policies are not publicly available. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.
Marius Pedersenmariuspedersen.sk
Other · Slovakia
71Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Marius Pedersen is a Slovakian waste management service provider with a professional online presence focused on environmental and waste disposal services. The website is built on WordPress with a modern tech stack including SEO and anti-spam plugins, and it implements a comprehensive cookie consent mechanism compliant with GDPR principles. However, explicit privacy and terms of service policies are not found in the provided content, which is a gap in compliance. The technical infrastructure is moderate in performance and mobile optimization, with SSL properly configured but lacking security headers. Overall, the security posture is adequate but could be improved with additional headers and explicit policies. The website is trustworthy and professional, targeting businesses and municipalities in Slovakia. No adult or questionable content is present, and no WAF or blocking mechanisms interfere with content accessibility.
KOSITkosit.sk
Energy · Slovakia
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
KOSIT is a well-established Slovak company specializing in comprehensive waste management and energy services. With over 24 years of market presence, it serves a broad audience including residents, businesses, municipalities, and industrial customers. The company offers a wide range of services such as municipal waste collection, energy solutions via its KOSIT THERM division, digital tools for waste management, and educational initiatives. It holds memberships in several industry associations, reinforcing its market credibility and commitment to sustainable practices. Technically, the website is built on WordPress with a modern technology stack including jQuery, Drawer.js, and Slick Carousel. SEO is enhanced by the Yoast plugin, and cookie consent is managed via CookieYes, ensuring compliance with privacy regulations. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a public security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details align well with the business claims, supporting legitimacy. Overall, KOSIT's digital presence reflects a mature and credible business with room for improvement in security best practices and privacy transparency. Strategic enhancements in these areas would further strengthen trust and compliance.
INISOFT s.r.o.inisoft.sk
Other · Slovakia
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
INISOFT s.r.o. is a specialized software development company focused on environmental and waste management solutions, primarily serving clients in Slovakia and the Czech Republic. Their flagship product, ENVITA, supports legislative compliance and operational efficiency in waste evidence and reporting. The company also offers training, consulting, and customer support, positioning itself as a trusted partner in the environmental sector. The website reflects a mature digital presence with clear business information, active news updates, and strong customer engagement. Technically, the site employs modern web technologies including structured data and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.