Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,186001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
69,001–69,050 of 99,066
Menedzsment Fórummfor.hu
Media · Hungary
75Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Mfor.hu is a well-established Hungarian online news portal specializing in management, economic, and financial news. Founded in 2001, it serves a Hungarian-speaking professional and general audience interested in current affairs, investments, and economic analysis. The site offers a variety of content including articles, videos, podcasts, and financial calculators, supported primarily through advertising and subscription models. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising platforms with GDPR-compliant consent management. Security posture is solid with HTTPS and consent mechanisms, though additional security headers could enhance protection. The site is fully accessible with no WAF or blocking detected, and content is safe for general audiences without any adult or explicit material. Contact information is available via email and contact forms, with no phone numbers or physical addresses explicitly provided. Overall, mfor.hu demonstrates a mature digital presence with good content quality, technical implementation, and privacy compliance, making it a credible and trustworthy media source in its market.
Femina Média Kft.femina.hu
Media · Hungary
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Femina.hu is a well-established Hungarian online women's lifestyle magazine founded in 2000, operated by Femina Média Kft. The site offers a broad range of content including celebrity news, health, beauty, psychology, parenting, recipes, and quizzes, targeting primarily Hungarian-speaking women interested in lifestyle topics. The website demonstrates a mature digital infrastructure with extensive use of third-party analytics, advertising networks, and a GDPR-compliant consent management platform. Security posture is solid with HTTPS enforced and anonymized analytics, though some security headers could be improved. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences. Contact mechanisms rely on a third-party authentication service (Indapass), with no direct emails or phone numbers publicly listed. Overall, Femina.hu presents a professional, trustworthy, and content-rich media platform with good compliance and security practices.
- MetNet - Az időjárásról mindenkinek
metnet.hu
—
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Government · Hungary
75Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
HungaroMet Magyar Meteorológiai Szolgáltató Nonprofit Zrt. is the official Hungarian government meteorological service, providing comprehensive weather forecasts, climate data, air quality monitoring, and specialized meteorological services for sectors such as aviation and agriculture. The organization holds a strong market position as the national authority in meteorology, serving a broad audience including the general public, government agencies, and specialized industries. The website reflects this role with rich, relevant content and consistent branding. Technically, the website employs a custom or legacy CMS with jQuery 1.6.2 and Font Awesome for UI elements, alongside Google Analytics for visitor tracking. While the site is functional and moderately optimized, there is room for modernization, particularly in updating JavaScript libraries and enhancing mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, demonstrating compliance with GDPR. However, additional security headers are absent, and the use of an outdated jQuery version could pose vulnerabilities. No exposed sensitive data or critical security issues were detected. Incident response information and vulnerability disclosure mechanisms are not explicitly provided, representing an area for improvement. Overall, HungaroMet's website is a trustworthy and authoritative source for meteorological information in Hungary, with a solid security posture and good privacy compliance. Strategic enhancements in security headers, library updates, and incident response transparency would further strengthen its resilience and user trust.
Budapest időjárása - Köpönyegkoponyeg.hu
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
nlc - Neked. Veled. Érted.nlcafe.hu
—
63Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
vesilta.hutwn.hu
Media · Hungary
54Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
TWN.hu is a Hungarian media website offering a broad range of news and entertainment content including daily news, celebrity updates, lifestyle articles, crime reports, and sports news. The site targets a general Hungarian-speaking audience and operates primarily on an advertising-supported business model. The website is branded consistently and provides a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are present, indicating basic GDPR compliance. Technically, the site uses a modern technology stack including jQuery, Bootstrap, Owl Carousel, and Video.js, alongside multiple advertising and analytics scripts such as Google Analytics and Facebook SDK. The site is served over HTTPS, but lacks explicit security headers in the provided data, which could be improved. Performance is moderate, and SEO optimization is basic but present. From a security perspective, the site demonstrates a moderate security posture with HTTPS and cookie consent mechanisms but lacks visible security policies or incident response information. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data is consistent with the website's Hungarian media focus, supporting legitimacy. Overall, TWN.hu is a functional and moderately secure media website with room for improvement in security headers and explicit incident response policies. The site is suitable for general audiences and maintains a professional online presence.
- Kezdőlap - Concorde blog
concordeblog.hu
—
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
—
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
—
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
- Kontroll
kontroll.hu
Media · Hungary
75Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Kontroll.hu is a Hungarian online media platform delivering news, opinion pieces, and video content primarily targeting Hungarian-speaking audiences interested in current affairs and societal issues. The site also operates a webshop, indicating a diversified business model combining media content with e-commerce. The platform positions itself as an independent media outlet aiming to bridge opinion bubbles and provide a voice to diverse perspectives. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO and mobile optimization. It employs consent management tools and integrates advertising and analytics services like InMobi and Google Tag Manager, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, includes standard security headers, and uses a consent platform, but lacks explicit published security policies or incident response contacts. Overall, Kontroll.hu demonstrates a solid security posture with room for improvement in transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts.
- Femcafe
femcafe.hu
—
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
- WMN Média Kft.
wmn.hu
Media · Hungary
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
WMN.hu is a well-established Hungarian online women's magazine founded in 2015, offering a wide range of lifestyle, culture, health, and social issue content through articles, videos, and podcasts. The site targets Hungarian-speaking women and maintains a strong market position as a leading media outlet in its niche. The business model includes advertising and an e-commerce shop. Technically, the website uses a custom CMS built on the Plex Portal Framework, with common web technologies like jQuery, Owl Carousel, and integrates multiple third-party analytics and advertising platforms. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the website enforces HTTPS and GDPR compliance with a robust consent management system, though it could improve by implementing additional security headers and updating legacy libraries. Overall, WMN.hu demonstrates a mature digital presence with high content quality and trustworthiness.
Other
75Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
The website nepszava.hu is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any actual website content, metadata, or business information. Consequently, no meaningful business overview, technical infrastructure details, or security posture evaluation can be conducted. The site is protected by Cloudflare's WAF, indicating an intent to mitigate automated or malicious traffic but also limiting external analysis. From the technical perspective, the site uses Cloudflare's security and analytics services, but no CMS, frameworks, or hosting details are discernible. The lack of accessible content means no privacy, cookie, or terms of service policies are detectable, nor any contact or security policy information. Security posture cannot be fully assessed due to the blocking mechanism, but the presence of Cloudflare's challenge indicates a baseline security measure. No vulnerabilities or exposed data are visible, but the inability to access content limits the evaluation. Overall, the site is currently low risk from an external perspective due to the blocking, but also low transparency and trustworthiness for external users or analysts. Strategic recommendations focus on enabling controlled access for security and compliance audits and publishing clear privacy and contact information once accessible.
Selly Sp. z o.o.selly.pl
E-commerce · Poland
73Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
Selly Sp. z o.o. operates a modern e-commerce SaaS platform primarily targeting Polish online retailers and wholesalers. The platform offers comprehensive services including store setup, B2B wholesale capabilities, custom graphic templates, and extensive integrations with payment and accounting systems. The company emphasizes SEO optimization and marketing support, positioning itself as a competitive player in the Polish e-commerce market since 2015. Technically, the website is built on WordPress with the Flatsome theme, leveraging modern JavaScript libraries and Google Tag Manager for analytics. The site is well-optimized for performance and mobile devices, with clear navigation and professional design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be better documented. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. The absence of public WHOIS data for the domain slightly reduces trust but is mitigated by the company's visible certifications, client logos, and professional content. Overall, the website presents a trustworthy and mature digital presence suitable for its business model.
LeaseLink Sp. z o.o.leaselink.pl
Finance · Poland
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
LeaseLink Sp. z o.o. is a Polish fintech company specializing in online leasing and financing solutions for businesses. As part of the mBank group, it offers a fully digital leasing experience, enabling SMEs to finance a wide range of business purchases quickly and conveniently. The website demonstrates a mature digital presence with comprehensive content, user-friendly design, and strong branding consistency. Technically, the site leverages WordPress CMS with modern analytics and marketing integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, LeaseLink presents a trustworthy and professional online platform aligned with its business objectives.
Convertiser sp. z o.o.convertiser.com
Technology · Poland
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Convertiser sp. z o.o. operates a Polish-language affiliate marketing platform that enables publishers to monetize their online content through various widgets, APIs, and tools. Established in 2012, the company has positioned itself as a reliable intermediary between advertisers and publishers, offering a range of monetization solutions including price comparison widgets, product recommendation widgets, contextual linking, and coupon APIs. The platform targets website owners, bloggers, social media influencers, and other digital content creators seeking to generate revenue from affiliate marketing. Technically, the website is built using the Hugo static site generator, integrates Google Tag Manager for analytics, and uses Cloudflare for DNS services. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and domain lock statuses but lacks DNSSEC and some advanced security headers. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its business purpose.
Other
75Medium
NIS2 50 · GDPR 50
NIS2 50 · GDPR 50
The website img-statics.com currently presents no visible content or metadata, indicating it is either under development or inactive. The domain is registered since 2019 with a reputable registrar OVH sas and uses AWS DNS infrastructure, suggesting a legitimate registration and hosting setup. However, the absence of any business information, contact details, or policies severely limits the ability to assess the business or its market position. Technically, the site lacks any detectable technologies, scripts, or security configurations, which points to a minimal or placeholder site. Security posture is weak due to missing HTTPS and security headers, and no privacy or cookie policies are present to indicate compliance with data protection regulations. Overall, the site is low trust and low content quality, requiring significant improvements to be considered professional or secure.
Incore Holding AGincore.ch
Finance · Switzerland
59Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Incore Holding AG is a Swiss-based owner-managed group specializing in innovative financial and ICT solutions, serving banks, asset managers, financial intermediaries, and corporates. With over 40 years of experience, the group operates through subsidiaries including Incore Bank AG, Incore Technology AG, and Incore Asset Management Solution AG, offering a comprehensive suite of services from traditional banking to digital asset management and modular banking platforms. The company holds a strong market position in Switzerland with international branches and a focus on B2B services. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, well-structured, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent. However, explicit security policies and incident response contacts are not published. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, Incore demonstrates a mature digital presence with strong business credibility and compliance, suitable for its financial and technology sector audience.
detha - digital Solutions.detha.de
Technology · Germany
55Medium
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
detha - digital Solutions is a German-based small technology company specializing in digital transformation consulting, cloud services, professional IT services, and IT security. Their website presents a professional image with a focus on helping businesses optimize internal processes and generate new revenue streams through digital solutions. The technical infrastructure is built on WordPress with modern plugins such as Elementor and Slider Revolution, hosted likely by netcup, a German hosting provider. The site is well-optimized for SEO and mobile devices, with a cookie consent mechanism and privacy policy indicating GDPR compliance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security and incident response policies are not published. Overall, the website is trustworthy and professionally maintained, suitable for its target B2B audience.
Crypto Valley Journalcvj.ch
Media · Switzerland
65Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Crypto Valley Journal is a specialized media platform focused on delivering news, analysis, and educational content related to cryptocurrencies, blockchain technology, and financial products. It targets individuals and professionals interested in the Crypto Valley ecosystem and the broader crypto market. The website maintains a strong market position as a niche media outlet with partnerships and a consistent brand presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is compliant with GDPR and provides transparent privacy and cookie policies. The business credibility is supported by clear branding, partner affiliations, and active social media engagement.
Akces-Markt Paweł Stańczewskiakces-markt.pl
Retail · Poland
65Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
Akces-Markt Paweł Stańczewski operates an e-commerce platform specializing in accessories for phones, computers, cars, household appliances, and pet products. Founded in 2019 and based in Poland, the company targets general consumers seeking a wide range of electronic and household accessories at competitive prices. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages the Shoper e-commerce platform and integrates multiple marketing and analytics tools such as Google Analytics, Bing Ads, and Trustisto social proof. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though improvements are needed in DNS security and security policy disclosures. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the site is functional and credible but would benefit from enhanced privacy and security transparency.
Retail · Poland
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
iep24.eu is a Polish e-commerce website specializing in the retail of professional printing solutions including printers, plotters, monitors, and consumables such as toner and ink. The website targets business customers and professionals requiring high-quality printing equipment. It operates on the RedCart e-commerce platform and is hosted by home.pl S.A., a reputable Polish hosting and registrar provider. The site supports multiple languages (Polish, English, German) and multiple currencies, enhancing its accessibility to a broader audience. The business model focuses on direct online sales with promotional offers and product listings clearly presented. Technically, the website employs modern JavaScript libraries and integrates marketing automation tools like SalesManago and tracking services from Ceneo. It uses HTTPS for secure communication and implements a cookie consent mechanism compliant with GDPR principles, allowing users to manage their cookie preferences. However, the site lacks explicit privacy policy and terms of service pages, which are important for full compliance and user trust. The technical infrastructure is moderate in performance with good mobile optimization but could benefit from enhanced accessibility and security headers. From a security perspective, the website enforces HTTPS and manages cookie consent responsibly, including deletion of third-party cookies based on user preferences. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of security headers and a vulnerability disclosure policy indicates room for improvement in security posture. The lack of explicit contact information for security incidents or data protection officers also suggests limited transparency in incident response readiness. Overall, iep24.eu presents as a legitimate, professional online retailer with a solid technical foundation and moderate security measures. To enhance trust and compliance, it is recommended to publish comprehensive privacy and terms of service documents, implement additional security headers, and provide clear contact channels for security and privacy concerns.
Retail · Poland
50Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Net-s.pl is a Polish e-commerce retailer specializing in a wide range of consumer products including computers, notebooks, household appliances (AGD), RTV, toys, tools, and networking equipment. The company positions itself as a trusted local online store offering competitive pricing and a broad product catalog targeting general consumers in Poland. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technical infrastructure leverages common JavaScript libraries such as jQuery and Owl Carousel, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and basic security headers present, though there is room for improvement with additional headers and explicit cookie consent mechanisms. The absence of public WHOIS data reduces transparency but is common for small e-commerce businesses. Overall, the site is safe, trustworthy, and compliant with GDPR requirements based on available privacy policies.
- KKaufland Marketplace GmbH
kaufland.pl
Retail · Poland
71Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kaufland Marketplace GmbH operates a large-scale e-commerce platform primarily serving the Polish market, as indicated by the domain www.kaufland.pl. The company provides an online retail marketplace with a broad product offering, targeting general consumers. The website is protected by Cloudflare's security services, including a Turnstile CAPTCHA challenge, which currently blocks direct access to the site's content. This security measure indicates a proactive approach to mitigating automated attacks and abuse but limits the ability to fully assess the site's content and user experience. From a technical perspective, the site leverages Cloudflare's infrastructure for hosting and security, which is a strong indicator of modern web infrastructure. However, the lack of visible security headers and absence of privacy or cookie policies in the accessible content suggest areas for improvement in transparency and compliance. The WHOIS data for the domain is not publicly available from the Polish registry, which is common for domains with privacy protection but reduces transparency. Security posture is moderate due to the presence of Cloudflare WAF and CAPTCHA protections, but the absence of visible security headers and policies lowers the overall security maturity score. The business information provided in the footer is clear and consistent with a legitimate retail marketplace entity. Overall, the site demonstrates a reasonable security baseline but requires enhancements in privacy compliance and content accessibility to improve trust and user experience.
- Kajt
kajt24.pl
Retail · Poland
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Kajt24.pl is a Polish e-commerce retailer specializing in household appliances, garden equipment, and electronics. The website offers a broad product catalog with clear categorization and multiple payment options including installment plans. The business targets general consumers in Poland seeking affordable and convenient online shopping for home and garden products. Technically, the site uses a modern tech stack including jQuery, Swiper.js, and Google Analytics 4 with a strong focus on user consent and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the domain is a minor concern but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the site presents a trustworthy and user-friendly online shopping experience.
Sferissferis.pl
Retail · Poland
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Sferis is a Polish online retail company specializing in consumer electronics, home appliances, computers, and mobile phones. The website presents a professional e-commerce platform targeting general consumers in Poland, offering a wide range of products with competitive pricing and fast shipping. The company appears to be well-established in the Polish retail market, focusing on technology and household goods. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for GDPR compliance. Marketing and analytics tools such as SalesManago, Google Analytics, and Facebook Pixel are integrated to optimize user engagement and advertising effectiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. The absence of WHOIS data limits domain registration insights, but the website's content and compliance measures suggest legitimacy. Overall, the site is professionally designed, user-friendly, and trustworthy, with moderate to good technical performance and compliance maturity.
Allegroallegro.pl
E-commerce · Poland
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Allegro is a leading Polish e-commerce platform established in 1999, offering a wide range of products through an online marketplace model. It targets general consumers in Poland and neighboring countries with localized versions. The website demonstrates a good level of digital maturity with modern web technologies, responsive design, and secure HTTPS implementation. However, explicit privacy and cookie policies are not detected in the provided content, which is a compliance gap. Security posture is solid with HTTPS and strict referrer policies, but DNSSEC is not enabled and no public security or incident response policies are found. Overall, Allegro presents a trustworthy and professional online presence with room for improvement in privacy and security transparency.
- OOleOle
oleole.pl
E-commerce · Poland
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
OleOle is a prominent Polish e-commerce retailer specializing in household appliances (AGD), consumer electronics (RTV), and IT products including smartphones. The website positions itself as a competitive online store offering popular brands such as Samsung, LG, and Whirlpool, with an emphasis on affordable pricing and free delivery. The company targets a broad general audience in Poland, leveraging a modern digital storefront with structured data to enhance search engine visibility and user experience. Technically, the website employs modern web technologies including Angular framework, Google Tag Manager for analytics, and Google Fonts for typography. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant blocking or WAF detected, allowing full content access. From a security perspective, the site uses HTTPS and integrates Google verification tags, but lacks visible security headers and explicit privacy or cookie policies in the provided content. The absence of WHOIS data for the domain is a concern, as it limits the ability to verify domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected, but improvements in security headers and compliance documentation are recommended. Overall, OleOle presents as a professional and trustworthy e-commerce platform with room for enhancement in privacy compliance and security posture. The lack of WHOIS transparency slightly reduces trust but does not negate the evident business legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and verifying domain registration details to strengthen trust and compliance.
- Hírstart
hirstart.hu
Media · Hungary
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Hírstart is a prominent Hungarian news aggregator portal that consolidates fresh news from a wide range of domestic and international sources, covering topics such as politics, economy, lifestyle, technology, and sports. It operates under the Central Médiacsoport media group, positioning itself as one of Hungary's most popular news search platforms. The website offers additional services like RSS feeds and podcasts to enhance user engagement. Technically, the site employs a modern JavaScript stack including jQuery, Google Tag Manager, and Gemius analytics, alongside robust advertising integrations such as Google Adsense and ADOcean. The site is well-optimized for mobile devices and maintains good SEO practices.
- Hírkereső - A hírek itt kezdődnek!
hirkereso.hu
Media · Hungary
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Hírkereső.hu is a Hungarian news aggregator portal providing fresh news updates from multiple Hungarian and international news sources. The website offers categorized news, weather forecasts, horoscopes, blogs, and recipes, targeting a general Hungarian audience interested in current events. It holds a significant market position as one of the largest news portals in Hungary. Technically, the site uses standard web technologies including JavaScript, CSS, and Google Analytics for tracking. Mobile optimization is basic with a dedicated mobile site. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or terms of service pages. Cookie consent is implemented, indicating some GDPR awareness. No direct contact or security incident response information is provided. Overall, the site is functional, content-rich, and trustworthy but could improve in privacy transparency and security best practices.
Börsenverein des Deutschen Buchhandels e.V.friedenspreis-des-deutschen-buchhandels.de
Other · Germany
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Friedenspreis des Deutschen Buchhandels website represents a well-established cultural institution in Germany, responsible for awarding a prestigious peace prize in literature since 1950. The organization operates under the Börsenverein des Deutschen Buchhandels e.V., a recognized entity in the publishing and bookselling sector. The website serves as an informational platform targeting the general public interested in literature, peace, and cultural awards. It maintains a consistent brand presence and provides comprehensive information about the prize and its history. Technically, the website is built on TYPO3 CMS, a robust and mature content management system, and employs Cookiebot for GDPR-compliant cookie consent management. Hosting is provided by Anexia, as indicated by the nameservers. The site integrates several third-party services including Vimeo and YouTube for video content, and Matomo for analytics, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate, with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses standard security headers, although explicit security policies and incident response contacts are not published. The cookie consent mechanism is comprehensive and transparent, supporting GDPR compliance. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or site content, indicating a trustworthy domain and hosting setup. Overall, the website is professional, secure, and compliant with privacy regulations, serving its cultural mission effectively. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party integrations to sustain security and compliance.
CONTENTshiftcontentshift.de
Media · Germany
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
CONTENTshift operates as an accelerator program dedicated to fostering innovation and new business models within the content industry. The website positions itself as a niche player supporting startups and professionals in media and content sectors, offering accelerator programs, events, and networking opportunities. The business targets German-speaking markets with a focus on content industry stakeholders. Technically, the website is built on TYPO3 CMS, hosted by Anexia, and employs modern consent management via Cookiebot, alongside Matomo analytics for visitor insights. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could benefit from additional security headers and regular audits of third-party scripts. Privacy compliance is strong, with a comprehensive privacy policy and cookie declaration aligned with GDPR requirements. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration is consistent with the business profile. Overall, the website is professional, trustworthy, and well-positioned within its market niche.
E-commerce · Poland
75Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
LITERIA.pl is an established Polish online bookstore founded in 2008, offering a range of books, magazines, and subscription services. The website is built on the Magento CMS platform and integrates marketing tools such as Salesmanago for customer engagement and tracking. The business targets general consumers in Poland seeking online book retail services. Technically, the site employs standard web technologies including JavaScript and CSS, with moderate performance and basic mobile optimization. Security posture is limited, with no advanced security headers or privacy policies detected, and DNSSEC is not enabled for the domain. The domain registration is consistent and long-standing, indicating legitimacy. However, the absence of visible privacy and cookie policies, as well as contact information, suggests areas for compliance and trust improvement.
Media · Switzerland
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
REMP (WEMF AG für Werbemedienforschung) is a reputable Swiss media research organization specializing in audits, media studies, data solutions, and consulting services for the advertising media sector. The website demonstrates a strong market position with professional content targeting media professionals, advertisers, and agencies. The company offers a comprehensive suite of services including certification audits, audience measurement studies, and data-driven marketing tools. The site is well-branded and consistent with industry standards, supported by partnerships with recognized Swiss media associations. Technically, the website employs modern JavaScript libraries such as Alpine.js and Chart.js, integrates Google Tag Manager and LinkedIn Insight for analytics, and uses cookie consent mechanisms aligned with GDPR requirements. Hosting appears to be stable and performance moderate, with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with canonical tags and hreflang attributes. From a security perspective, the site enforces HTTPS and uses standard tracking and marketing scripts responsibly. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent banner. Contact information is transparent and professional. Overall, the website presents a low risk profile with a high degree of trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and considering a security.txt file to improve vulnerability disclosure transparency.
—
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Ringier Axel Springer Polska sp. z o.o.raspaid.pl
Media · Poland
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Onet Premium is a subscription-based digital media platform operated by Ringier Axel Springer Polska sp. z o.o., offering access to premium journalistic content from multiple well-known Polish media brands. The platform targets Polish-speaking users interested in high-quality news, podcasts, and exclusive editorial content. The website demonstrates a professional and consistent brand presence with a clear business model focused on content aggregation and subscription revenue. Technically, the site employs modern web technologies including Google Analytics, Tag Manager, Gemius, and a paywall system by Piano, ensuring a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are absent. Privacy compliance is robust, with comprehensive privacy and cookie policies and GDPR consent mechanisms in place. Overall, the site is trustworthy and well-positioned in the Polish media market.
- GS1 Switzerland
gs1.events
Retail · Switzerland
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
GS1 Switzerland is a professional standards organization focused on providing barcode and identification standards, training, and networking events primarily for retail, logistics, and healthcare sectors in Switzerland. The website is well-structured, content-rich, and targets industry professionals seeking knowledge transfer and collaboration opportunities. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit incident response and vulnerability disclosure information are not found. Overall, the site demonstrates high professionalism and trustworthiness with strong alignment between WHOIS data and business identity.
MOVEMENT'32movement32.org
Transportation · Switzerland
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
MOVEMENT'32 is a Swiss national initiative focused on strengthening the goods supply cycle through workforce development, outreach, and knowledge exchange in logistics and supply chain sectors. The website presents a professional and consistent brand image, supported by industry testimonials and partnerships, notably with Swiss Supply. Technically, the site is built on the Jimdo CMS platform, incorporating modern web technologies and providing a responsive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The lack of WHOIS data limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is well-positioned to serve its target audience of supply chain professionals in Switzerland.
VieCuri Medisch Centrumviecuri.nl
Healthcare · Netherlands
70Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
VieCuri Medisch Centrum is a prominent top clinical hospital located in Noord-Limburg, Netherlands, offering both basic and highly specialized medical care. The website reflects a well-established healthcare provider with a clear market position serving local and regional patients. Key services include specialist medical care, patient portals, blood testing, and comprehensive patient information. The hospital maintains a strong digital presence with accessible and user-friendly design, supporting patient engagement and information dissemination. Technically, the website employs modern web technologies including AngularJS, Bootstrap, and jQuery, hosted on Microsoft Azure infrastructure. It integrates Matomo for analytics and CookieYes for GDPR-compliant cookie consent management, demonstrating a mature approach to privacy and data protection. Accessibility features such as ReadSpeaker webReader enhance usability for diverse users. From a security perspective, the site enforces HTTPS and uses anti-forgery cookies and bot management mechanisms. However, some standard security headers are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear cookie consent and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with the healthcare sector's requirements. It effectively balances user experience, privacy, and security, supporting VieCuri's reputation as a leading medical center.
Samhealthsamhealth.nl
Healthcare · Netherlands
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Samhealth is a specialized healthcare market research company based in the Netherlands, founded in 2012. The company focuses on combining market knowledge with insights into how people function in healthcare to uncover drivers and needs. Their website reflects a professional and consistent brand presence, targeting healthcare professionals and organizations. Technically, the site is built on WordPress using Elementor and optimized with NitroPack, delivering good performance and mobile responsiveness. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and credible with a stable domain registration and clear contact information.
Chronic Kidney Disease Researchprime-ckd.com
Healthcare
51Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website 'Chronic Kidney Disease Research' serves as a specialized platform focused on disseminating research and information related to chronic kidney disease. It targets healthcare professionals and researchers, offering insights under the tagline 'Less pills, better pills.' The site is built on WordPress using the Enfold theme and incorporates modern SEO practices via the Yoast SEO plugin. It employs Cookiebot for GDPR-compliant cookie consent management, reflecting a commitment to privacy and regulatory compliance. However, the absence of visible privacy policy and contact information pages limits transparency. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with a good security posture, though it lacks some advanced security headers and formal incident response contacts. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional presentation and content quality. Overall, the site is functional and trustworthy for its niche audience but would benefit from enhanced transparency and security documentation.
- NNierstichting
nierstichting.nl
Non-profit · Netherlands
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Nierstichting is a well-established Dutch non-profit organization dedicated to promoting kidney health, supporting kidney patients, and funding research. The website reflects a professional and consistent brand presence with a clear focus on health awareness and patient support. The organization holds recognized certifications such as ANBI and CBF, enhancing its trustworthiness. Technically, the website is built on a modern React/Next.js framework, incorporating accessibility and SEO best practices, and uses reputable third-party services for analytics and cookie consent management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and explicit security policies are not publicly disclosed. Overall, the website is safe, compliant with GDPR, and provides a good user experience for its target audience.
Haymarket Media Grouphaymarket.com
Media · United Kingdom
60Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Haymarket Media Group is a well-established international media company founded in 1996, specializing in publishing and content services with over 70 market-leading titles serving specialist audiences. The company operates globally with a strong presence in the UK and other countries, offering services including publishing, events, podcasts, and medical education. The website reflects a professional and comprehensive digital presence with excellent content quality and branding consistency. Technically, the website is built on WordPress CMS, leveraging modern technologies such as jQuery, Bootstrap, Font Awesome, and Yoast SEO for optimization. Hosting and DNS services are supported by Cloudflare, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with caching and performance enhancements via W3 Total Cache. From a security perspective, the site enforces HTTPS, includes anti-clickjacking headers, and uses a reputable cookie consent mechanism (OneTrust). However, DNSSEC is not enabled, and additional security headers could be added to further harden the site. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting Haymarket's credibility as a trusted media company. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to enhance transparency and security posture.
Medigomedigo.ch
Healthcare · Switzerland
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Medigo is a Swiss healthcare service platform providing real-time information on emergency medical centers, primarily serving the Canton of Vaud. The website targets patients seeking urgent care and medical centers wanting visibility. It offers key services such as real-time wait times, center recommendations based on location and transport, and coverage of six medical specialties. The company positions itself as a regional leader in emergency medical information within Swiss Romandy. Technically, the website uses modern JavaScript libraries including Alpine.js and FontAwesome, integrates Google Tag Manager for analytics, and implements a comprehensive cookie consent mechanism. The site is mobile optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are evident. From a security perspective, the site enforces HTTPS, includes CSRF tokens, and uses cookie consent for analytics tracking. Security headers are not explicitly detected, and no formal security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website is professional, trustworthy, and secure with minor areas for improvement such as adding security policies and terms of service. The domain WHOIS data aligns well with the business claims, supporting legitimacy. No blocking or WAF mechanisms interfere with content access.
Banque Cantonale Vaudoisepointsforts.ch
Finance · Switzerland
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Banque Cantonale Vaudoise (BCV) operates a professional online magazine focused on the economy of the Vaud canton in Switzerland. The website provides financial market commentary, investment strategies, regional economic news, and entrepreneurship insights targeted at residents and businesses in the region. BCV leverages this platform to engage its audience with relevant financial content and maintain its position as a leading regional bank. The site is well-branded, consistent, and offers subscription options including RSS feeds and email notifications. Technically, the website is built on Adobe Experience Manager (AEM) CMS, utilizing modern JavaScript libraries and Adobe Launch for tag management. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS and includes monitoring scripts from Dynatrace, but lacks visible security headers and explicit cookie consent mechanisms. From a security perspective, the site shows good practices such as secure forms and no exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data confirms the domain's legitimacy and consistency with the bank's identity, supporting a high trust level. Overall, the website is professional, trustworthy, and content-rich, but could improve its privacy compliance and security posture by adding cookie consent, security headers, and incident response information.
- Index Cooperative
indexcoop.com
Finance
68Medium
NIS2 35 · GDPR 53
NIS2 35 · GDPR 53
Index Cooperative is a decentralized autonomous organization (DAO) focused on providing innovative DeFi products such as leveraged tokens and yield optimization strategies. The company positions itself as a market leader in on-chain structured products, offering automated and user-friendly tools for crypto investors and traders. Their product suite includes leverage tokens with built-in liquidation protection and smart looping strategies to amplify returns. The website demonstrates a high level of professionalism, with comprehensive content, strong branding, and clear navigation. Technically, the site is built using modern frameworks including Astro and React, with performance and mobile optimization rated as excellent. The use of advanced frontend technologies and integration with DeFi platforms like Ethereum and Arbitrum reflects a mature digital infrastructure. Analytics and error monitoring are implemented via Sentry, and cookie consent mechanisms are in place to ensure privacy compliance. From a security perspective, the project has undergone multiple independent smart contract audits and maintains an active bug bounty program through Immunefi, indicating a strong commitment to security best practices. The website enforces HTTPS and likely employs standard security headers, although explicit header details are not visible. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website and project present a low-risk profile with strong trust indicators, though the absence of WHOIS registrant data and explicit incident response contacts slightly reduce the business credibility score. Strategic recommendations include publishing clearer incident response contacts, security.txt files, and enhancing transparency around data protection roles to further strengthen trust and compliance.
- HHuman Verification
fpsonetwork.com
Other
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website fpsonetwork.com is currently inaccessible beyond an AWS WAF CAPTCHA security challenge page, which prevents direct content analysis. The domain is registered with Amazon Registrar since 2014 and uses AWS DNS and WAF services, indicating a legitimate hosting infrastructure. However, no business, contact, or policy information is visible on the landing page, limiting assessment of the company's operations or compliance posture. The technical setup leverages AWS security mechanisms but lacks visible security headers or DNSSEC. Overall, the site appears to be protected but content is blocked, resulting in a low AI score and limited insights.
Manufacturing · United States
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The American Society of Mechanical Engineers (ASME) is a globally recognized non-profit professional organization dedicated to advancing multidisciplinary engineering and allied sciences. Founded in 1880, ASME offers a broad range of services including engineering standards development, certification and accreditation programs, professional training courses, publications, and industry events. The organization serves a diverse audience of mechanical engineers, students, and industry professionals worldwide, maintaining a strong market position as a trusted source for engineering standards and professional development. Technically, the ASME website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks such as React and Vue.js, integrated with multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Mouseflow, HubSpot, and Facebook Pixel. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation structure. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. It includes privacy and cookie policies with consent mechanisms, indicating good compliance with GDPR and related regulations. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response disclosures are not found, suggesting room for improvement in transparency. Overall, ASME's website reflects a high level of professionalism, trustworthiness, and compliance suitable for a large, established non-profit organization. The domain WHOIS data is privacy protected, which is justified given the organization's profile. The site integrates multiple related service domains for career services, e-commerce, digital publications, and certification management, enhancing its ecosystem. Strategic recommendations include enhancing security policy transparency, publishing incident response and vulnerability disclosure information, and maintaining vigilant third-party script audits to sustain security posture.
Biozbioz.com
Technology
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Bioz operates as an AI-powered search engine specializing in life-science research products, leveraging advanced technologies such as Natural Language Processing and Machine Learning to extract and summarize data from scientific literature. The platform targets researchers in academia and industry, providing data-driven product recommendations and ratings to accelerate scientific experimentation and drug discovery. The company maintains a professional online presence with consistent branding and a user-friendly interface optimized for desktop and mobile users. Technically, the website employs a modern technology stack including React components, Bootstrap, jQuery, and various UI libraries, indicating a mature digital infrastructure. The site is well-structured with SEO best practices and accessibility considerations, although some improvements in accessibility could be made. Performance is moderate, with no major issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front for Bioz's AI-driven scientific research services. However, the absence of WHOIS data and registrant information introduces some uncertainty regarding domain legitimacy. Strategic improvements in security transparency and domain registration disclosure are recommended to enhance trust and compliance.