Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,184001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
71,401–71,450 of 99,067
- Starcasino
starcasino.be
Hospitality · Belgium
73Medium
NIS2 27 · GDPR 73
NIS2 27 · GDPR 73
Starcasino.be is a leading online casino platform in Belgium, offering a wide range of gambling services including slots, dice games, roulette, blackjack, live casino, tournaments, and virtual sports. The website targets adult users interested in legal and safe online gambling experiences. The business is well-established with a domain age of over 10 years, indicating maturity and market presence. The platform leverages modern web technologies such as React and Next.js, hosted on Vercel, ensuring good performance and mobile optimization. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is strong with HTTPS and security headers implemented, but contact information and incident response channels are not clearly provided, limiting transparency. Overall, the site is professional and functional but could improve privacy compliance and user support channels.
- Sagevas S.A
betfirst.be
Other · Belgium
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
betFIRST is a Belgian online gambling platform offering a comprehensive range of services including sports betting, casino games, live casino, and dice games. The company positions itself as a pioneer in the Belgian market, targeting adult users interested in gambling and sports betting. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. The platform integrates multiple payment methods and maintains an active social media presence, enhancing its market credibility. Technically, the website employs modern technologies such as jQuery, Bootstrap, Google Tag Manager, and Cloudflare services, indicating a mature digital infrastructure. The site is mobile-optimized and implements a detailed cookie consent mechanism, reflecting awareness of privacy regulations. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and Cloudflare Bot Management, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected, but the absence of incident response contacts and vulnerability disclosure policies suggests areas for enhancement. The domain registration details align well with the business claims, supporting legitimacy. Overall, betFIRST presents a trustworthy and professional gambling platform with solid technical foundations and compliance efforts. Strategic improvements in security transparency and privacy documentation would further strengthen its posture.
- Netball Australia
netball.com.au
Media · Australia
70Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Netball Australia operates netball.com.au as the official digital platform for netball news, fixtures, results, and community engagement in Australia. The website serves as a comprehensive resource for fans, players, and stakeholders, providing live scores, video content, and information about teams and competitions such as Suncorp Super Netball and the Origin Diamonds. The site is well-positioned as the authoritative source for netball-related content in the country, supported by strong branding and social media presence. Technically, the website is built on Drupal 9 with Commerce 2, leveraging Cloudflare for DNS and CDN services, and integrates Google Tag Manager and New Relic for analytics and performance monitoring. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and reputable DNS services but lacks visible security headers and explicit privacy and cookie policies on the homepage. No vulnerabilities or suspicious patterns were detected in the WHOIS data or site content. The domain registration is consistent with the business purpose, enhancing trustworthiness. Overall, netball.com.au is a professional and credible sports media platform with solid technical infrastructure. However, it would benefit from enhanced privacy compliance, explicit security policies, and improved security header implementation to strengthen its security posture and regulatory adherence.
Tennis Australiatennis.com.au
Non-profit · Australia
69Medium
NIS2 22 · GDPR 58
NIS2 22 · GDPR 58
Tennis Australia is the official governing body for tennis in Australia, responsible for promoting tennis participation, organizing national and international tournaments including the Australian Open, and supporting players, coaches, and clubs nationwide. The website reflects a mature and authoritative presence with comprehensive content tailored to players, parents, coaches, and fans. The technical infrastructure is modern, leveraging WordPress CMS, jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The site is well-optimized for mobile and accessibility, with fast performance and clear navigation. Security posture is strong with HTTPS, security headers, and secure login mechanisms, though it lacks a publicly visible security policy or incident response page. Privacy compliance is good with clear privacy and terms policies, but could be improved with a cookie consent banner and explicit GDPR notices. WHOIS data is unavailable due to privacy protection, which is common for organizations of this type. Overall, the site is professional, trustworthy, and well-maintained.
- PPGA of Australia
pga.org.au
Other · Australia
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
PGA of Australia is a well-established non-profit organization dedicated to supporting golf professionals and tournaments across Australia. The website serves as an official platform for golf news, live scores, tournament schedules, and professional education. It targets golf professionals, enthusiasts, and stakeholders within the Australian golf community. The organization maintains a consistent brand presence and offers key services including tournament management, professional development, and membership support. Technically, the website is built on WordPress with AngularJS and Bootstrap frameworks, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and DNS services are provided by reputable providers including Cloudflare. From a security perspective, the site uses HTTPS and implements some best practices, but lacks comprehensive security headers and cookie consent mechanisms. No vulnerability disclosure or incident response policies are publicly available. Privacy compliance is partial, with a basic privacy policy present but no cookie banner or terms of service page. Overall, the website is professional and trustworthy, with moderate technical maturity and a solid business credibility score. Strategic improvements in privacy compliance, security headers, and transparency would enhance the security posture and user trust.
Media · Australia
71Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Rugby.com.au serves as the primary digital platform for Australian rugby news, fixtures, results, and ticketing. It targets rugby fans and sports enthusiasts, providing comprehensive coverage of rugby union events including national teams and Super Rugby competitions. The website leverages a modern technical infrastructure based on Next.js and React, supported by AWS Cloudfront CDN for content delivery. Integration of analytics and marketing tools such as Google Analytics, Hotjar, and Facebook Pixel indicates a mature digital marketing approach. Security posture is strong with HTTPS enforcement and reCAPTCHA v3 usage, though explicit privacy and cookie policies are not detected in the provided content. The WHOIS data is privacy protected, which is common for media websites and does not significantly detract from trustworthiness. Overall, the site is professional, content-rich, and well-positioned in its niche.
Australian Football Leagueafl.com.au
Media · Australia
74Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
The Australian Football League (AFL) official website serves as the primary digital platform for delivering comprehensive sports content including news, videos, fixtures, scores, and related information to Australian football fans and the general public. The site is well-positioned as a leading sports media entity in Australia, offering additional services such as ticket sales, fantasy sports, and merchandise shopping. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, service workers, and multiple analytics and tracking tools to optimize user experience and performance. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for AFL-related content.
Sportmonkssportmonks.com
Technology
72Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Sportmonks is a technology company specializing in providing reliable and comprehensive sports data APIs, primarily focusing on football, cricket, and Formula 1. The company targets developers, sports clubs, media, and betting platforms, offering real-time data solutions with a strong emphasis on accuracy, affordability, and developer-friendliness. Their market position is supported by partnerships with recognized brands and a growing user base. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, ensuring fast performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are lacking. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the professional website and business presence mitigate immediate trust issues. Overall, Sportmonks presents a mature digital presence with room for improvement in transparency and security documentation.
Alfa Shirtalfashirt.be
Retail · Belgium
56Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Alfa Shirt is a well-established Belgian company specializing in personalized company clothing, workwear, and textile printing services. Founded in 1993, it holds a strong market position as a local and sustainable textile printer and embroidery atelier with showrooms in Oostkamp and Leuven. The website reflects a professional B2B business model focused on delivering end-to-end textile personalization services including printing, embroidery, labeling, packaging, stock management, and delivery. The company emphasizes quality, customization, and local production, targeting businesses and organizations in Belgium. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and AWS S3 for media hosting. It includes multilingual support and SEO optimizations. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a visible cookie consent banner but no explicit privacy or terms policies found. Analytics usage is moderate with Google Analytics and Tag Manager integrated. Overall, the website is professional and trustworthy with room for improvement in security and compliance documentation.
- River Woods
riverwoods.net
Retail · Belgium
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
River Woods operates as a European fashion retailer offering timeless apparel and accessories for women, men, and children. The website targets a broad audience with multi-language support and a clear e-commerce business model. The company appears to have a medium-sized market presence focused on retail fashion. Technically, the site is built on Magento, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Hotjar, and TikTok Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and reCAPTCHA integration, though security headers and explicit security policies are missing. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. WHOIS data is unavailable, which reduces trustworthiness and suggests the need for domain registration verification. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.
3Motion3motion.be
Manufacturing · Belgium
58Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
3Motion is a Belgium-based medium-sized company specializing in visual communication and large format printing services. Founded in 2010, it offers a comprehensive range of services including design, production, packaging, and 3D printing. The company emphasizes innovation, sustainability, and a customer-centric approach, positioning itself as a trusted partner in the visual communication sector. Their market presence is supported by certifications such as the VCDO certificate and partnerships with industry organizations. Technically, the website is built on the ProcessWire CMS and integrates multiple marketing and analytics tools including HubSpot, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.
The Compass Groupcompassgroup.com
Non-profit · United States
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Compass Group is a well-established nonprofit fundraising consulting firm with over three decades of experience. Their services include planning studies, campaign management, capacity building, development audits, leadership development, and readiness assessments. The company targets nonprofit organizations seeking to enhance their fundraising capabilities and campaign success. The website reflects a professional and consistent brand image with strong client testimonials and case studies, positioning them as a trusted player in the nonprofit consulting sector. Technically, the website is built on WordPress using a modern theme and integrates SEO and analytics tools such as Yoast SEO and Google Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are consistent and reputable, with GoDaddy.com as the registrar and hosting provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and publicly available security policies or incident response information. No cookie consent mechanism is present, which may affect GDPR compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in privacy compliance and security headers would enhance their security posture and regulatory adherence.
- Atelier ACÀN
atelieracan.be
Retail · Belgium
71Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Atelier ACÀN is a Belgian bespoke tailoring business specializing in high-quality men's suits, wedding attire, and casual tailored clothing. Operating primarily in Ghent and Antwerp, the company targets discerning male customers seeking timeless style and craftsmanship. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools such as Google Tag Manager, Facebook Pixel, and Klaviyo for analytics and customer engagement. GDPR compliance is well implemented with a clear cookie consent mechanism and privacy policy. However, the domain WHOIS data is restricted, limiting transparency about ownership and registration details, which slightly impacts trustworthiness. Overall, the website presents a professional, secure, and user-friendly experience with strong branding and clear business focus.
- Konvert
konvert.be
Other · Belgium
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Konvert is a Belgian employment platform that offers a wide range of job opportunities, including temporary and permanent positions. The company targets job seekers and employers within Belgium, providing a user-friendly interface to search and apply for jobs. The website is built using modern web technologies such as Vue.js and Nuxt.js, with integration of Google services like Tag Manager and reCAPTCHA to enhance functionality and security. The site is mobile-optimized and presents a professional design with clear navigation. Security measures include HTTPS and bot protection, though some security headers are not explicitly confirmed. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy page found in the analyzed content. The domain WHOIS data is restricted by the registry, limiting the ability to verify registrant details, but the website's professional appearance supports its legitimacy. Overall, Konvert demonstrates a solid digital presence with room for improvement in privacy transparency and security header implementation.
AA Drinkaa-drink.com
Retail · Netherlands
54Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
AA Drink is a well-established sports drink brand with a domain registered since 1996, offering a range of hydration and energy products targeted at sports enthusiasts. The website supports e-commerce through a webshop and loyalty programs such as Boost Points, complemented by a mobile app to engage users in an active lifestyle. The brand positions itself as a leader in individual sports hydration with a consistent and professional online presence. Technically, the website uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries, hosted likely via NLHosting with a reputable registrar. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google reCAPTCHA but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. No WAF or blocking mechanisms were detected, and the domain WHOIS data supports legitimacy and consistency with the business claims. Overall, the site is functional and professional but could improve privacy compliance and security posture.
Other
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website at https://www.newholland.com/Pages/GeoLoc.html serves as a minimal geolocation redirect page that attempts to detect the visitor's country and redirect them to a localized version of the site. The page contains no meaningful business content, metadata, or contact information. The domain WHOIS data is missing or indicates the domain is unregistered, which raises significant concerns about the legitimacy or proper configuration of the domain. Technically, the site uses jQuery and loads an external geolocation script from a CDN, but lacks modern SEO, accessibility, or security features. There are no privacy or cookie policies, no contact details, and no visible security headers or HTTPS enforcement in the provided data. Overall, the site appears to be a placeholder or redirector rather than a fully developed business website.
Equans BEequans.be
Energy · Belgium
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Equans BE is a global leader in the energy and technical services market, specializing in designing and installing solutions to improve operational, environmental, and energy performance for installations, buildings, industries, distribution networks, and infrastructures. The company targets business clients primarily in Belgium and operates at an enterprise scale. The website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Algolia for search functionality, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy image consistent with a large enterprise in the energy sector.
Nameshift.commws.be
Technology · Netherlands
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Nameshift.com operates a domain marketplace service specializing in safe and efficient domain name transfers using an escrow model. The company emphasizes buyer protection by ensuring payment only after successful domain transfer, with no additional fees for buyers. The business is positioned as a niche player in the domain transfer market, targeting individuals and businesses seeking secure domain acquisition. Technically, the website leverages modern frontend technology (SvelteKit) and CDN hosting to deliver a responsive and moderately performant user experience. However, the site lacks comprehensive privacy and cookie policies, and no explicit contact emails or phone numbers are provided, which may impact user trust and compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response contacts. Overall, the domain registration data aligns well with the business, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.
- Pepsico, Inc.
pepsi.com
Retail · Finland
71Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Pepsi Max Suomi is the Finnish localized website for Pepsi Max, a leading sugar-free soft drink brand owned by Pepsico, Inc. The website serves as a product information and brand engagement platform targeting Finnish consumers, offering details on various Pepsi Max flavors and linking to an official online shop. The site is built on Drupal 9 CMS and incorporates modern web technologies such as Bootstrap and Swiper.js for a responsive and user-friendly experience. Privacy compliance is well addressed with a comprehensive privacy policy hosted on a dedicated domain and an integrated cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website reflects a professional and trustworthy brand presence in the Finnish market.
Lotus Bakerieslotusbakeries.nl
Retail · Netherlands
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Lotus Bakeries is a well-established company specializing in the production and distribution of Biscoff cookies and related products. The website serves both consumer and professional audiences, providing product information, recipes, and corporate details. The company maintains a consistent brand presence with a professional and user-friendly website built on Drupal 10. The technical infrastructure includes modern web technologies and analytics tools such as Google Analytics and Google Tag Manager, supporting moderate user tracking with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and basic security headers present, though additional headers and explicit security policies could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a mature digital presence aligned with the company's market position.
- CClub Brugge
askclub.be
Other · Belgium
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Club Brugge's help center website serves as a comprehensive support portal for fans and business users, offering information on ticketing, club membership, merchandise, and community projects. The site leverages Zendesk's platform for customer support and integrates modern web technologies to provide a responsive and user-friendly experience. The presence of official social media links and consistent branding reinforces the club's market position as a leading Belgian football organization. Technically, the site is well-structured with good mobile optimization and moderate performance, though some SEO and accessibility improvements could be made. Security posture is strong with HTTPS and secure third-party integrations, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no visible cookie consent mechanisms on the help center domain, though terms and conditions are linked from the main club website. WHOIS data is restricted, which is common for such domains, but the overall legitimacy is supported by consistent branding and official partnerships.
Zenchefzenchef.com
Hospitality
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Zenchef is a technology company offering an all-in-one restaurant management software solution designed to streamline restaurant operations, enhance guest experiences, and optimize revenue. The platform provides commission-free reservation management, integrated payment solutions, guest profile management, and a dedicated restaurant app. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Tag Manager, and PostHog analytics. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and standard analytics integrations, but lacks explicit security policies and incident response information. Privacy compliance is basic, with no clear privacy or cookie policies detected in the provided content.
Other · United States
57Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at xxjsq.info is currently inaccessible, returning a 503 Service Unavailable error with no visible content or metadata. The domain is newly registered as of June 26, 2024, with privacy protection via Domains By Proxy, LLC, obscuring registrant details. Due to the lack of accessible content, no business information, branding, or contact details are available, making it impossible to assess the company's market position or services. The technical infrastructure appears minimal with no detectable technologies or security configurations. Security posture is weak with no HTTPS or security headers detected, and no privacy or cookie policies are present. Overall, the site presents a high risk due to lack of transparency and accessibility.
- Cashier
safe-cashier.com
Other
65Medium
NIS2 67 · GDPR 35
NIS2 67 · GDPR 35
The website 'Cashier' serves as a login portal for a service requiring user authentication. It supports multiple languages and integrates modern analytics and monitoring tools such as Google Analytics, Google Tag Manager, and New Relic. The technical infrastructure includes AngularJS framework and reCAPTCHA for bot protection, indicating a moderate level of digital maturity. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enforced and bot protection, but absence of security headers and detailed security policies limits its robustness. WHOIS data is unavailable, raising concerns about domain legitimacy and reducing overall trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and improving transparency around business and security practices.
Gambling Awareness Trustgamblingcare.ie
Non-profit · Ireland
63Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
GamblingCare.ie is a non-profit website operated by the Gambling Awareness Trust, focused on providing support, education, and resources for individuals affected by problem gambling in Ireland. Established in 2019, the organization offers a range of services including helpline support, online and in-person counseling referrals, group support, and educational training. The website serves as a central hub for information and access to treatment options, funded by donations from the betting and gaming industry in Ireland. Technically, the website is built on WordPress using Elementor and several plugins for enhanced functionality, including event calendars and social media integration. It employs modern tracking and marketing tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. The site is hosted with a reputable Irish registrar and uses Cloudflare DNS, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Contact information is limited but includes a national helpline number and a contact form. Social media presence is robust, supporting community engagement and outreach. Overall, GamblingCare.ie presents a professional and trustworthy resource for gambling addiction support in Ireland, with room for improvement in privacy compliance and security hardening to enhance user trust and regulatory adherence.
- GGamBlock Pty Ltd
gamblock.com
Technology · Australia
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
GamBlock Pty Ltd operates a specialized gambling blocking software platform designed to help individuals and institutions prevent access to online gambling sites and apps. The company targets problem gamblers, families, libraries, government departments, and businesses seeking to mitigate gambling risks. Their software supports multiple platforms including Windows, Android, and Apple devices, with a focus on security features such as irreversibility and heuristic blocking of new gambling sites. The business is small-sized, founded in 2001, and maintains a consistent brand presence with active customer testimonials and social media engagement. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and Owl Carousel, hosted behind Cloudflare DNS services. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks explicit security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Security evaluation reveals no critical vulnerabilities or malware, but the absence of a published security policy and incident response contacts limits transparency. The domain WHOIS data is consistent with the business claims, showing a long-established registration and reputable registrar. Overall, the website is professional, trustworthy, and focused on its niche market, though improvements in security headers and privacy compliance would enhance its posture. Strategic recommendations include implementing security headers, enabling DNSSEC, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance to align with GDPR standards.
- MMrBit Casino
mrbit.bet
E-commerce
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MrBit Casino is an online gambling platform currently displaying a closure notice on its website. The site offers casino and betting services targeted at adult users interested in online gambling. However, the website content is minimal, with no active services visible and only a support email provided for account-related inquiries. The technical infrastructure appears basic with no detectable modern technologies, scripts, or analytics. The site lacks privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to absence of visible HTTPS or security headers in the provided data. Overall, the site’s digital maturity is low, and the business credibility is limited by minimal content and privacy-protected WHOIS data.
Grand Casino Luzern AGgrandcasinoluzern.ch
Hospitality · Switzerland
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Grand Casino Luzern AG operates a well-established casino and hospitality business in Luzern, Switzerland, offering a comprehensive range of gaming options including table games and slot machines, alongside high-quality dining and event hosting services. The website reflects a mature digital presence with multilingual support and integration of an online casino platform (mycasino.ch). The company holds multiple certifications including ISO 27001 and ISO 9001, underscoring its commitment to quality and security. The target audience is adults interested in gambling and entertainment.
- ATKHosting
huatki.com
Technology · Turkey
52Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ATKHosting is a Turkish technology service provider specializing in web hosting, software development, web design, server management, and corporate consultancy. Established since 1998, the company targets both individual and corporate clients primarily in Turkey, offering a broad range of IT solutions including Unix and Windows hosting, VPS, dedicated servers, and network solutions. The website presents a professional image with detailed service descriptions and client logos, indicating a stable market presence in the local technology sector. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and animation libraries, ensuring good mobile optimization and user experience. However, there is no evidence of a CMS or advanced backend frameworks from the HTML content. Performance is moderate, and SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, and WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency. No forms collecting sensitive data are present on the homepage, reducing immediate risk exposure. Overall, the security posture is average with room for improvement in SSL configuration, security headers, and privacy compliance. The overall risk assessment suggests the business is legitimate and professional but should improve domain registration transparency and implement stronger security and privacy controls to enhance trust and compliance.
Casilandocasilando.com
E-commerce
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Casilando is an online casino platform offering a variety of casino games including slots and live casino, targeting adult users primarily in European markets. The website promotes a 100% welcome bonus and bonus spins to attract new customers. The platform is positioned as a mid-tier online casino with a focus on bonuses and game variety. Technically, the website uses modern web technologies including AngularJS and the PGX Framework, supported by analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Hosting appears to be on AWS infrastructure with a Web Application Firewall in place. Security posture is good with HTTPS enforced and standard security headers implemented, though public security policies and incident response information are not published. Privacy and cookie policies are comprehensive and GDPR compliant. The absence of WHOIS registration data is a concern for domain legitimacy but is partially offset by the presence of gambling licenses and professional website design. Overall, the site is safe for its intended adult gambling audience but would benefit from improved transparency in security and domain registration details.
- PPlayzee
playzee.com
Other
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Playzee is an online casino platform offering a wide range of gambling entertainment including slots, blackjack, roulette, and live casino games. The site targets adult users interested in online gambling and provides various promotions, bonuses, and a loyalty program called Zee Club. The platform integrates multiple third-party game providers and marketing tools to enhance user engagement and tracking. Technically, the website uses modern frameworks such as Bootstrap and jQuery, and employs analytics and tracking services like Google Analytics, Facebook Pixel, FullStory, Hotjar, and Optimove SDK. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and includes standard security headers, but lacks publicly available security policies or incident response information. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency. Overall, the site appears legitimate and professionally managed but would benefit from improved transparency in domain registration and security disclosures.
Other
69Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website rajabets1.com is currently inaccessible, returning an HTTP 403 error page with minimal content. Due to this access restriction, no meaningful business, technical, or security information could be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. The technical infrastructure and digital maturity cannot be evaluated, and no security posture details are available. Overall, the site appears blocked or restricted, limiting any risk assessment or strategic recommendations.
- Osmila N.V.
dafabet.com
Other · Curaçao
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Dafabet, operated by Osmila N.V., is a well-established online betting and gambling platform primarily targeting the Asian market. Founded in 2007 and licensed in Curaçao, it offers a comprehensive range of services including sports betting, casino games, live dealer experiences, lottery, and arcade games. The website demonstrates a professional and consistent brand presence, supported by official sports sponsorships and a strong focus on responsible gaming and age verification. Technically, the site employs modern web technologies, including Google Tag Manager, Google Analytics, and Hotjar for analytics and marketing, with good mobile optimization and user experience. Security posture is solid with HTTPS enforcement, session management, and privacy policies, though explicit security headers and vulnerability disclosure policies could enhance trust further. Overall, Dafabet presents a credible and mature online gambling business with a strong market position in Asia.
Other
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
10CRIC is an online sportsbook and casino platform primarily targeting the Indian market, offering a wide range of gambling services including sports betting, live casino games, and eSports betting. The website presents a professional and modern design built on Next.js and React frameworks, integrating third-party analytics and marketing tools such as Appcues, Microsoft Clarity, and Google Tag Manager. Despite the professional front-end and user experience, the absence of WHOIS data for the domain raises concerns about the legitimacy and transparency of the domain registration. Additionally, the lack of visible privacy and cookie policies indicates potential compliance gaps with data protection regulations. Security posture is moderate with HTTPS enabled but missing key security headers and policies. Overall, the platform appears functional and targeted at adult users interested in gambling, but improvements in transparency, compliance, and security practices are recommended.
- RRestricted country
10bet.com
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website welcome10bet.com appears to be an online betting platform that restricts access to users from certain countries, as evidenced by the restricted country notice page. The domain is newly registered in 2023 and uses reputable services such as GoDaddy for registration and Cloudflare for DNS hosting. The website content is minimal, serving primarily as a geographic access restriction notice with a support contact email provided. There is no evidence of privacy, cookie, or terms of service policies on this page, and no advanced security features or analytics scripts are detected. Mobile optimization is adequate with responsive design elements. From a security perspective, the site lacks security headers and DNSSEC, which are recommended for improved security posture. The domain registration is consistent with a legitimate new business in the online gambling sector, but the lack of detailed business information and policies reduces trustworthiness. No WAF or security challenge mechanisms are detected, indicating the page is accessible but limited in content. Overall, the site scores low on content quality and privacy compliance but shows moderate technical implementation and business credibility based on domain registration and contact information. Strategic improvements in security headers, privacy policies, and richer content would enhance trust and compliance.
All British Casino | Britain's Fully Dedicated UK Online Casinoallbritishcasino.com
Other
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
All British Casino is an online gambling platform focused on providing casino games targeted at the UK market. The website branding emphasizes a British identity and positions itself as a dedicated UK online casino. The technical infrastructure is based on modern web technologies including React and integrates third-party services such as Google Analytics and Altenar SDK for casino game functionalities. However, the website content is minimal with limited business information and no visible contact or compliance documentation. Security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy and transparency. Overall, the site presents moderate technical implementation but low trust and compliance maturity.
mr.playmrplay.com
Other
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
mr.play operates as a comprehensive online gambling platform offering casino games, live dealer experiences, and sports betting. It targets adult users interested in gambling entertainment, providing a broad portfolio of games and betting markets. The platform is licensed by reputable authorities, ensuring regulatory compliance and fair play. Technically, the website employs modern web technologies, is mobile optimized, and integrates user consent management for privacy compliance. Security posture is solid with HTTPS and encryption, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable transparency gap but does not negate the professional presentation and licensing claims. Overall, mr.play presents a mature, user-friendly gambling service with room for enhanced security disclosures.
21 Casino | Pelaa jopa 500 € Bonuksella21casino.com
Other
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
21 Casino is an online gambling platform targeting Finnish-speaking users, offering a wide range of casino games including slots, roulette, and blackjack, along with promotional bonuses. The website demonstrates moderate digital maturity with use of modern JavaScript frameworks and integration of multiple analytics and advertising tools. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate but lacks visible security headers and compliance documentation. Privacy and cookie policies are not found, indicating potential compliance gaps. Overall, the site is functional but requires improvements in transparency, compliance, and security to enhance trustworthiness.
Other
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Betano.com is an international online betting and casino platform offering localized services across multiple countries and languages. The website serves as a gateway to various regional domains tailored to specific markets, indicating a broad operational footprint in the online gambling industry. The business model focuses on sports betting and online casino games, targeting adult users globally. The presence of sponsorships with major sports events and teams further supports its market position as a significant player in the gambling sector. Technically, the website employs modern frontend technologies such as Bootstrap and Swiper.js for responsive design and user experience. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes, and Cloudflare Insights for performance monitoring. The site appears mobile-optimized with good SEO practices, though accessibility features are basic. Hosting is likely via Cloudflare, providing performance and security benefits. From a security perspective, the site uses HTTPS and standard tracking tools but lacks visible security headers and explicit privacy or cookie policies in the provided HTML content. No contact or incident response information is present, which limits transparency and user trust. The WHOIS data is unavailable, suggesting privacy protection typical for gambling domains. Overall, the security posture is moderate but could be improved by publishing clear policies and enhancing header security. The overall risk assessment indicates a professionally managed gambling platform with moderate security and privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, providing clear contact and incident response channels, and improving accessibility compliance to strengthen trust and regulatory adherence.
Karamba Limitedkaramba.com
Other · Malta
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Karamba Limited operates an online casino platform primarily targeting adult users interested in slots, jackpots, live dealer games, and sports betting. The company positions itself as one of Ireland’s leading online casinos, with a focus on responsible gaming and compliance with age restrictions. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site uses modern frameworks such as React and Next.js, integrates marketing and analytics tools like Google Tag Manager and AppsFlyer, and enforces HTTPS with appropriate security headers, indicating a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is strong with no visible vulnerabilities, but the lack of explicit security policies and incident response contacts suggests room for improvement. Overall, the site presents a moderate risk profile with recommendations to enhance transparency and security documentation.
- RRational Intellectual Holdings Limited
starsaffiliateclub.com
Technology
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Stars Affiliate Club operates as an affiliate marketing platform primarily promoting some of the world's largest online gaming brands such as PokerStars, PokerStars Sports, and PokerStars Casino. The business targets affiliate marketers who refer players to these gaming sites and earn commissions. The website presents a professional and consistent brand image aligned with its parent company, Rational Intellectual Holdings Limited, and leverages modern web technologies including React and Google Tag Manager. The site is well-structured with clear navigation and mobile optimization, supporting a good user experience for its target audience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, but lacks explicit security headers and dedicated security policies, which could be improved. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the apparent business longevity and active web presence, suggesting a need for further verification. Overall, the site is functional, professional, and trustworthy from a content and technical perspective, but domain registration inconsistencies reduce its trustworthiness score.
MJP Interactive Ltdmagicjackpotaffiliates.com
Other · Malta
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
MagicJackpot Affiliates operates an affiliate marketing program for an online casino primarily targeting the Romanian market. The business is relatively new, founded around 2020, and is licensed by the Romanian Gambling Authority. The website is professionally designed using modern React technology and hosted with Cloudflare DNS services. It offers a clear value proposition to affiliates with generous commissions and dedicated account managers. The affiliate platform uses NetRefer for tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of cookie consent mechanisms and limited GDPR indicators. Overall, the site is functional, trustworthy, and positioned well within its niche but could improve privacy and security transparency.
- BBetano Splash Screen
betano.ro
Other
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website ro.betano.com serves as a splash screen for Betano, a gambling-related service. The page content is minimal and primarily consists of an iframe linking to an external landing page hosted by Kaizen Gaming. The domain analyzed is a subdomain with no WHOIS registration data available, indicating it is part of a larger domain infrastructure. The site is protected by Cloudflare's WAF, which blocks direct content access and presents challenge scripts, limiting the ability to fully analyze the site content and security posture. No privacy, cookie, or terms of service policies are present on this page, and no contact or business information is provided, reducing transparency and trustworthiness.
- MMrBit Casino
mrbit.com
Other · Iceland
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MrBit Casino is an online gambling platform targeting adult users interested in casino games. The website currently displays a closed message with minimal content and provides only a support email for contact. The domain is registered through a privacy protection service based in Iceland and has been active since 2017, which aligns with a moderate business history for an online casino. Technically, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and security headers, indicating room for improvement in security posture. The absence of privacy, cookie, and terms of service policies reflects poor compliance with data protection standards. Overall, the website's minimal content and lack of transparency reduce its trustworthiness and user engagement potential.
Casinò Luganoswiss4win.ch
Other · Switzerland
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Swiss4Win.ch is an online casino platform operated by Casinò Lugano, targeting Swiss residents interested in online gambling. The website offers casino games, player account management, and promotional bonuses. The platform is built on Playtech technology and integrates SafeCharge for payment processing and analytics. The site uses modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager. The technical infrastructure is moderately optimized for performance and mobile use, though SEO and accessibility are basic. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and explicit privacy policies. Overall, the site is functional and consistent with its business purpose but would benefit from enhanced privacy compliance and security transparency.
Casino777casino777.ch
Hospitality · Switzerland
58Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Casino777.ch is an online casino platform licensed in Switzerland, offering a variety of casino games and bonuses targeting adult users. The website is professionally designed with good mobile optimization and uses a modern technology stack including Bootstrap and multiple analytics and advertising tools. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is supported by consistent WHOIS data and clear market positioning in the hospitality/gambling sector. Overall, the site is functional and professional but should improve privacy and security transparency to enhance trust.
Payhawkpayhawk.com
Finance · Germany
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Payhawk is a leading global platform specializing in business expense management, offering a comprehensive suite of services including corporate Visa cards, expense management tools, accounts payable automation, and multi-entity financial oversight. The company targets medium to large enterprises and multinational corporations, providing real-time transparency and control over business expenditures. Their platform integrates seamlessly with major ERP and accounting systems, leveraging AI to automate up to 90% of financial processes, thereby enhancing operational efficiency and reducing manual workload. Payhawk maintains a strong market position with multiple international subsidiaries and a robust compliance framework.
Spotspotdesign.be
Other · Belgium
60Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Spot is a small creative marketing agency based in Belgium, offering a range of services including website development, graphic design, print work, video production, and digital campaigns. The company positions itself as a highly creative partner for marketing needs, targeting businesses and organizations seeking comprehensive marketing solutions. The website is professionally designed, leveraging WordPress CMS with modern technologies such as Font Awesome 6 Pro, Google Tag Manager, and reCAPTCHA to enhance user experience and security. SEO is supported by the Rank Math plugin, indicating a focus on search visibility. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and privacy policies are not present on the homepage, suggesting room for improvement in compliance and transparency. Overall, the website is trustworthy and functional, with no signs of malicious activity or content blocking.
Enbroenbro.com
Energy · Belgium
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Enbro is a Belgian energy brokerage company specializing in managing and optimizing energy contracts for professional clients. Established in 2013, it positions itself as the largest energy broker in Europe, offering free and independent consultancy services tailored to business needs. The website is content-rich, featuring detailed service descriptions, testimonials, and educational blog posts, targeting entrepreneurs and businesses seeking energy cost savings and sustainable solutions. Technically, the site is built on WordPress with Elementor, leveraging modern libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management. Security posture is strong with HTTPS and security headers in place, though the absence of explicit privacy and terms of service pages is a compliance gap. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.
- Anheuser-Busch InBev
ab-inbev.be
Manufacturing · Belgium
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Anheuser-Busch InBev is a leading global brewing company with a strong presence in Belgium, producing iconic beer brands such as Jupiler and Stella Artois. The website serves as a corporate and consumer-facing platform highlighting their brewing heritage, sustainability initiatives, and responsible alcohol consumption. The site is built on a modern Drupal 10 CMS with responsive design and integrates social media and marketing tools like Google Tag Manager. Security measures include an age gate to restrict access to adults, cookie consent mechanisms, and HTTPS usage. However, explicit security policies and incident response information are not publicly available. Overall, the website demonstrates a mature digital presence with good content quality and business credibility.