Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
81,351–81,400 of 99,068
NSFWLover AI (Free, Uncensored NSFW Character.AI)nsfwlover.com
Technology
61Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
NSFWLover.com is an adult-oriented platform specializing in NSFW AI chatbots, AI girlfriends and boyfriends, and AI-generated NSFW images. It targets adult users seeking immersive and unrestricted digital companionship and erotic AI roleplay experiences. The platform offers a large library of AI characters and premium subscription options for enhanced content. Technically, the site is built using modern web technologies including Next.js and React, with CDN-hosted media assets and video content. The website is mobile-optimized and provides a good user experience with clear navigation and rich content. However, the security posture is limited due to lack of visible security headers and policies, and privacy compliance is weak with no detected privacy or cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and legitimacy. Overall, the site is functional and content-rich but would benefit from improved security, privacy, and business transparency measures.
Privacy service provided by Withheld for Privacy ehflivehdcams.xyz
Media · Iceland
63Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
LIVEHDCAMS.one is an adult live webcam streaming platform offering free access to thousands of live models and couples. The site targets adult users seeking interactive adult entertainment with features such as private shows and interactive toys. It operates as part of a larger ecosystem connected to Stripchat and related domains, leveraging affiliate marketing and token giveaways to engage users. The platform is relatively new, founded in 2022, and uses privacy protection for domain registration, which is common in the adult industry. Technically, the site employs modern web technologies including React, Redux, and Bootstrap, with Cloudflare DNS and CDN services ensuring fast and reliable delivery. Analytics and error tracking are implemented via Amplitude, Firebase, and Sentry, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and content security policy reporting, although DNSSEC is not enabled. Privacy and terms policies are present and GDPR compliance is indicated, but explicit security and incident response policies are not found. Overall, the site is professionally designed, mobile optimized, and provides a good user experience with moderate trustworthiness given the industry context.
Other
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain promerycergerful.com is newly registered and currently serves only a minimal 404 Not Found error page with no business content or metadata. There is no indication of the company's business model, services, or market positioning. The website infrastructure appears to be hosted on AWS DNS servers, but no active website or CMS is detected. Security posture is minimal with no HTTPS or security headers observed, and no privacy or cookie policies are present. Overall, the site is non-operational and presents a high risk due to lack of content and transparency.
Other
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website whoisezh.com currently presents minimal accessible content, displaying only a 'Not Found' message. The domain is newly registered in December 2023 via NameCheap and uses Cloudflare DNS servers, indicating some level of infrastructure protection. However, the lack of visible website content, metadata, or business information limits the ability to assess the company's market position, services, or target audience. Technically, the site shows basic SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. The absence of privacy, cookie, and terms of service policies indicates non-compliance with common data protection regulations such as GDPR. Overall, the security posture is minimal, with no visible vulnerabilities but also no advanced protections or policies in place. The website is likely protected or blocked by Cloudflare's security mechanisms, restricting content access and analysis.
- DDomains By Proxy, LLC
pornclassic.tube
Other · United States
63Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
TubePornClassic.com is an adult entertainment website specializing in classic, vintage, and retro pornographic video content. The platform targets adult users interested in nostalgic adult videos and operates primarily on an advertising-supported business model. The site features a variety of video playlists, categories, and community features, positioning itself as a niche provider within the adult content market. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates multiple advertising networks, and uses Cloudflare DNS services. While the site is mobile-optimized and offers a good user experience, it relies heavily on third-party ad scripts, which may increase security risks. Security posture is moderate with HTTPS enforced and domain locking in place, but lacks advanced DNS security measures like DNSSEC and explicit security policies. Privacy compliance is basic, with privacy and cookie policies present but no clear GDPR compliance indicators or data protection officer contact. Overall, the site is functional and professional but could improve transparency and security practices.
Other
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain rtr2perf1.com is newly registered in March 2024 and currently hosts no accessible website content, returning a 404 Not Found error page. There is no visible business information, contact details, or policies on the site, indicating it is either under development or abandoned. The technical infrastructure is minimal, with nginx serving the error page and no detected CMS or frameworks. Security posture cannot be assessed due to lack of HTTPS and security headers data. Overall, the site presents a high risk due to lack of content, transparency, and security measures.
Media · Finland
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website sextu.com operates as a free adult video streaming platform offering thousands of HD pornographic videos across numerous categories. It targets adult users seeking free access to adult content and monetizes primarily through advertising networks and affiliate marketing partnerships. The site features video upload capabilities and curated content with popular pornstars and studios. Technically, the site uses modern web technologies including JavaScript frameworks (likely Vue.js), Yandex Metrika for analytics, and multiple ad networks such as ExoClick. The site is mobile optimized and provides a generally good user experience with clear navigation and categorized content. Security-wise, the site enforces HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which raises compliance concerns. The absence of WHOIS registration data for the domain reduces trust and legitimacy, suggesting possible domain registration issues or privacy protection. Overall, the site is functional and content-rich but requires improvements in transparency, security best practices, and compliance to enhance user trust and legal standing.
BaronPorn.combaronporn.com
Other · Finland
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
BaronPorn.com is an adult entertainment website specializing in free pornographic video content. The platform offers a wide range of categorized videos targeting adult users seeking diverse pornographic material. The business model relies primarily on advertising revenue, leveraging multiple ad networks and tracking services to monetize traffic. The website is relatively new, established in 2022, and hosted via NameCheap, Inc. The technical infrastructure includes modern JavaScript frameworks such as Vue.js and analytics via Yandex Metrika, indicating a moderate level of digital maturity. Mobile optimization and basic SEO practices are present, though content quality and branding consistency remain basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and visible security headers, which are important for enhancing domain and web security. Privacy compliance is minimal, with cookie and privacy policies present but lacking explicit consent mechanisms or GDPR compliance indicators. No contact or incident response information is publicly available, which limits transparency and trustworthiness. The site is accessible without WAF or blocking, allowing full content analysis. Overall, BaronPorn.com presents a functional but basic adult content platform with room for improvement in security posture, privacy compliance, and business credibility. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would improve user trust and regulatory compliance.
Other · Finland
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Onlyporn.tube is an adult content streaming website specializing in leaked OnlyFans videos and other private adult content. The platform targets adult users interested in free access to exclusive and leaked videos from amateur models and celebrities. The business model relies heavily on user-uploaded content and monetization through aggressive advertising networks. The site uses a custom CMS and integrates multiple ad and tracking technologies, including ExoClick and Yandex Metrika, to generate revenue. Mobile optimization is present but basic, and the site lacks comprehensive privacy and security policies.
Other
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website tikbblove.com presents minimal content primarily focused on displaying advertisements through Google Adsense and syndicated search iframes. There is no meaningful business information, contact details, or user engagement features. The WHOIS data is unavailable, indicating either privacy protection or a lack of proper domain registration, which raises concerns about legitimacy. Technically, the site uses basic HTML, CSS, and JavaScript with Google ad services but lacks HTTPS and security headers, resulting in a weak security posture. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site exhibits low trustworthiness and poor professionalism, suggesting it may be a parked or ad-driven domain rather than a legitimate business website.
Pleasuredomes.ai - AI textingpleasuredomes.ai
Technology
69Medium
NIS2 22 · GDPR 58
NIS2 22 · GDPR 58
Realize your fantasies with our beautiful AI characters. Pleasuredomes.ai, the best NSFW sex chat bot where your AI gfs will make your day unforgettable. Start chatting
Privacy service provided by Withheld for Privacy ehfhdsexcams.live
Media · Iceland
67Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Hdsexcams.live is an adult live webcam streaming website offering free access to thousands of live models and couples. The platform targets adult users seeking interactive live entertainment with features such as interactive toys and private shows. The site operates as part of a larger network associated with Stripchat, leveraging its infrastructure and affiliate programs for model and studio recruitment. Technically, the website employs a modern React and Redux stack, hosted behind Cloudflare DNS and CDN services, ensuring fast performance and excellent mobile optimization. Security practices include HTTPS enforcement, content security policy reporting, and legal compliance badges, although some security headers could be enhanced and DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies, age verification, and GDPR considerations. However, direct company contact information is limited, with only a press email provided and no phone numbers. Overall, the site presents a professional and trustworthy front for adult webcam entertainment but could improve transparency in security policies and contact channels.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website admjmp.com currently serves only a minimal placeholder page with the text 'It works'. There is no meaningful content, metadata, or business information available on the site. The lack of privacy policies, contact details, or any form of user engagement elements indicates the site is either under development or abandoned. The domain's WHOIS data is privacy protected, which combined with the minimal site content, reduces trust and transparency. Technically, no modern frameworks, scripts, or SEO optimizations are present, and no security headers or SSL information is available, suggesting a very basic or default hosting setup. Security posture is weak due to absence of HTTPS and security best practices. Overall, the site presents a high risk for users due to lack of information and security controls.
Unseen UKunseenuk.org
Non-profit · United Kingdom
71Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Unseen UK is a UK-based non-profit charity dedicated to combating modern slavery through its Modern Slavery Helpline and collaborative efforts with survivors, businesses, governments, police, and the NHS. The organization positions itself as a leading charity in the UK fighting slavery, providing critical support services and advocacy. The website reflects a professional and well-branded digital presence, targeting stakeholders involved in anti-slavery efforts and the general public seeking to report concerns or support the cause. Technically, the website is built on WordPress using Elementor and integrates modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism, but explicit privacy and terms of service pages were not detected in the provided content. Overall, the domain appears legitimate despite the lack of WHOIS data, likely due to privacy protection common for non-profits. The site is accessible without WAF blocking, supporting a positive trust and credibility assessment.
Stripchattnaflixchat.com
Media
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
T'nAflix Chat is an adult live webcam streaming platform offering free access to thousands of live cam models including girls, couples, men, and trans performers. The platform targets adult users seeking interactive live entertainment with features such as private shows, interactive toys, and token giveaways. The website is well-branded and integrates with the larger Stripchat ecosystem, leveraging affiliate partnerships for model and studio recruitment. Technically, the site uses a modern React-based stack with Redux and Bootstrap, hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and content security policies with violation reporting, though DNSSEC is not enabled and no explicit security policy or incident response contacts are provided. Privacy compliance is addressed with clear privacy and cookie policies and a visitor agreement modal. Overall, the site is a mature, professional adult entertainment platform with moderate risk due to minor security and compliance gaps.
Plausible Analyticsanalyticsweb.net
Technology
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Plausible Analytics operates as a privacy-focused, lightweight web analytics service positioned as an alternative to Google Analytics. The company targets website owners and businesses that prioritize user privacy and minimal data collection. The business model is subscription-based, supported by over 10,000 paying customers, indicating a sustainable niche market presence. The website content is professional and consistent with the brand's privacy-centric messaging. Technically, the website employs modern web technologies including jQuery and Cloudflare DNS services, ensuring good performance and fast loading times. The site is mobile optimized and SEO friendly, though accessibility features are basic. The domain is registered with a reputable registrar and is consistent with the business timeline, enhancing credibility. From a security perspective, the site uses HTTPS and has domain transfer protections in place but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present on the landing page, and no contact or incident response information is provided, indicating areas for compliance and transparency improvement. Overall, the website presents a trustworthy and professional front with a solid technical foundation but would benefit from enhanced privacy disclosures, security headers, and contact information to improve compliance and user trust.
- CCdnFlex
cdnflex.me
Technology · United States
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
CdnFlex is a newly established free and open-source content delivery network service focused on delivering popular JavaScript libraries, CSS frameworks, and static assets efficiently. It leverages Cloudflare's infrastructure to provide fast and reliable content delivery, serving a significant portion of websites globally. The website presents a clean and professional landing page with clear messaging about its services and target audience of developers and website owners. However, it lacks critical compliance and contact information such as privacy policies, cookie consent mechanisms, and terms of service, which are important for trust and regulatory adherence. Technically, the site is simple but well-structured, with good performance and mobile optimization, though it does not implement advanced SEO or accessibility features. Security posture is moderate with domain transfer protection and Cloudflare hosting but lacks DNSSEC and security headers. Overall, the site is legitimate but would benefit from enhanced compliance and security transparency.
Quadrinhos Eroticosquadrinhoseroticos.site
Media · Brazil
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Quadrinhos Eroticos is a niche adult content website specializing in Brazilian Portuguese erotic and hentai comics. The site offers curated and free access to various erotic comic stories, targeting Portuguese-speaking adult audiences interested in hentai and erotic cartoons. The business model is content publishing with no visible monetization details on the main page. Technically, the site is built on WordPress with standard plugins and jQuery, hosted behind Cloudflare DNS, and secured with HTTPS. SEO metadata and structured data are implemented, supporting discoverability. However, the site lacks privacy and cookie policies, security headers, and explicit contact information beyond a contact form, which impacts its compliance and trustworthiness. The domain is newly registered with privacy protection, which is common for adult content sites. Overall, the site is functional but basic in design and security maturity.
- QQuadrinhos Pornos
quadrinhospornos.com
Other · Brazil
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Quadrinhos Pornos is a niche adult content website specializing in free erotic hentai comics primarily targeting Brazilian Portuguese-speaking audiences. The site offers a variety of hentai HQs and erotic illustrated stories, positioning itself within the adult entertainment sector with a focus on hentai comics. The business model revolves around content publishing with no evident monetization details or contact transparency. Technically, the website is built on WordPress 6.8.1, leveraging common web technologies such as jQuery, Google Fonts, and Font Awesome. Hosting and DNS services are provided via Cloudflare and NameCheap, respectively. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. From a security perspective, the site uses HTTPS and has domain transfer protections enabled but lacks DNSSEC and important security HTTP headers. There are no visible privacy or cookie policies, and no contact or incident response information is provided, indicating low compliance with privacy regulations such as GDPR. The use of Google Analytics indicates moderate user tracking without clear privacy compliance disclosures. Overall, the site is functional and content-rich but lacks critical privacy, security, and business transparency elements. Strategic improvements in security headers, privacy policies, and contact information are recommended to enhance trustworthiness and compliance.
- PPorno Legendas
pornolegendas.com
Media · Brazil
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Porno Legendas is an adult content website specializing in providing free pornographic videos with Portuguese subtitles, targeting primarily Brazilian Portuguese-speaking audiences. The site offers a variety of categories and emphasizes video quality and subtitle accessibility. The business model appears to be advertising-supported, with no direct monetization or subscription services evident. The website is built on WordPress, utilizing common web technologies such as jQuery and Font Awesome, and is hosted with DNS services via Cloudflare. The technical infrastructure is basic but functional, with moderate performance and basic mobile optimization. However, the security posture is weak, lacking DNSSEC, security headers, and explicit HTTPS enforcement. Privacy and cookie policies are absent, and no GDPR compliance indicators are present. Contact information is limited to a contact form, with no verified emails or phone numbers. The domain WHOIS data is suspicious due to a future creation date, raising concerns about legitimacy. Overall, the site presents moderate technical maturity but significant gaps in security, privacy compliance, and business credibility.
Porno Legendado HDpornolegendadohd.com
Media · Brazil
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Porno Legendado HD is a small-scale adult media website targeting Portuguese-speaking audiences, primarily in Brazil. It offers free streaming of pornographic videos with subtitles, focusing on curated content from other portals such as Xvideos. The site claims to be the largest portal for subtitled adult videos in Portuguese, although its domain age and business transparency are limited. Technically, the website is built on WordPress with common web technologies like jQuery and Google Fonts, hosted behind Cloudflare DNS but lacks advanced security headers and DNSSEC. The site uses advertising networks and tracking services, including Google Analytics and a less-known ad network, which raises privacy concerns. Security posture is basic with HTTPS enabled but missing critical security headers and policies. Privacy compliance is poor, with no visible privacy or cookie policies and no GDPR indicators. Contact information is limited to a contact page without direct emails or phone numbers. Overall, the website presents moderate technical implementation but low business credibility and privacy compliance, resulting in a moderate risk profile.
Super Hentai HQsuperhentaihq.com
Media · Brazil
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Super Hentai HQ is a niche adult entertainment website specializing in free hentai comics and erotic content primarily targeting Portuguese-speaking adults, likely in Brazil. The site operates on a WordPress CMS platform with standard web technologies including jQuery, Google Fonts, and Font Awesome. It uses Cloudflare DNS and is registered through NameCheap. The website content is accessible without any WAF or security challenge, but lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and contact information. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. Overall, the site provides basic content with moderate technical implementation but poor privacy and business credibility.
Hentai HQ Viphentaihq.vip
Media · Brazil
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Hentai HQ Vip is a Brazilian adult content website specializing in hentai comics and cartoons. It positions itself as the largest and most complete hentai site in Brazil, offering free high-definition hentai comics with frequent updates and a community forum. The site targets adult Portuguese-speaking users interested in hentai and adult cartoons. Technically, the site is built on WordPress with common plugins such as Rank Math for SEO and Koko Analytics for tracking. It uses Cloudflare DNS and has HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. The domain is newly registered in 2024 with privacy protection, which is typical for adult content sites. Overall, the site demonstrates moderate digital maturity with good content quality and SEO but has room for improvement in security and privacy compliance.
Privacy service provided by Withheld for Privacy ehfxvidiosbr.blog
Other · Iceland
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website xvidiosbr.blog operates as a free adult content portal primarily targeting Brazilian Portuguese-speaking users. It offers a wide range of pornographic videos including controversial categories such as incest and amateur content. The business model appears to be ad-supported free streaming without direct monetization from users. Technically, the site is built on WordPress with common web technologies like jQuery and Font Awesome, hosted behind Cloudflare DNS but without DNSSEC or advanced security headers. The site lacks privacy, cookie, and terms of service policies, which raises compliance concerns. Security posture is basic with HTTPS enabled but missing important headers and no visible incident response or vulnerability disclosure mechanisms. Overall, the site presents moderate technical maturity but low business transparency and privacy compliance, with potential legal risks due to content nature.
WordPress Blogxxx-videos.blog
Media · Brazil
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website xxx-videos.blog is a small-scale adult video blog primarily targeting Brazilian Portuguese-speaking audiences. It aggregates and curates free adult video content from popular portals such as RedTube and Xvideos, offering a selection of Brazilian adult videos. The business model relies on advertising revenue, with no direct sales or subscription services evident. The site uses WordPress CMS with common web technologies like jQuery and Google Fonts, hosted behind Cloudflare DNS but with no explicit hosting provider identified. The technical infrastructure is moderate, with basic mobile optimization and SEO practices in place. From a security perspective, the site employs HTTPS but lacks important security headers and does not enable DNSSEC, which could expose it to certain risks. There are no visible privacy or cookie policies, despite the use of Google Analytics and advertising networks, indicating poor privacy compliance. The domain registration is privacy protected, which is typical for adult content sites but reduces transparency and trust. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, the site presents a basic but functional adult content platform with moderate technical implementation. However, it suffers from significant privacy and security shortcomings, including lack of policies and security headers. The business credibility is limited by the absence of clear registrant information and trust indicators. Strategic improvements in privacy compliance, security hardening, and transparency would enhance the site's trustworthiness and user confidence.
- Xx-videos.blog | 526: Invalid SSL certificate
x-videos.blog
Other · United States
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website x-videos.blog is currently inaccessible due to an invalid SSL certificate on the origin server, resulting in a Cloudflare Error 526 page being served. The domain is registered through Dynadot Privacy Service, which obscures registrant details, and was created in 2021. No business-related content, contact information, or policies are present on the site, indicating minimal digital maturity and transparency. The technical infrastructure relies on Cloudflare for CDN and security services, but the lack of a valid SSL certificate severely impacts security posture and user trust. Overall, the site exhibits poor content quality, minimal technical implementation, and critical security issues that prevent proper analysis or user access.
- Lleadlovers
llimages.com
Other
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website llimages.com presents minimal accessible content, consisting solely of an iframe embedding content from an external domain (ll-send.com). The domain is registered since 2017 with Cloudflare, Inc. as the registrar, indicating a stable registration history. However, the lack of any metadata, contact information, privacy or cookie policies, and security headers significantly limits the website's transparency and trustworthiness. The technical infrastructure is basic, with no detected CMS or advanced frameworks, and the hosting is via Cloudflare, though DNSSEC is not enabled. Security posture is weak due to missing HTTPS verification and absence of security best practices. Overall, the website appears to be a placeholder or a minimal landing page rather than a fully developed business site.
- Squarespace Domains II LLC
fantaszine.com
Media · Brazil
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fantaszine.com is a Portuguese-language adult entertainment website offering free pornographic videos featuring models and content creators, primarily targeting Brazilian and Portuguese-speaking audiences. The platform provides various categories of adult videos and includes features such as content removal requests and contact support via email. The domain is recently registered in 2023 and uses Cloudflare DNS services and Google Analytics for tracking. The website employs Bootstrap and Plyr video player technologies, indicating a modern but basic technical infrastructure. Security posture is moderate with domain transfer protections in place but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and content-rich but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.
- Casting Super VIP
castingsupervip.com
Other · Brazil
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Casting Super VIP is a niche Brazilian platform launched in 2023 that connects models, particularly those involved in Book Rosa and Sugar Baby relationships, with clients seeking such services. The website offers model registration, selection, and subscription-based access to exclusive model lists, targeting young independent models and clients interested in lifestyle upgrades. The platform positions itself as a premium service facilitating unique partnerships and events. Technically, the website uses a modern JavaScript stack including jQuery, Bootstrap, and Google Tag Manager, hosted behind Cloudflare DNS with Squarespace as the registrar. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is limited to forms without direct emails or phone numbers. Overall, the site is functional and credible but could improve privacy and security transparency.
- Book Privado
bookprivado.com
Other · Brazil
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Book Privado operates a niche online platform focused on connecting high-end models (Book Rosa) with affluent clients primarily in Brazil's major cities such as Rio de Janeiro and São Paulo. The business model revolves around subscription-based access to exclusive profiles and event-related services. The website is professionally designed with good content relevance and clear navigation, targeting a specific luxury and exclusivity market segment. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Tag Manager, hosted behind Cloudflare DNS, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact is only available via web forms without direct email or phone contacts, which may affect user trust. Overall, the site is legitimate and functional but could improve in security and privacy transparency.
leadlovers Tecnologia LTDAcontato.io
Technology · Brazil
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website contato.io is a landing page hosted by leadlovers Tecnologia LTDA, a Brazilian company specializing in digital marketing automation platforms. The site primarily serves as a placeholder or informational page indicating that the site is built on the leadlovers platform. The business targets marketers and businesses seeking marketing automation solutions, positioning itself as a technology provider in this niche. The domain is registered with Cloudflare and has a consistent registration history dating back to 2017, indicating a stable business presence. From a technical perspective, the website uses a modern tech stack including Bootstrap, jQuery, Google Tag Manager, Hotjar, Microsoft Clarity, and FontAwesome icons. It is hosted on Cloudflare infrastructure, providing good SSL/TLS security. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, the content is minimal and lacks comprehensive business or legal information. Security posture is moderate with HTTPS enabled and domain transfer protections in place. However, the absence of security headers such as Content-Security-Policy and HSTS, as well as the lack of visible privacy and cookie policies, reduces the overall security and compliance maturity. The site uses multiple tracking and analytics tools without a visible cookie consent mechanism, which may raise privacy compliance concerns. Overall, the website is legitimate and consistent with the business identity but lacks critical privacy, security, and contact information that would enhance trust and compliance. Strategic improvements in security headers, privacy policies, and user transparency are recommended to strengthen the security posture and regulatory compliance.
Zoofilia XXXzoofiliaxxx.blog
Other · United States
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Zoofilia XXX is a niche adult content website specializing in zoophilia and animal sex videos. The site aggregates and hosts explicit videos, targeting adult users interested in this illegal and unethical content category. The business model revolves around content aggregation and monetization through advertising and affiliate partnerships with similar adult sites. Technically, the site is built on WordPress with common JavaScript libraries and uses Cloudflare DNS services. The site has basic SEO and mobile optimization but lacks advanced accessibility and performance features. Security posture is weak, with no DNSSEC, no security headers, and no visible security or privacy policies. The domain is recently registered and uses privacy protection, which is typical for adult sites but reduces transparency and trust. Overall, the site presents significant compliance and ethical risks.
Videos Zoofiliavideoszoofilia.blog
Other · United States
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website 'Videos Zoofilia' operates as a niche adult content aggregator specializing in zoophilia videos, offering free access to explicit content involving humans and animals. The site targets adults interested in this illegal and unethical content niche. The business model is primarily content aggregation without direct content production, relying on external video sources. The domain is very recently registered with privacy protection, typical for adult content sites seeking anonymity. Technically, the site is built on WordPress with jQuery and uses Cloudflare DNS services. It has basic SEO optimizations and mobile responsiveness but lacks advanced security measures such as security headers and cookie consent mechanisms. Performance is moderate, and accessibility is basic. The site includes advertising scripts and Google Analytics for tracking but lacks transparency and privacy compliance. From a security perspective, the site uses HTTPS but does not implement important security headers or provide privacy policies, cookie consent, or incident response contacts. The WHOIS data is privacy protected, and the domain age is very recent, which may indicate a transient or low-trust operation. The lack of trust indicators and professional business information further reduces credibility. Overall, the site poses significant compliance and ethical risks due to its content and lack of security and privacy best practices. Strategic recommendations include implementing security headers, privacy and cookie policies with consent, providing clear contact and incident response information, enabling DNSSEC, and conducting regular security audits to improve trust and compliance.
Zoofilia Topzoofilia.top
Other · United States
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Zoofilia.top is a niche adult content website specializing in bestiality and zoophilia pornography. The site targets adult users interested in this illegal and highly controversial content. It operates on a WordPress CMS platform with basic technical infrastructure and uses Cloudflare DNS services. The business model appears to be ad-supported content hosting without clear transparency or compliance measures. Technically, the site uses common web technologies such as jQuery and Font Awesome, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, and no contact or incident response information is provided, indicating poor compliance with data protection regulations. The domain is recently registered with privacy protection, which is typical for adult content sites but reduces trustworthiness. Overall, the site presents significant legal and ethical risks and lacks professional business credibility.
adminxvideos2022.club
Media · United States
62Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Xvideos2022.club is a small-scale adult content aggregation website focusing on Brazilian pornographic videos and photos, primarily sourced from the popular Xvideos platform. The site targets adult viewers interested in Brazilian amateur and professional pornographic content, offering free HD streaming and photo galleries. The business model revolves around content curation and aggregation without direct content creation or monetization via subscriptions. Technically, the site is built on WordPress, uses jQuery, and is hosted with DNS services provided by Cloudflare, with domain registration through Dynadot Inc. The site shows moderate SEO optimization and basic mobile responsiveness but lacks advanced security headers and privacy policies. Security posture is average with HTTPS enabled but missing critical security headers and DNSSEC. Privacy compliance is poor, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact is limited to a contact form with no direct emails or phone numbers. The domain is privacy protected, which is common for adult sites but reduces transparency and trust. Overall, the site is functional but lacks professionalism and robust security and privacy practices.
VECTOR INNOVATIONS LTD.shiofuky.com
Media · United Kingdom
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Shiofuky.com is a niche adult entertainment website focusing on Japanese squirting and Asian squirt porn videos. The site offers a subscription-based model providing access to a large archive of uncensored Japanese adult videos featuring numerous models and categories. The business is operated by VECTOR INNOVATIONS LTD., a UK-registered company, with a domain age consistent with an established online adult content provider. The website targets adult users interested in Japanese and Asian squirting content and positions itself within a specialized segment of the adult media industry. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.7.1, Google Tag Manager, Sentry for error tracking, and Yandex Metrika for analytics. The site is mobile-optimized with a responsive design and includes standard adult content compliance features such as age verification popups and cookie consent banners. However, some technical debt is evident with the use of outdated JavaScript libraries and lack of advanced security headers. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers like Content-Security-Policy. The use of an outdated jQuery version introduces potential vulnerabilities. No published security or incident response policies were found, and no direct company contact emails or phone numbers are provided on the site, which is typical for adult content providers to reduce spam and abuse. Overall, Shiofuky.com presents a moderately mature digital presence with good content quality and business credibility but has room for improvement in security posture and privacy compliance. Strategic recommendations include updating legacy libraries, enabling DNSSEC, implementing security headers, and enhancing transparency around security policies to improve trust and compliance.
VECTOR INNOVATIONS LTD.av69.tv
Media · United Kingdom
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AV69.tv is an established adult entertainment website specializing in Japanese adult videos featuring top AV idols and models. The platform offers a large archive of uncensored Japanese AV content in full HD quality, targeting adult viewers globally. The business operates on a subscription model with membership access and promotes mobile-friendly viewing. The company behind the site is VECTOR INNOVATIONS LTD., based in the UK, with domain registration privacy protection through Domains By Proxy in the US. The domain is mature, created in 2006, supporting the site's legitimacy. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Google Tag Manager, Yandex Metrika, and Sentry for error tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements are recommended such as enabling DNSSEC and adding security headers to enhance security posture. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks published security policies and incident response contacts. No critical vulnerabilities or WAF blocking were detected, but the absence of DNSSEC and security headers slightly lowers the security score. Privacy compliance is basic with privacy and cookie policies present but no explicit GDPR compliance statements. Overall, AV69.tv presents a moderately secure and professional adult content platform with a solid business foundation. Strategic improvements in security practices and transparency would enhance trust and compliance, supporting long-term business sustainability.

Other
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website videos-zoofilia.com operates as a niche adult content platform specializing in zoophilia videos, offering free streaming of explicit content involving sexual acts between humans and animals. The business model relies on advertising revenue, with no evident monetization beyond free content access. The site targets adult users interested in this illegal and unethical niche, with content primarily in Portuguese and Spanish. Technically, the site is built on WordPress 6.8.1, uses common JavaScript libraries like jQuery, and integrates Google Analytics and Tag Manager for tracking. Hosting details are limited but DNS is managed via Cloudflare, and the domain is registered with NameSilo since 2015, indicating a stable but low-transparency registration. Security posture is weak, lacking essential HTTP security headers, privacy policies, and incident response contacts. The site uses HTTPS but does not implement DNSSEC or advanced security controls. Privacy compliance is absent, with no cookie consent or GDPR indicators. Overall, the site presents significant legal, ethical, and security risks, with poor professionalism and minimal trust indicators.
Clixmotive Media Ldaero-advertising.com
Technology · Portugal
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
EroAdvertising is a Portugal-based adult advertising network specializing in providing monetization tools for publishers and targeted advertising solutions for advertisers worldwide. The company offers a variety of ad formats including banners, pop-unders, native ads, and video ads, positioning itself as a competitive player in the adult digital advertising market. Their platform supports global traffic with advanced targeting and payment options, catering to a niche but sizable audience. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries for enhanced user experience and interactivity. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism via Cookiebot, reflecting awareness of GDPR requirements. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. The absence of WHOIS domain registration data is a notable concern, impacting trust and legitimacy assessment. Overall, the site is professional and functional but would benefit from improved transparency on domain registration and enhanced security policies.
VRSmash.comvrsmash.com
Media
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
VRSmash.com operates as a large-scale adult entertainment platform specializing in virtual reality pornographic content. It offers a vast library of over 25,000 VR videos from more than 160 studios, targeting adult users interested in immersive VR experiences. The website is professionally designed with modern web technologies such as Nuxt.js and Vue.js, and it leverages structured data to enhance SEO and content discoverability. The platform integrates Google Tag Manager for analytics and likely uses Cloudflare for content delivery and security. From a security perspective, the site enforces HTTPS and uses some best practices but lacks critical security headers and formal privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust. The absence of WHOIS registration data is a significant concern, as it raises questions about domain legitimacy and ownership. Overall, while the site delivers a rich content experience with good technical implementation, it falls short in privacy compliance and business credibility due to missing legal and contact information. This poses risks for user trust and regulatory compliance, especially given the adult nature of the content. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, adding security headers, providing clear contact and incident response channels, and clarifying domain registration details to improve trustworthiness and compliance.
Bang Swagbangswag.com
E-commerce · United States
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Bang Swag is a small e-commerce business operating an online store selling swag and merchandise products, primarily targeting consumers interested in such items. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, and includes basic e-commerce functionalities and customer interaction tools such as Crisp Chat. The business is located in San Diego, California, as indicated by structured data embedded in the site. Technically, the site uses modern JavaScript frameworks and Wix's Thunderbolt infrastructure, providing moderate performance and mobile optimization. Security-wise, the site enforces HTTPS and includes some security hardening scripts, but lacks explicit security headers and visible privacy or cookie policies, which are important for compliance and trust. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy or recent registration status, although the site content and structure suggest a legitimate business presence. Overall, the site demonstrates a moderate level of digital maturity but requires improvements in privacy compliance and security transparency.
SCTR SERVICESitsup.com
Technology
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
ItsUp is a digital marketing optimization software platform designed to empower performance marketers and advertisers with real-time campaign tracking, analysis, and optimization capabilities. The platform offers a comprehensive suite of tools including ad zone management, offer and creative management, campaign optimization, and event tracking, all delivered through a cloud-based infrastructure with CDN support to ensure high availability and scalability. The website positions ItsUp as a niche player focused on high-volume digital marketing campaigns, targeting advertisers seeking to maximize ROI through data-driven decisions. Technically, the website employs modern web technologies such as Bootstrap for responsive design, FontAwesome for iconography, and integrates multimedia content like YouTube videos. The platform emphasizes performance and mobile optimization, although some technical details such as hosting provider and CMS are not disclosed. The site lacks visible advanced security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No explicit security policies or incident response contacts are provided, and GDPR compliance indicators are minimal. This gap in transparency and compliance could impact user trust and regulatory adherence. Overall, ItsUp presents a professional and functional digital marketing solution with solid technical foundations but requires enhancements in security posture, privacy compliance, and domain legitimacy verification to strengthen its market credibility and user trust.
Media · Finland
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
PornL.com is an established adult content website founded in 2005, offering a wide range of free pornographic videos with a focus on high-quality content and top-rated models. It operates as part of the TXXX Network, leveraging affiliate marketing and advertising to monetize its platform. The site targets adult users worldwide, with a particular presence in Finland as indicated by the country code. Technically, the site uses modern web technologies including Vue.js and integrates multiple third-party ad networks and tracking services such as Yandex Metrika and ExoClick. The website is mobile-optimized and provides a good user experience with clear navigation and content categorization. Security-wise, the site enforces HTTPS and includes age verification and RTA labeling for parental control, but lacks some advanced security headers and a vulnerability disclosure policy. Privacy compliance is addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site demonstrates a moderate to good security posture and business credibility, though it could improve transparency and security best practices.
Domains By Proxy, LLCxshemale.tube
Media · United States
71Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
XSHEMALE.tube is an adult entertainment website specializing in free streaming of shemale and transgender pornographic videos. The site operates as part of a larger adult network, offering categorized content, pornstar models, and channels. It targets adult viewers interested in niche transgender content and monetizes primarily through advertising, including popunders, push notifications, and in-stream ads. Technically, the site uses modern web technologies such as Vue.js and integrates multiple ad networks and tracking services. While HTTPS is enforced, the site lacks advanced security headers and DNSSEC, which could improve its security posture. Privacy and compliance features such as privacy policies, cookie consent, and terms of service are not evident, which poses compliance risks. The domain is relatively new and uses privacy protection typical for adult sites, which slightly reduces trust but is common in the industry. Overall, the site functions as a niche adult content platform with moderate technical maturity but weak privacy and security compliance.
Free Gay Porn HD Videos - OURGAY.comourgay.com
Media
66Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
OurGay.com operates as a niche adult entertainment website specializing in free gay pornographic videos, targeting adult audiences interested in gay content. The site is part of a broader network of adult sites under the TXXX Network umbrella, leveraging advertising revenue as its primary business model. The platform offers categorized video content, model and channel browsing, and user features such as watch history. Technically, the site employs modern JavaScript frameworks (likely Vue.js), integrates multiple ad networks including ExoClick and Clickadilla, and uses Yandex Metrika for analytics. The site is mobile-optimized and provides basic SEO and accessibility features. Security posture is moderate with HTTPS enforced and some security headers present; however, it lacks a Content-Security-Policy header and formal incident response contacts. Privacy compliance is basic with privacy and cookie policies present and consent mechanisms implemented. WHOIS data indicates a stable domain registration since 2014 without privacy protection, supporting legitimacy. Overall, the site is functional and moderately professional but could improve security and transparency aspects.
Media · Finland
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
GetTranny.com is an adult media platform specializing in free streaming of transgender and shemale pornographic videos. The site targets adult viewers interested in niche transgender content and monetizes primarily through advertising networks such as ExoClick and Clickadilla. The platform offers a broad catalog of videos with search and categorization features, optimized for desktop and mobile devices. Technically, the site uses modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and ad tracking services, and enforces HTTPS for secure connections. However, it lacks advanced DNS security features like DNSSEC and does not publish detailed security or incident response policies. Privacy compliance is basic, with cookie consent banners and privacy policies present but no strong GDPR indicators. Business credibility is limited by the absence of verified contact information or certifications. Overall, the site is functional and professionally designed but has room for improvement in security transparency and compliance.
Media
62Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
MrGay.com is an adult entertainment website specializing in free HD gay porn videos. The site targets adult gay men and viewers interested in male adult content, offering a wide range of videos and categories. The business model relies heavily on advertising revenue, integrating multiple ad networks and tracking services. The domain is well-established, created in 1999, and registered with NameCheap, Inc., indicating a stable presence in the adult media niche. Technically, the site uses modern JavaScript frameworks (likely Vue.js), integrates popular analytics tools such as Google Analytics and Yandex Metrika, and serves content over HTTPS, ensuring basic security for users. However, the site lacks visible privacy, cookie, and terms of service policies, which impacts its compliance posture and user trust. No contact or incident response information is provided, limiting transparency and support options. Security headers are not detected, and DNSSEC is not enabled, representing areas for security enhancement. Overall, the site is functional and content-rich but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Domains By Proxy, LLCbdsmx.tube
Media · United States
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
BDSMX.Tube is an adult media streaming platform specializing in free BDSM and fetish pornographic videos. The site targets adult users interested in niche BDSM content and operates on an ad-supported business model. It offers video browsing, search, and user account features such as watch later and history. The platform is relatively new, with domain registration dating back to 2021, and uses privacy protection services for WHOIS data. Technically, the site employs modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and advertising networks, and uses HTTPS for secure connections. However, it lacks visible privacy, cookie, and terms of service policies, and does not provide contact or security incident information, which impacts its privacy compliance and business credibility scores. The site is accessible without WAF or security blocks, but heavy third-party ad and tracking scripts indicate extensive user tracking.
Domains By Proxy, LLCblackporn.tube
Media · United States
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
BlackPorn.Tube is an adult content streaming website specializing in black and ebony pornographic videos. It operates as a free streaming platform monetized primarily through advertising networks such as ExoClick and Clickadilla. The site offers a wide range of video content categorized by popularity, genres, and performers, targeting adult audiences interested in niche black porn content. The domain is relatively new, registered in late 2021, and uses privacy protection services common in the adult entertainment industry. Technically, the site uses modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and ad tracking services, and is optimized for mobile devices with good SEO practices. However, it lacks critical privacy and security policies, contact information, and vulnerability disclosures, which impacts its trustworthiness and compliance posture. Security headers are partially implemented, and SSL is properly configured, but there is room for improvement in security best practices and transparency.
Media · Finland
67Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
InPorn.com is a long-established adult content streaming platform offering free pornographic videos in high definition. The site targets adult users seeking free access to a wide variety of porn videos, including categories, pornstars, and pornsite directories. The business model is primarily advertising-supported, leveraging multiple ad networks and affiliate programs to monetize traffic. The website is technically mature, using modern JavaScript frameworks such as Vue.js, and integrates popular analytics and ad technologies. Mobile optimization and user experience are good, with clear navigation and a professional design. However, the site lacks visible privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS enabled and domain registration transparency, but missing DNSSEC and security headers reduce overall security confidence. The site employs extensive tracking and advertising scripts, which may raise privacy concerns. Overall, the platform is functional and popular but would benefit from improved privacy and security practices.