Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,186001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
69,951–70,000 of 99,066
Lopi Fireplaces Australialopi.com.au
Energy · Australia
62Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Lopi Fireplaces Australia is a well-established company specializing in high-quality wood and gas fireplaces, including custom luxury models under the DaVinci brand. With a strong market presence since 1990 and over 70 dealerships across Australia, the company targets homeowners and businesses seeking premium heating solutions. Their website reflects a professional retail and distribution business model with comprehensive product offerings and customer support services. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies such as jQuery, Bootstrap, and various plugins for enhanced user experience. Hosting is managed through a regional provider consistent with the Australian market. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS and CAPTCHA on forms, but lacks important security headers and cookie consent mechanisms, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but lacking detailed GDPR adherence and no cookie consent banner. Overall, the website is trustworthy and professional with a solid business foundation. Strategic enhancements in security headers, privacy compliance, and cookie consent would improve the security posture and regulatory adherence, further strengthening user trust and legal compliance.
New York International Auto Showautoshowny.com
Transportation · United States
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The New York International Auto Show website represents a well-established automotive event with a long history dating back to 1896. The site offers comprehensive information about the event, including exhibits, tickets, news, and multimedia content. The technical infrastructure is based on WordPress with modern analytics and marketing integrations such as Google Analytics, Facebook Pixel, and New Relic monitoring. The security posture is generally good with HTTPS enforced and domain registration protections, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is limited due to the absence of visible privacy and cookie policies on the homepage. Overall, the website is professional, trustworthy, and serves its target audience effectively.
Evo Cyclesevocycles.co.nz
Transportation · New Zealand
74Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Evo Cycles is a New Zealand-based retail business specializing in bicycles and related accessories, operating over 30 stores nationwide. The website presents a professional e-commerce platform with a broad product range including mountain, electric, road, and kids bikes. The technical infrastructure leverages modern web technologies such as Vue.js, Bootstrap, and various analytics and marketing tools, indicating a moderate level of digital maturity. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. Overall, the website is functional and professionally designed but would benefit from enhanced security and privacy compliance measures.
- Squirrel Group Limited
squirrel.co.nz
Finance · New Zealand
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Squirrel Group Limited is a New Zealand-based financial services company specializing in mortgage brokerage, savings, investing, and property finance solutions. Established in 2005, the company has positioned itself as a trusted independent mortgage broker with a strong market presence, having arranged over $22 billion in mortgages. Their services cater primarily to New Zealand residents seeking home loans, investment opportunities, and bespoke funding solutions for property development. The website reflects a professional and user-friendly digital presence, leveraging modern technologies such as Next.js and Azure hosting to deliver fast and mobile-optimized experiences. Social media integration and customer testimonials further enhance trust and engagement. However, the site lacks explicit privacy and cookie policies, which are critical for compliance and user trust.
Full Time Sports Bar & Eateryfulltimesportsbar.co.nz
Hospitality · New Zealand
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Full Time Sports Bar & Eatery is a hospitality business based in Auckland, New Zealand, specializing in providing a sports bar experience with live sports on big screens, food and beverage services, private functions, and gift vouchers. The website is professionally designed using Webflow CMS and integrates third-party services such as Shopify for e-commerce and NowBookIt for bookings. The business targets sports fans and hospitality customers seeking a community-focused venue for sports viewing and celebrations. Technically, the website uses modern web technologies and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled, but lacks security headers and privacy compliance documentation. WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. Overall, the website presents a legitimate and professional business presence but should improve privacy compliance and security headers to enhance trust and regulatory adherence.
Pullman Auckland hotel & Apartmentspullmanauckland.co.nz
Hospitality · New Zealand
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Pullman Auckland hotel & Apartments is a premium 5-star luxury hotel located in the heart of Auckland CBD, New Zealand. The business offers a comprehensive range of hospitality services including luxury rooms, serviced apartments, dining, spa, event spaces, and wedding packages. It is part of the Accor group, leveraging strong brand recognition and a global hospitality network. The website reflects a mature digital presence with professional design, clear navigation, and integrated booking capabilities. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of public WHOIS data suggests privacy protection, which is common and justified for this business type. Overall, the site demonstrates high business credibility and trustworthiness with strong customer engagement through social media and review platforms.
Glaister Keeganglaister.co.nz
Real Estate · New Zealand
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Glaister Keegan is a well-established full-service law firm based in Auckland, New Zealand, with a history dating back over 100 years. The firm specializes in property law among other legal services and maintains a strong reputation for integrity, professionalism, and client satisfaction. Their website reflects a professional and comprehensive presentation of their services, team, and history, targeting individuals and businesses seeking expert legal advice. Technically, the website is built on a modern platform (Duda) with good performance, mobile optimization, and integration of analytics tools such as Google Analytics and Snowplow. Security posture is generally good with HTTPS and service workers implemented, but lacks some security headers and visible cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trustworthiness, but the overall business credibility remains high due to the professional content and clear contact information.
Celebration Box NZcelebrationbox.co.nz
E-commerce · New Zealand
73Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Celebration Box NZ operates an e-commerce platform specializing in gift boxes, flowers, and sweet treats delivered across New Zealand. The website is built on the Shopify platform, leveraging modern web technologies and marketing tools such as Google Tag Manager and Hotjar to enhance user experience and track engagement. The site presents a professional and consistent brand image with clear product offerings targeting general consumers seeking gift delivery services. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified for full trust. The website lacks visible privacy and cookie policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, but security headers could be improved. Overall, the site is functional and well-designed but requires enhancements in privacy compliance and domain legitimacy verification.
C3 Constructionc3construction.co.nz
Real Estate · New Zealand
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
C3 Construction is a New Zealand-based construction company specializing in commercial, industrial, and multi-unit residential projects primarily in Auckland and the Bay of Plenty. As part of the 3Group property group, it benefits from a strong market position and diversified real estate and development subsidiaries. The company emphasizes quality, precision, and client peace of mind in its project delivery. The website reflects a professional and modern digital presence with a comprehensive portfolio showcasing their projects and services. Technically, the site is built on WordPress with modern frameworks and libraries, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's business credibility and market presence.
- MMilestone Foundation Limited
milestonefoundation.co.nz
Non-profit · New Zealand
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Milestone Foundation Limited is a New Zealand-based non-profit organization established in 2015 to support local communities, particularly focusing on education, health, and Asian cultural promotion. The foundation operates under the Gambling Act 2003 and is regulated by the Department of Internal Affairs. Its primary business model involves distributing grants funded by Class 4 Gaming Venues and engaging with local Asian communities. The website serves as an informational and application portal for grants and membership inquiries. Technically, the website is built on the Weebly platform, utilizing legacy jQuery 1.8.3, Google Analytics, and Snowplow for tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, it lacks modern security headers and up-to-date libraries, which could pose security risks. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection but lacks visible security headers and privacy policies, indicating gaps in compliance and security best practices. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and structure appear legitimate for a small non-profit. Overall, the website presents a moderate risk profile with room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and verifying domain registration details to enhance trust and compliance.
- PPioneer Pies: NZ's Best Classic & Gluten-Free Pies Delivered NZ Wide
pioneerpies.co.nz
—
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
- Autex
autexglobal.com
Other · New Zealand
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Autex is a New Zealand-based company specializing in the design and supply of acoustic panels and insulation products. The company positions itself as a leader in the acoustic solutions market in New Zealand, emphasizing sustainability and carbon-neutral products. Their website showcases a modern, professional design with detailed product information and project case studies, targeting architects, builders, designers, and consumers seeking acoustic solutions. The technical infrastructure is built on modern web technologies including Next.js and React, with integrations for analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and HubSpot. The website is well-optimized for SEO, mobile responsiveness, and accessibility, providing a fast and user-friendly experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and published security policies are absent. Privacy compliance is limited due to missing privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, suggesting the domain may be new or privacy protected, which warrants further verification. Overall, the website reflects a credible and professional business presence with room for improvement in privacy and security transparency.
The Wild Rosethewildrose.co.nz
Retail · New Zealand
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Wild Rose is a New Zealand-based florist and gift store specializing in fresh flower delivery and gift arrangements across Auckland and nationwide. The company operates an e-commerce platform powered by Shopify, complemented by a physical store in Takanini, Auckland. Their market position is that of a local trusted florist offering a variety of floral services including wedding, funeral, and dried flower arrangements. The website demonstrates a mature digital presence with integrated marketing, analytics, and delivery logistics tools. Technically, the site leverages modern e-commerce technologies and third-party integrations to enhance user experience and operational efficiency. Security posture is strong with HTTPS, security headers, and age verification for alcohol sales, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-optimized for its target market.
One NZonegoodkiwi.nz
Telecommunications · New Zealand
73Medium
NIS2 55 · GDPR 58
NIS2 55 · GDPR 58
One NZ is a New Zealand telecommunications provider emphasizing sustainability and corporate responsibility. Their website content highlights environmental stewardship, social equity, and governance principles aligned with New Zealand cultural values. The company targets both personal and business customers within New Zealand, offering mobile and network services with a focus on digital inclusion and environmental impact reduction. Technically, the site uses modern frameworks like React and integrates multiple analytics and tracking tools, hosted primarily on Vodafone's infrastructure. Security posture is solid with HTTPS and reCAPTCHA usage, though lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the domain registration and WHOIS data support the legitimacy and consistency of the business profile.
Hāpai Tūhonohapaituhono.co.nz
Education · New Zealand
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Hāpai Tūhono is a New Zealand-based non-profit organization specializing in Māori career development and equity employment services. The website presents a clear mission to connect quality career services to Rangatahi and Whānau, emphasizing opportunity equity and sustainable success for Māori communities. The organization collaborates with employers and community partners to foster environments where Māori can thrive vocationally and socially. The website content is culturally aligned and professionally presented, targeting Māori individuals, families, employers, and community groups.
- L'Authentique
lauthentique.co.nz
Retail · New Zealand
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
L'Authentique is a New Zealand-based artisan producer specializing in authentic French charcuterie and sausages crafted from premium free-range meats. The company leverages traditional French techniques brought by imported French craftsmen, positioning itself as a reputable and award-winning player in the local artisan food market. The website reflects a professional and consistent brand image, targeting consumers seeking high-quality French-style meat products. Technically, the site is built on the Squarespace platform, utilizing modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers such as HSTS. Privacy and cookie policies are absent, indicating a compliance gap. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high due to clear contact information, social media presence, and multiple industry awards. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.
Nomadsnomads.co.nz
Non-profit · New Zealand
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nomads is a New Zealand-based non-profit golf club that organizes golf events and raises funds for charitable causes. The website reflects a well-established organization with a domain registered since 2002, indicating a stable presence in the golf community. The site targets golf players and supporters, offering event booking, member services, and branded clothing. Technically, the website is built on WordPress using modern plugins such as Elementor and Events Manager, with payment integration via Stripe and analytics through Google Analytics. The site is mobile-optimized and has good SEO practices but lacks explicit privacy and cookie policies, which are important for compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the website is professional and trustworthy but could improve privacy compliance and security hardening.
- Sylvia Creative | Branding, Websites & Graphic Design NZ
sylviacreative.co.nz
—
68Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Animation | Animation Design Studio | Aucklandamadigitalstudios.com
Other
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The domain www.amadigitalstudios.com is not registered according to the raw WHOIS data, indicating that the website is currently inactive or offline. The HTML content provided is minimal and does not contain substantive business or contact information. Consequently, no meaningful business overview or market positioning can be derived. The absence of privacy policies, cookie banners, terms of service, or contact details further suggests the site is not operational or publicly accessible. Technically, no CMS, hosting provider, or technology stack could be identified due to the lack of accessible content. Security posture cannot be assessed as no security headers or SSL configuration details are available. Overall, the site appears to be non-existent or suspended, representing a critical risk for trust and legitimacy.
The Lion Foundationlionfoundation.nz
Non-profit · New Zealand
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Lion Foundation is a well-established charitable trust in New Zealand, operating since 1985 and focused on distributing funds raised from community gaming to eligible community organizations. The website reflects a reputable non-profit entity with a clear mission to support thousands of good causes nationwide. It provides comprehensive information on funding criteria, application processes, audit procedures, and contact details, targeting community organizations and the general public in New Zealand. The organization maintains a moderate-sized team with clear leadership and account management roles. Technically, the website is built on WordPress with a modern tech stack including popular plugins and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements are recommended in DNS security and HTTP security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and functional, supporting the organization's mission effectively.
Non-profit · New Zealand
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Whutupōro Rīki Whaikaha o Aotearoa (PDRLNZ) is a small non-profit organization established in 2022, focused on empowering physically disabled individuals in New Zealand through Rugby League. The organization aims to provide opportunities for growth and community engagement beyond the sport itself. The website reflects this mission with clear contact information and social media presence, primarily on Facebook. Technically, the site is built on WordPress using Oxygen Builder and integrates a custom Facebook feed plugin, hosted with DNS managed by Cloudflare. Performance and mobile optimization are moderate to good, though SEO and accessibility are basic. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent with the organization's founding date and business claims, with privacy protection justified for this type of entity.
Mark Grey Carriersmarkgreycarriers.co.nz
Transportation · New Zealand
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Mark Grey Carriers is a specialized freight delivery company operating primarily in New Zealand's North Island, focusing on customized delivery routes and safe handling of fragile freight using specialized equipment. The company targets businesses requiring reliable and flexible freight services, positioning itself as a dependable regional carrier with a customer-centric approach. The website is built on WordPress with modern plugins and SEO tools, reflecting a moderate level of digital maturity and good technical infrastructure. Security posture is adequate with HTTPS and spam protection but lacks DNSSEC and security headers, and there are no published privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended to enhance risk management and customer trust.
Crispcrisp.help
Technology
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Crisp operates a SaaS platform providing helpdesk hosting services to over 200,000 customers, supporting their user bases at scale. The website analyzed is a minimal informational helpdesk domain with basic content describing the service and linking to Crisp's main knowledge base. The technical infrastructure is simple, relying on standard HTML and CSS without advanced frameworks or CMS detected. The site is accessible without WAF or blocking mechanisms, but lacks privacy, cookie, or terms of service policies, and does not provide contact or security incident response information. WHOIS data is unavailable due to privacy or registry restrictions, which slightly reduces transparency but is not uncommon for SaaS providers. Overall, the site is safe, professional, and targeted at business users needing helpdesk support.
- TThe CapTable
the-captable.com
Media · India
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The CapTable is a premium news platform operated under YourStory, focusing on delivering in-depth insights and analysis of the Indian startup ecosystem. Founded in 2021, it targets entrepreneurs, investors, and business professionals interested in Indian startups and economic trends. The platform offers subscription-based content, interviews, and categorized news articles, positioning itself as a trusted source for startup-related information in India. Technically, the website uses modern web technologies including Next.js, Cloudflare DNS, and integrates analytics tools like Google Tag Manager and Piano Analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the domain is well-registered with GoDaddy and uses HTTPS with domain lock status flags, though DNSSEC is not enabled. However, the site lacks visible privacy and cookie policies, GDPR compliance indicators, and explicit contact information, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance its privacy compliance and security transparency.
DCM Agencydcmagency.com
Technology · Netherlands
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
DCM Agency is a Dutch digital marketing agency specializing in LinkedIn lead generation, web design, and Google Ads services targeted at B2B companies. The company positions itself as a growth partner for businesses seeking to increase leads, appointments, and sales through proven digital marketing strategies. The website is professionally designed using WordPress with the Divi theme and incorporates modern tracking and SEO tools such as Google Analytics, Usermaven, and Rank Math SEO. Contact information and structured data are clearly presented, enhancing business credibility. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, although the active and professional website presence mitigates some risk. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the website demonstrates a mature digital infrastructure with room for improvement in privacy compliance and domain registration transparency.
Bluey B.V.bluey.dev
Technology · Netherlands
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Bluey B.V. is a small, specialized technology company based in the Netherlands, focusing on delivering custom web and application development services, including e-commerce, API integrations, AI solutions, and process automation. Their market position is that of a nimble, client-focused team emphasizing transparency and efficiency. The website reflects a high level of professionalism with excellent design, clear navigation, and relevant content tailored to business clients. Technically, the site uses modern frameworks such as Laravel, Tailwind CSS, Alpine.js, and React, hosted behind Cloudflare, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though formal security policies and vulnerability disclosures are absent. Privacy compliance is partial, lacking cookie consent mechanisms. Overall, the site is trustworthy and well-maintained, with clear contact channels and client references.
Grafyskagrafyska.nl
Other · Netherlands
71Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Grafyska is a small creative design agency based in the Netherlands, founded in 2020. The company specializes in graphic design, web design, and social media marketing services aimed at businesses seeking distinctive and effective visual communication. Their website demonstrates a strong brand identity with professional design and clear navigation, targeting business clients who want to enhance their marketing presence. The site includes customer testimonials and links to social media channels, reinforcing trust and engagement. Technically, the website employs modern web technologies including JavaScript, CSS, SVG graphics, and Alpine.js for interactivity. It is mobile-optimized and performs well with fast loading times. The site uses multiple tracking and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Pinterest Tag, but lacks a cookie consent mechanism, which is a privacy compliance gap. The domain is secured with HTTPS and anonymizes IP addresses in analytics, reflecting a moderate privacy posture. From a security perspective, the website has a good SSL configuration but lacks security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, showing a domain registration date in 2020 and no privacy protection, which supports legitimacy. Overall, the security posture is adequate but could be improved with additional headers and privacy controls. The overall risk assessment is low, with the main recommendations focusing on enhancing privacy compliance by implementing cookie consent, adding security headers, and publishing security and incident response policies. These improvements would strengthen trust and reduce potential compliance risks while maintaining the website's professional and user-friendly experience.
Fundafunda.nl
Real Estate · Netherlands
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Funda is the leading online real estate marketplace in the Netherlands, specializing in residential property listings for sale and rent. The platform offers comprehensive services including property search, market insights, and valuation tools, targeting individuals and businesses interested in Dutch real estate. The website demonstrates a strong market position with a large user base and a subsidiary focused on business real estate. Technically, the site is built on modern frameworks such as Nuxt.js, leveraging CDN hosting for fast performance and excellent mobile optimization. Security measures include HTTPS enforcement and multiple security headers, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.
KijkMijnHuissitekick.digital
Real Estate · Netherlands
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Moving Digital operates as a specialized online marketing provider for the real estate sector in the Netherlands, offering tools such as Sitekick, a property value indication and lead generation tool. The company is registered as KijkMijnHuis and has an established digital presence since 2017. The website is built on WordPress using the Enfold theme and integrates multiple marketing and analytics platforms including HubSpot and Pipedrive, indicating a mature digital marketing infrastructure. The site is professionally designed with good SEO and mobile optimization, targeting real estate professionals seeking lead generation solutions. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found on the analyzed page, which is a compliance gap. Overall, the domain registration and website content are consistent and trustworthy, with no signs of malicious or adult content.
DatHuisdathuis.nl
Real Estate · Netherlands
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
DatHuis is a Dutch company specializing in marketing products and lead generation platforms tailored for real estate professionals. The website positions itself as an all-in-one solution for lead generation and cross-selling within the real estate sector, targeting professionals in the Netherlands. The business model is B2B, focusing on providing digital marketing tools and services to enhance client acquisition and retention for real estate agents and related professionals. The company was founded in 2016, consistent with the domain registration date, and operates with a small-sized business profile. Technically, the website is built on WordPress with a modern tech stack including HubSpot marketing tools, Cookiebot for cookie consent, Chargebee for payment processing, and Intercom for customer engagement. The site is well-optimized for SEO with Yoast SEO plugin and includes structured data for enhanced search engine understanding. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. Cookie consent is properly implemented, indicating awareness of privacy compliance, although no explicit privacy policy or terms of service pages were detected in the provided content. No direct contact or incident response information is available, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy front for its target audience, with strong marketing and analytics integration. Recommendations include enabling DNSSEC, adding security headers, publishing privacy and security policies, and providing clear contact information for security and business inquiries to strengthen compliance and security posture.

Real Estate · Netherlands
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The Nederlandse Coöperatieve Vereniging van Makelaars en Taxateurs in onroerende goederen NVM U.A. (NVM) is a well-established cooperative association representing over 5500 real estate professionals in the Netherlands. Founded in 1898 and headquartered in Utrecht, it holds a leading position in the Dutch real estate sector, providing membership services, industry representation, and market data. The website reflects this professional stature with clear branding and relevant content targeting both industry members and consumers. Technically, the website employs modern digital tools including Google Tag Manager, Google Analytics, Cookiebot for cookie consent management, and LinkedIn Insight tags. The site is served over HTTPS with appropriate security headers, indicating a strong security posture. Performance and mobile optimization are good, though accessibility could be improved. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature privacy approach. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks publicly available security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the business identity, confirming legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements could focus on publishing explicit security policies and enhancing accessibility to further strengthen trust and compliance.
Goes & Roos B.V.goesenroos.nl
Real Estate · Netherlands
67Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Goes & Roos B.V. is a Netherlands-based company specializing in custom website development and SEO services tailored specifically for real estate agents. With over 20 years of experience and a client base exceeding 500 real estate offices, the company holds a strong market position in the real estate digital services sector. Their offerings include bespoke website design, maintenance, and integration with major real estate platforms such as Realworks, NVM, and VBO. The website reflects a professional and consistent brand image targeting real estate professionals seeking tailored digital solutions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and employs SEO best practices via Yoast SEO. Google Tag Manager is used for analytics, indicating a moderate level of user tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.
MARRY & MEtheperfectwedding.nl
Hospitality · Netherlands
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
ThePerfectWedding.nl is a well-established Dutch wedding planning platform operated by the company MARRY & ME. It offers a comprehensive suite of services including a supplier directory, planning tools such as checklists and budgets, and inspirational content tailored to couples planning their weddings in the Netherlands. The platform is professionally designed with a clear navigation structure and mobile-optimized responsive design, supporting a positive user experience. Technically, the site uses modern JavaScript frameworks (likely Vue.js), Google Tag Manager, Cookiebot for consent management, and Google advertising technologies, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit privacy policies and terms of service pages were not found in the provided content. WHOIS data is consistent with the business claims, showing transparency and legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, but could improve privacy compliance and contact transparency.
- HHendriks Makelaardij
hendriks.nl
Real Estate · Netherlands
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Hendriks Makelaardij is a well-established Dutch real estate brokerage firm operating since 1997, offering comprehensive services including buying, selling, mortgage advice, and insurance. The company maintains a strong local presence with multiple offices across key Dutch cities, positioning itself as a trusted local expert. The website reflects a professional and user-friendly design with clear navigation and relevant content tailored to individuals seeking real estate services in the Netherlands. Technically, the site employs modern web technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance and user interaction, with DNSSEC enabled for domain security. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, though no explicit security policy or incident response information is published. Overall, the website demonstrates a mature digital presence with good business credibility and moderate to high security standards.
- DDatHuis
mijnwaardecheck.nl
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website mijnwaardecheck.nl currently serves as a minimal placeholder page displaying a 'Not found' message and referencing DatHuis as the creator of the application. The domain is registered with team.blue nl B.V. since December 2020, indicating a relatively new presence. The site lacks substantive content, contact information, privacy or cookie policies, and security features such as HTTPS or security headers. Technically, the site is basic with minimal optimization and no detected analytics or tracking. Security posture is weak due to absence of HTTPS and security policies. Overall, the site appears to be under development or inactive, limiting its business and security maturity.
- Gambling Help Queensland
gamblinghelpqld.org.au
Government · Australia
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Gambling Help Queensland is a government-funded non-profit organization providing free, confidential, 24/7 support services for individuals and families impacted by gambling in Queensland, Australia. The website offers a range of services including helpline support, online chat counselling, self-help tools, educational resources, and training for gambling providers. It positions itself as a trusted leader in gambling harm reduction within the region. The technical infrastructure is based on WordPress CMS with modern front-end technologies such as Tailwind CSS and Slick Carousel, supported by Cloudflare DNS and CDN services. The site is mobile-optimized and SEO-friendly, with Google Analytics integrated for user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site demonstrates good business credibility and technical maturity appropriate for a government service.
Other · United States
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website humblegroup.shop is currently a parked domain with minimal content indicating it is for sale. There is no substantive business information, contact details, or privacy and security policies present. The technical infrastructure is basic, relying on standard HTML and JavaScript with external ad and tracking scripts from third-party domains. No HTTPS or security headers are detected, which significantly lowers the security posture. The WHOIS data shows a suspicious future creation date, suggesting possible data errors or placeholder information. Overall, the site lacks professionalism, trust indicators, and compliance features, making it unsuitable for business use in its current state.
Privab Grossisterna ABprivab.se
Retail · Sweden
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Privab Grossisterna AB operates as a wholesale distributor of food and beverage products in Sweden, targeting business customers with an online webshop and multiple physical locations. The company maintains a professional and consistent web presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on the Litium CMS platform, utilizing modern JavaScript libraries and tracking tools such as Google Tag Manager and Microsoft Application Insights, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, explicit security headers and incident response policies are not publicly disclosed, representing areas for improvement. The absence of WHOIS data for the queried subdomain www.privab.se suggests a possible misquery or subdomain usage, but the overall website content and contact details support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details for trust assurance.
Lev Dietlevdiet.com
Healthcare
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Lev Diet is a specialized nutrition company offering scientifically backed weight loss and sports nutrition plans. The company operates internationally with country-specific domains and physical centers. Their website is built on WordPress using popular plugins for SEO and page building, presenting professional and relevant content targeted at individuals seeking healthy weight loss and sports nutrition. Technically, the site uses HTTPS and Google reCAPTCHA for security but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact is available only via a web form, with no direct emails or phone numbers published. Overall, the website is functional and moderately secure but would benefit from improved privacy and security practices.
Bayn Solutionsbaynsolutions.com
Other · Sweden
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Bayn Solutions is a Swedish company specializing in plant-based sugar substitute solutions, primarily targeting the food industry segments such as confectionery, bakery, dairy, beverage, and sports nutrition. Their flagship products include EUREBA®, a patented 1:1 sugar replacement with sweetened fibers, and NAVIA®, a range of high-intensity stevia sweeteners. The company operates under the parent company Humble Group and maintains a professional online presence with clear branding and contact information. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, Bayn Solutions presents as a credible, niche B2B player in the health-conscious food ingredient market.
- KKryddhuset i Ljung AB
kryddhuset.se
Retail · Sweden
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kryddhuset i Ljung AB operates a retail website specializing in spices, seasoning products, and related accessories such as spice grinders and jars. The company targets consumers and businesses interested in culinary spices and seasoning blends, offering a product catalog with detailed images and ingredient information. The website is hosted on One.com and built using their web editor platform, featuring image sliders and galleries to showcase products. Technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is legitimate and consistent with the business branding but would benefit from enhanced security and compliance measures.
Amerpharmaamerpharma.com
Manufacturing
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Amerpharma is a medium-sized manufacturing and private label company specializing in nutritional supplements, energy gels, syrups, sauces, and natural juices. The company targets health-conscious consumers, athletes, and vegan markets with a diverse product portfolio emphasizing zero sugar, fat free, and vegan-friendly options. The website is built on modern technologies including SvelteKit, Firebase, and Cloudflare DNS, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, contact information, and formal security or incident response disclosures, which are important for compliance and trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled and security headers are not evident. Overall, the website is professional and content-rich but would benefit from enhanced privacy compliance and security transparency to improve trust and regulatory adherence.
Vitargovitargo.se
E-commerce · Sweden
71Medium
NIS2 25 · GDPR 48
NIS2 25 · GDPR 48
Vitargo.se is an established e-commerce website specializing in sports nutrition products, particularly carbohydrate supplements favored by endurance athletes and fitness enthusiasts. The site leverages the Shopify platform, integrating modern web technologies and analytics tools such as Facebook Pixel and Shopify Analytics to optimize user experience and marketing efforts. The website demonstrates a good level of technical maturity with responsive design, SEO optimization, and basic accessibility features. Security posture is solid with HTTPS enforced and form protection via hCaptcha, although some advanced security headers and DNSSEC are not implemented. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of explicit terms of service, security policies, and vulnerability disclosure pages suggests areas for improvement. Overall, the domain registration data supports the legitimacy and maturity of the business, reflecting a consistent and trustworthy online presence.
Tweektweeksweets.com
E-commerce · Sweden
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Tweek is a Swedish e-commerce business specializing in confectionery products branded as 'Sweets with benefits.' The website presents a professional and visually appealing platform built on WordPress using the Avada theme, enhanced with translation capabilities via Weglot. The company appears to target a general audience interested in sweets, with a product catalog prominently displayed. The domain is well-established since 2016, supporting the business's legitimacy. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Technical infrastructure is modern but could benefit from enhanced security headers and better analytics configuration. Overall, the business demonstrates a solid market presence but should improve privacy and security transparency.
Oy Soya Abjalotofu.fi
Retail · Finland
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Oy Soya Ab operates the Jalotofu brand, a Finnish organic tofu producer based in Tammisaari. The company offers a range of plant-based protein products and provides recipe content to engage consumers interested in sustainable vegetarian food. The website reflects a mature digital presence with a well-structured WordPress CMS, WooCommerce for e-commerce, and integrated marketing tools such as Google Analytics and Tag Manager. The site is fast, mobile-optimized, and accessible, supporting a positive user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although DNSSEC is not implemented and no explicit security or incident response policies are published. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
- ProBrands
probrands.com
Retail · Sweden
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ProBrands is a small Swedish retail company specializing in sports nutrition products such as bars, drinks, snacks, whey protein, and vitamins. The company targets both everyday exercisers and elite athletes, positioning itself as a provider of high-quality products at reasonable prices. The website is professionally designed using WordPress with modern technologies including Bootstrap and Weglot for multilingual support, indicating a moderate level of digital maturity. Hosting is provided via Loopia, a known Swedish hosting provider. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal security policies on the site. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but could improve in compliance and security transparency.
HealthyCo ABhealthyco.se
Retail · Sweden
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
HealthyCo AB is a Swedish company specializing in the production and retail of health-conscious food products such as protein spreads, nut butters, chocolates, and sugar-free treats. The company targets health-aware consumers seeking tasty yet balanced snack options. Their market position is that of a niche player emphasizing no added sugar and quality ingredients. The website is built on WordPress with modern plugins and frameworks, hosted on Loopia servers, and optimized for mobile devices with good SEO practices. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available but limited to email and physical address. Overall, the website is professional and trustworthy but could improve in security and compliance areas.
Green Sales Distributions ABwellibites.com
Retail · Sweden
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Wellibites is a Swedish company specializing in the production and sale of wellness candy that is sugar-free, vegan, gluten-free, and enriched with vitamins and minerals. The company targets health-conscious consumers seeking healthier candy alternatives and operates through e-commerce and retail partnerships with major Swedish retailers such as ICA, Coop, and 7-Eleven. The website is professionally designed, mobile-optimized, and provides detailed product information and social media engagement. Technically, the site is built on WordPress with WooCommerce and uses common plugins for SEO, analytics, and marketing. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active business presence and retail partnerships mitigate some risk. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.
SwedishCandy.comswedishcandy.com
Retail · Sweden
51Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SwedishCandy.com is a Swedish confectionery brand specializing in crafting and retailing traditional and modern Swedish candies. The company emphasizes quality, authenticity, and Swedish craftsmanship, targeting a general audience interested in premium candy products. The business operates primarily through an e-commerce model, supported by a professionally designed WordPress website using Elementor and Google services for analytics and bot protection. The domain is long-standing, registered since 2003, and is consistent with the business's claims, enhancing trustworthiness. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and safe for general audiences but would benefit from improved privacy and security practices.
HEROESweareheroes.one
Other
59Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
HEROES is a small transformational coaching business focused on awakening the inner hero within individuals by combining spiritual awakening with leadership and ambition. The website presents a professional and consistent brand image targeting individuals seeking personal growth and transformation. Technically, the site is built on Webflow with modern JavaScript libraries and tracking tools such as Google Analytics and Hotjar, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS assumed but lacks visible advanced security headers or explicit security policies. Privacy compliance is basic with a privacy and cookie policy present but no explicit GDPR statements or incident response information. The absence of WHOIS data reduces domain trust slightly, but the overall professional presentation and clear contact information support moderate business credibility. Strategic recommendations include enhancing security headers, expanding privacy and incident response disclosures, and verifying domain registration details to improve trust.