Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
82,901–82,950 of 99,068
- OOrigin DNS error | maximussingapore.sg | Cloudflare
maximussingapore.sg
Other
71Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website maximussingapore.sg is currently inaccessible and displays a Cloudflare origin DNS error (error 1016), indicating that the origin server is unreachable or DNS settings are misconfigured. Due to this, no actual business content, contact information, or policies are available for review. The domain is registered since 2016 with Ascio Technologies, Inc. and uses Cloudflare for DNS and CDN services. The lack of accessible content and security policies severely limits the ability to assess the company's business model, services, or compliance posture. Technically, the site relies on Cloudflare but suffers from DNS misconfiguration that prevents normal operation. From a security perspective, the site lacks visible security headers and privacy compliance mechanisms. The DNSSEC is not enabled, which is a minor security gap. No forms or data collection mechanisms are present except for a Cloudflare feedback widget. Overall, the security posture is weak due to the DNS error and lack of policies. Given the site is blocked by Cloudflare's WAF error page, the overall risk is elevated due to unavailability and lack of transparency. Strategic remediation should focus on correcting DNS settings, enabling DNSSEC, implementing security headers, and publishing privacy and cookie policies to improve trust and compliance.
Green Tech Cluster Latviagreentechlatvia.eu
Technology · Latvia
50Medium
NIS2 25 · GDPR 55
NIS2 25 · GDPR 55
Green Tech Cluster Latvia is a cross-sectoral cooperation platform focused on green and smart technologies, fostering collaboration among companies, educational, and research institutions in Latvia and the Baltic Sea Region. The cluster targets sustainable development sectors such as mechanical engineering, ICT, space technology, and energy-efficient buildings, positioning itself as a leading cluster with significant export potential. The website is built on WordPress with a modern tech stack including Google Analytics and Facebook Pixel for tracking. It demonstrates good mobile optimization and SEO practices but lacks an explicit privacy policy and comprehensive security headers. The security posture is solid with HTTPS and reCAPTCHA in place, though improvements in security headers and incident response policies are recommended. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.
Other
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website at lidds.com/lander appears to be a minimal placeholder or parking page with very limited content. There is no visible business information, contact details, or policies, which suggests the site is not actively used for customer engagement or business operations. The domain is registered with GoDaddy.com, LLC since 2004, indicating a long-standing registration, but the website content does not reflect an active or mature business presence. Technically, the site uses basic JavaScript and CSS assets served from wsimg.com and includes Google Adsense scripts, but lacks modern SEO, accessibility, or security features. The absence of HTTPS and security headers is a significant security concern. Overall, the site has a low security posture and poor privacy compliance, with no visible incident response or vulnerability disclosure mechanisms.
Healthcare
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Kirwan Surgical Products, LLC is a specialized healthcare company focused on manufacturing and developing superior bipolar and monopolar surgical products for demanding microsurgical specialties including ophthalmology, ENT, plastic and reconstructive surgery, and orthopaedics. The company positions itself as a niche provider with a strong emphasis on quality and innovation, supported by quality system certifications and a professional online presence. Their product portfolio includes reusable and disposable forceps, generators, pencils, and other surgical accessories, complemented by maintenance and custom product services. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Modernizr, and uses Google Tag Manager for analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. However, some accessibility features could be improved. The site lacks explicit cookie consent mechanisms and some security headers, which are areas for enhancement. From a security perspective, the site enforces HTTPS and implements client-side JavaScript error reporting, indicating a proactive approach to monitoring. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration transparency, which slightly impacts trustworthiness. Privacy compliance is basic, with a privacy policy present but no clear GDPR compliance indicators or cookie consent. Overall, Kirwan Surgical Products presents a credible and professional digital footprint with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.
Government · Serbia
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website represents the official Serbian government authority responsible for public information access and personal data protection. It serves as a regulatory and supervisory body, providing services such as oversight of information access rights, data protection enforcement, educational programs, and publication of reports. The site targets citizens, public institutions, media, and NGOs, positioning itself as a key national regulator in the government sector. The domain is well-established since 2010, consistent with the organization's history. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and jQuery, hosted by a reputable Serbian telecom provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF interference detected. Security posture is adequate with HTTPS enabled and secure form handling, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is mostly met with a clear privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and credible, reflecting its government status. Strategic improvements in security headers, DNSSEC, and privacy consent would further strengthen its posture and compliance.
- PPodravka d.d.
vegeta.com
Retail · Croatia
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Vegeta.com is the official website for the Vegeta brand, a leading European food seasoning product line owned by Podravka d.d. The site offers comprehensive product assortments, recipes, and brand history, targeting consumers interested in cooking and seasoning. The website is well designed, mobile optimized, and uses modern web technologies including WordPress CMS, Yoast SEO, and various JavaScript libraries. Hosting appears to be supported by Microsoft Azure DNS infrastructure. Security posture is solid with HTTPS enforced and domain transfer/update protections in place, though DNSSEC is not enabled and no explicit security headers were detected. Privacy and cookie policies are present with consent mechanisms, indicating good GDPR compliance. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site reflects a mature, professional digital presence for a large retail food brand.
- EEdgewell
ob-tampons.com
Retail · United States
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.ob-tampons.com represents the o.b.® brand, a feminine hygiene product line specializing in non-applicator tampons. It is branded under Edgewell, a large company in the retail sector. The site provides product information, a period calculator tool, FAQs, and promotional offers targeting women seeking environmentally friendly tampon options. The business model is primarily informational with e-commerce support through product details and offers. Technically, the site is built on the Telerik Sitefinity CMS platform with modern JavaScript libraries and is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy and terms of service pages, which are important for compliance and trust. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness despite the professional branding and content. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.
- C
Other
75Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website cvideo.no is currently inaccessible due to a Cloudflare 525 SSL handshake failure error, indicating that Cloudflare cannot establish a secure SSL connection with the origin server. This results in the website content being completely blocked and replaced by a Cloudflare error page. No business, contact, or privacy-related information is available on the page, severely limiting the ability to assess the company's operations or compliance posture. The domain was registered in 2014, suggesting some longevity, but lack of registrant details and website content reduces trust. From a technical perspective, the site relies on Cloudflare as a proxy service, but the origin server's SSL configuration is misconfigured or incompatible, causing the failure. No CMS, analytics, or marketing technologies are detectable due to the blocked content. Security posture is weak given the SSL failure and absence of security headers or policies. Privacy compliance cannot be evaluated as no privacy or cookie policies are present. Overall, the site exhibits critical accessibility and security issues that prevent meaningful analysis of business credibility or compliance. The primary risk is the SSL misconfiguration that blocks user access and undermines trust. Strategic remediation of SSL settings and restoration of website content are essential to enable further evaluation and improve security and compliance posture.
DEVNRISEdevnrise.com
Technology · Latvia
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
DEVNRISE is a Latvia-based digital agency specializing in website and eCommerce development alongside digital marketing services. Established in 2018, the company targets corporate clients, startups, and B2B/B2C sectors, offering services such as digital strategy, UI/UX design, custom web development, SEO, and contextual advertising. Their market position is supported by a portfolio of diverse clients and positive testimonials, indicating a reliable and professional service provider. Technically, the website employs modern analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and VWO, with a CMS likely based on MODX and frameworks like Laravel and Yii mentioned in service offerings. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and reCAPTCHA integration, though lacks DNSSEC and explicit security headers. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no terms of service or incident response policies are published. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness.
Government · Latvia
56Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The American Chamber of Commerce in Latvia is a well-established non-profit organization dedicated to fostering business relations between Latvia and the United States. It offers advocacy, networking, events, and member services targeting businesses and professionals interested in transatlantic commerce. The website reflects a mature organization with a consistent brand and a clear focus on its mission. Technically, the site uses a modern JavaScript stack including jQuery, bxSlider, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit incident response contacts are absent. Overall, the site is professional and trustworthy, though WHOIS data is unavailable due to query limits, limiting domain legitimacy verification.
Juvo Web Designjuvo.ie
Technology · Ireland
64Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
Juvo Web Design is a Dublin-based digital creative agency specializing in web design, development, and content creation with over 20 years of experience. The company targets businesses in Ireland seeking to grow their digital presence through professional website solutions and digital marketing services. The website reflects a mature market position with a portfolio of notable projects and active social media engagement. Technically, the site is built on WordPress with performance optimizations via NitroPack and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business model and market claims.
Topcon Healthcaretopconhealthcare.com
Healthcare
58Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Topcon Healthcare is a medium-sized healthcare technology company specializing in advanced eye health solutions and optometry equipment. The company positions itself as an innovator empowering optometrists with efficient and user-friendly technology to enhance patient care and operational efficiency. The website is built on WordPress with SEO and performance optimizations, including lazy loading and video integration via Wistia. While the technical infrastructure is modern and the site is mobile-optimized, there are gaps in privacy compliance and security best practices. Notably, no privacy or cookie policies were found, and no security headers were detected in the provided content. Additionally, an external script from a suspicious domain was identified, which could pose security risks. The domain registration data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates good business credibility and technical implementation but requires improvements in privacy compliance and security posture.
Haivisionhaivision.com
Technology
68Medium
NIS2 29 · GDPR 68
NIS2 29 · GDPR 68
Haivision is a recognized leader in the technology sector specializing in low latency video streaming and encoding solutions tailored for broadcasters, enterprises, and government organizations. Their website reflects a mature enterprise with a comprehensive product portfolio including live video contribution, video walls, ISR video solutions, IPTV distribution, and SRT streaming technologies. The company targets professional and mission-critical video networking markets, positioning itself as a key player in real-time video delivery solutions. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations such as NitroPack. The site is well-structured, mobile-optimized, and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Invoca. Security posture is solid with HTTPS enforced and secure form implementations, though there is room for improvement in security headers and published security policies. The security evaluation shows a good baseline with no critical vulnerabilities detected in the visible content. However, the absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. Contact information is clearly presented, enhancing business credibility. Overall, Haivision's digital presence is professional and trustworthy, with recommendations to enhance security headers, publish incident response and vulnerability disclosure policies, and clarify domain registration details to improve trust and compliance further.
- Corporate Solutions
bodylease.dev
Technology · Latvia
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
bodylease.dev is an international IT company specializing in leasing IT talent such as developers, testers, and consultants to businesses seeking to outsource IT projects and improve productivity. The company operates primarily from Latvia with a support office in Uzbekistan and is part of the Corporate Solutions group. Their business model focuses on providing flexible IT staffing solutions to accelerate project delivery and reduce costs for clients. The website presents a professional and consistent brand image with clear navigation and relevant content targeting businesses in need of IT outsourcing services. Technically, the site is built on Drupal 10, uses modern web technologies including Font Awesome and Google Tag Manager, and is mobile optimized with basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are absent. No blocking or WAF mechanisms interfere with content access. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is functional, professional, and trustworthy with room for improvement in security and privacy transparency.
Alma Career Latvia SIApardarbu.lv
Other · Latvia
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Pardarbu.lv is a professional Latvian career and job portal operated by Alma Career Latvia SIA, a leading internet personnel recruitment service provider in Latvia. The website offers job listings, career advice blogs, and recruitment services targeting job seekers, employers, and youth. The site is built on WordPress with a modern tech stack including analytics and social media integrations. While the website is well-designed, mobile-optimized, and content-rich, it lacks explicit privacy and cookie policies, which poses compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is credible and functional but would benefit from enhanced privacy compliance and security hardening.
OnlineKazino.netonlinekazino.net
Hospitality · Latvia
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
OnlineKazino.net is a Latvian online casino informational and affiliate website established in 2018. It provides comprehensive reviews, bonus listings, free spins offers, and educational content targeting Latvian-speaking online casino players. The website is built on WordPress, uses Cloudflare DNS, and integrates Google Analytics and Clicky for visitor tracking. It employs HTTPS with a valid SSL certificate but lacks some advanced security headers. No privacy or cookie policies are explicitly found, which may impact compliance. The domain registration is transparent and consistent with the business claims, indicating legitimacy. Overall, the site offers good content quality and user experience with moderate technical and security maturity.
360 Cities Holding B.V.360cities.net
Media · Netherlands
67Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
360Cities.net operates as a leading global platform specializing in 360° panoramic images and videos, catering to a diverse audience including educators, publishers, advertisers, filmmakers, and VR content creators. The company offers a marketplace and licensing services that enable contributors to monetize their panoramic media while providing customers with high-quality immersive content. The website demonstrates a strong market position with a professional and consistent brand presence, supported by a vibrant contributor community and notable customer partnerships.
- FriendFinder Networks Inc.
ffn.com
Media
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
FriendFinder Networks Inc. operates FFN.com, a leading online dating and adult entertainment platform with a history dating back to 1996. The company offers a portfolio of adult-oriented social networking and dating websites, targeting adults seeking passionate and open online connections. The business model relies on user engagement, affiliate marketing, and advertising revenue. The website is built on WordPress with modern plugins and themes, providing a good user experience and mobile optimization. However, the absence of explicit privacy and cookie policies and lack of visible contact information on the homepage indicate gaps in privacy compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and policies. WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.
- FFCServiceStation
fcservicestation.com
Other
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
FCServiceStation operates as a subscription billing service primarily targeting adult content websites, providing a platform for secure subscription management and billing since 2015. The website positions itself as a trusted merchant facilitating transactions for various internet websites, with a focus on subscription cancellation and customer support via a 24/7 toll-free phone line. The business model centers on acting as a payment processor and account service station for multiple online services. Technically, the website is basic with minimal use of modern web technologies. It uses standard HTML and CSS with DNS hosted on Cloudflare, but lacks advanced frameworks, CMS, or analytics tools. The site is moderately performant but shows limited mobile optimization and accessibility features. No security headers or HTTPS status were detected from the provided data, indicating potential risks in secure communications. From a security perspective, the site has a weak posture due to the absence of HTTPS confirmation, missing security headers, and lack of privacy or cookie policies. The domain registration is consistent and stable, with clientTransferProhibited status and a domain age appropriate for the business claims. However, the lack of email contact and detailed company information reduces transparency and trust. No incident response or vulnerability disclosure mechanisms are evident. Overall, the website presents moderate business credibility but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user protection. Strategic recommendations include implementing HTTPS, adding comprehensive privacy and cookie policies, improving mobile and accessibility features, and establishing clear incident response channels.
Segpaysegpay.com
Finance · United States
73Medium
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Segpay is a well-established payment processing company founded in 2005, specializing in secure digital payment solutions for merchants across various verticals including e-commerce, SaaS, subscriptions, online gaming, CBD, and adult dating. The company positions itself as a global leader with tailored services for US, EU, and UK markets, emphasizing revenue growth, risk reduction, and simplicity for its clients. Their website reflects a mature digital presence with comprehensive service offerings and clear business information. Technically, the website is built on WordPress using Elementor and Gravity Forms, supported by Cloudflare for DNS and CDN services. It integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Crazy Egg, ZoomInfo, and DataDome for bot protection. The site is mobile-optimized with good SEO practices and moderate performance. Security is robust with HTTPS enforced and client transfer protection on the domain, though some security headers are missing and cookie consent mechanisms are not evident. From a security standpoint, Segpay demonstrates good practices including fraud protection features and bot mitigation. However, the absence of a vulnerability disclosure policy and security.txt file indicates room for improvement in transparency and incident response readiness. The domain WHOIS data is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the company. Overall, Segpay's website and digital infrastructure present a professional and trustworthy image with solid business credibility. Strategic enhancements in privacy compliance and security headers would further strengthen their security posture and regulatory alignment.
SIA DEPO DIYdepo-diy.ee
Retail · Estonia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DEPO is a well-established retail company operating primarily in Estonia with a focus on home improvement, gardening, and general retail products. The website reflects a mature digital presence with multilingual support and an online shopping platform, targeting consumers in the Baltic region. The company appears to have a solid market position with physical stores and online services, catering to a broad consumer base. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional and trustworthy, with clear contact information and consistent branding.
BOXSTORAGEboxnoliktavas.lv
Real Estate · Latvia
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
BOXSTORAGE is a Latvian company specializing in secure storage and office rental services, operating multiple physical locations across Latvia. The website presents a professional and consistent brand image with clear contact phone numbers and location details, targeting individuals and businesses seeking storage solutions. The technical infrastructure suggests use of Ruby on Rails framework with modern responsive design and image optimization, indicating a moderate level of digital maturity. Security posture shows some awareness with CSRF tokens implemented, but lacks comprehensive security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, impacting overall trust. Strategic improvements in security policies, privacy compliance, and WHOIS transparency are recommended to enhance trust and compliance.
- WWaiting for the redirectiron...
wildside.it
Other
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website wildside.it currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is well aged, created in 2010, and DNSSEC is enabled, which are positive indicators of legitimacy. However, the site uses very outdated CMS technologies (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities and are no longer supported. No privacy, cookie, or terms of service policies are visible, nor is there any contact or business information available on the page. The security check is powered by BitNinja.IO, a third-party security service, suggesting some level of protection against attacks. Overall, the site’s technical infrastructure appears outdated and the user experience is poor due to the blocking page and lack of content.
Fremantlefremantle.com
Media
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Fremantle is a globally recognized leader in the creation, production, and distribution of entertainment content, including drama, film, documentaries, and game shows. The company operates at an enterprise scale with a strong market position and a comprehensive portfolio of productions. Their website reflects a high level of professionalism, showcasing rich multimedia content and clear navigation aimed at media professionals and entertainment consumers. Technically, the website leverages modern web technologies such as React and Next.js, hosted likely behind Cloudflare DNS services, and uses DatoCMS for content management. The site is optimized for performance, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. From a security perspective, the site employs HTTPS with good SSL configuration and domain transfer protections. However, DNSSEC is not enabled, and there is no visible security.txt or explicit incident response contact information, which are areas for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, Fremantle's website demonstrates a strong security posture, excellent content quality, and good privacy compliance, supporting its credibility as a major media enterprise. Strategic enhancements in DNS security and vulnerability disclosure practices would further strengthen their security and trust profile.
Other
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The domain domina.lv currently hosts a parked domain page indicating it is for sale, with no active business or service content. The website primarily serves as an advertising placeholder with Google Ads integration. There is no identifiable company or business information, and no contact details are provided. The site lacks substantive content, branding, or trust indicators, limiting its business credibility. Technically, the site uses basic HTML, CSS, and JavaScript with Google advertising scripts. There is no evidence of a CMS or advanced frameworks. The site is moderately optimized for mobile but lacks accessibility and SEO best practices. Security measures such as HTTPS and security headers are not verifiable from the provided data, and no forms or user inputs are present. Security posture is minimal with no visible vulnerabilities but also no advanced protections. Privacy compliance is basic with a privacy policy and terms of service pages but no cookie consent mechanism or GDPR indicators. The lack of WHOIS data due to query limits restricts domain legitimacy assessment, but the parked status and domain-for-sale message suggest no active business use. Overall, the site presents a low-risk profile but also low trust and business credibility. Strategic recommendations include improving transparency, adding contact information, implementing security best practices, and enhancing privacy compliance if the domain is to be developed into an active business site.
Sintec Groupsintecmena.ae
Manufacturing · United Arab Emirates
59Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sintec Group operates as a specialized provider of mechanical and electrical installation services with a strong presence in the Middle East and North Africa (MENA) region, supported by offices in the UK, USA, Latvia, and Russia. The company focuses on delivering high-quality installation services tailored to customer-specific requirements across various industries including manufacturing, transportation, and energy. Their service portfolio includes electrical installation, design, procurement, commissioning, and project management, supported by a skilled in-house workforce and certified quality assurance processes. Technically, the website is built on a modern WordPress CMS platform, leveraging popular libraries and frameworks such as jQuery and Bootstrap, and is hosted behind Cloudflare for performance and security. The site demonstrates good mobile optimization, SEO practices, and user experience design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and formal security policies are absent. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party components to maintain security and compliance.
Baltic Communication Partnersagencyreviti.com
Other · Latvia
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Reviti Agency, operated by SIA Baltic Communication Partners, is a strategic communication agency based in Latvia offering a comprehensive range of services including strategy development, corporate communication, media relations, digital communication, and content marketing. The agency targets both B2B and B2C clients across multiple industries such as healthcare, finance, and energy. Their portfolio demonstrates active engagement in social campaigns and corporate projects, supported by a professional team with extensive experience and LinkedIn presence. Technically, the website is built on WordPress 6.3.2, utilizing modern libraries like Bootstrap 5 and jQuery, with integration of Google Maps API for location services. The site is mobile-optimized and presents good navigation and content quality, though performance is moderate. No advanced frameworks or platforms beyond WordPress and common JS libraries are detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as CSP or HSTS. No privacy or cookie policies are present, indicating gaps in GDPR compliance. No incident response or vulnerability disclosure information is provided, and no analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is professional and credible but would benefit from enhanced security practices and privacy compliance measures to improve trust and regulatory adherence.
Coinciergecoincierge.de
Finance · Germany
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Coincierge.de is a German-language cryptocurrency news and information website established around 2018. It provides comprehensive content on Bitcoin, Ethereum, Ripple, blockchain technology, ICOs, and related crypto topics. The site targets cryptocurrency enthusiasts, investors, and beginners seeking market news, guides, and trading insights. The business model appears to be content publishing combined with affiliate marketing and advertising revenue. Technically, the site runs on WordPress with the Newspaper theme, leveraging modern performance optimizations such as WP Rocket and lazy loading. It integrates Google Tag Manager and Visual Website Optimizer for analytics and marketing. Security posture is adequate with HTTPS enforced and partial security headers, but lacks explicit security policies or incident response contacts. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is professional and functional, serving a niche market with good content quality and technical implementation.
Swiss Finance Startupsswissfinancestartups.com
Finance · Switzerland
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Swiss Finance Startups operates as a niche platform dedicated to the Swiss finance startup ecosystem, providing information and resources to finance professionals, startup founders, and investors. The website is built on WordPress and leverages common plugins such as Yoast SEO to enhance search engine visibility. Hosting is managed by a reputable registrar and DNS is handled via Cloudflare, ensuring reliable infrastructure. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security features like DNSSEC and security headers. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is implemented. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance documentation.
Sussexsussexhealthandcare.uk
Other
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website 'sussexhealthandcare.uk' operates as an affiliate and review platform focusing on non GamStop online casinos targeting UK players seeking gambling options outside UK Gambling Commission restrictions. The site provides detailed reviews, bonus information, and guides for various offshore casino platforms. Technically, the site is built on WordPress with common libraries such as jQuery, Bootstrap, and FontAwesome, and uses Yoast SEO for optimization. The site is mobile responsive and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks advanced security headers and cookie consent mechanisms, which impacts privacy compliance. The WHOIS data query failed due to querying the subdomain 'www.sussexhealthandcare.uk' instead of the registered domain, resulting in no registrar or registration data, which reduces trust in domain legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.
Other
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website thebrexitparty.org is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to the site's content. This prevents extraction of meaningful business, privacy, or security information. The domain is registered since 2019 with NameCheap and uses Cloudflare for DNS and security services. No privacy policies, cookie consent mechanisms, contact information, or business details are visible in the accessible content. The technical infrastructure relies on Cloudflare's security platform, but no further CMS or technology stack details are available. The security posture cannot be fully assessed due to lack of content access, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site appears to be a placeholder or protected gateway rather than a fully accessible website.
geneticdisordersukgeneticdisordersuk.org
Other
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website geneticdisordersuk.org currently serves as an affiliate and informational platform focused on non GamStop casinos, providing detailed reviews, bonus information, and guidance for UK gamblers interested in bypassing the UK Gambling Commission's self-exclusion scheme. Despite the domain name suggesting a focus on genetic disorders, the content is entirely gambling-related, indicating possible domain repurposing. The site is built on WordPress with standard SEO optimizations and offers a good user experience with mobile responsiveness and clear navigation. However, it lacks critical privacy and cookie policies, which impacts its compliance posture. From a technical perspective, the site uses modern web technologies including WordPress, Yoast SEO, and jQuery, and is served securely over HTTPS. No security headers were detected in the provided data, which suggests room for improvement in security hardening. The absence of WHOIS data and registrant information reduces the ability to verify domain legitimacy and trustworthiness, although the website content appears professional and consistent with an affiliate business model. Security-wise, the site shows basic good practices such as HTTPS but lacks visible security policies, incident response contacts, and security headers. There are no indications of vulnerabilities or malicious content in the provided data. Overall, the site presents moderate risk primarily due to missing privacy compliance and lack of transparency in domain registration. Strategically, the site should focus on improving privacy compliance by adding clear privacy and cookie policies, enhancing security headers, and improving transparency about the business entity behind the site to increase trust and credibility among users and regulators.
Evelina Londonsupportevelina.org.uk
Other · United Kingdom
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.supportevelina.org.uk operates as an informational platform focused on reviewing and providing detailed insights about non GamStop online casinos in the UK market. It targets UK-based online gamblers seeking alternatives to GamStop-registered casinos, offering comprehensive casino reviews, bonus information, and responsible gaming advice. The site positions itself as a niche affiliate or informational resource within the online gambling sector. Technically, the site is built on WordPress CMS, utilizing common web technologies such as jQuery, Font Awesome, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices including meta tags and Open Graph data. Security-wise, the site enforces HTTPS but lacks several recommended security headers and does not provide a cookie consent mechanism, which may impact privacy compliance. The WHOIS data for the domain is unavailable and indicates domain naming issues per Nominet UK, raising some legitimacy concerns despite the professional content and accessible website. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.
LeadDog Marketingleaddogmarketing.com
Media · Italy
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
LeadDog Marketing operates a specialized Italian-language website focused on European online casinos, providing detailed reviews, bonus information, and educational content to gambling enthusiasts. The site is positioned as a niche content and affiliate marketing platform targeting Italian players interested in European gambling options. Technically, the website is built on WordPress using the GeneratePress theme and Yoast SEO plugin, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and security documentation.
- OOrkla Latvija
selgacepumi.lv
Retail · Latvia
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Selga is a well-established Latvian biscuit brand operating under Orkla Latvija, with a history dating back to 1956. The company offers a diverse range of biscuit and cracker products targeting a broad consumer base, emphasizing tradition and quality. The website serves as a marketing and informational platform showcasing products, recipes, and brand values. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with integrations for multilingual support and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site presents a professional and trustworthy digital presence aligned with its business goals.
- Maximus
maximusuae.ae
Government · United Arab Emirates
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Maximus UAE is a large enterprise focused on delivering government and healthcare-related services, including employment programs, BPO, contact centers, and health services. The company leverages over 45 years of experience to support government initiatives and individual career development in the UAE. The website is professionally designed using Drupal 10, with good mobile optimization and clear navigation. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Adobe DTM, and Crazy Egg, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is trustworthy and well-positioned in its sector, with room for improvement in security transparency and direct contact information.
- Maximus India
maximus-india.com
Technology · India
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Maximus India is a technology and health services provider focused on delivering transformative digital solutions to government agencies. Their offerings include IT consulting, application development, cloud services, and clinical health services, positioning them as a key player in the public sector technology market. The website reflects a professional and modern digital presence, leveraging Adobe Experience Manager CMS and modern frontend technologies such as Bootstrap and jQuery. The site is well-structured, mobile-optimized, and includes essential privacy and cookie compliance mechanisms. Security posture is solid with HTTPS and cookie consent, though additional security headers and policies could enhance protection. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive risk assessment.
- iRobot
irobot.co.nz
E-commerce · New Zealand
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.shopirobot.co.nz serves as the official e-commerce platform for iRobot products in New Zealand, offering a range of robotic vacuum cleaners, mops, and accessories. It targets consumers seeking automated cleaning solutions and positions itself as a trusted regional outlet for iRobot's product line. The site features professional branding consistent with the iRobot corporate identity and provides customer support and warranty information to enhance trust. Technically, the website is built on the Magento 2 platform, leveraging modern web technologies including jQuery, RequireJS, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Klaviyo. The site is mobile-optimized and employs security best practices like HTTPS enforcement and security headers, contributing to a secure browsing experience. From a security perspective, the site demonstrates good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly accessible security policy and incident response information, which are important for transparency and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is professionally designed and functional, with extensive tracking and marketing integrations. The primary risk lies in the unknown domain registration status, which impacts business credibility. Strategic recommendations include verifying domain registration, publishing security policies, and enhancing direct contact information to improve trust and compliance.
- iRobot
irobot.com.au
E-commerce · Australia
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website www.shopirobot.com.au serves as the official Australian e-commerce platform for iRobot, specializing in robotic vacuum and mop products including Roomba and Braava series. It targets Australian consumers seeking advanced home cleaning technology, offering a range of products and accessories with promotional offers and refurbished items. The site demonstrates a consistent brand presence and professional design, supporting a medium-sized retail operation in the e-commerce sector. Technically, the website is built on the Magento platform, utilizing modern JavaScript libraries such as jQuery and KnockoutJS, and integrates multiple marketing and analytics tools including Google Analytics, TikTok Pixel, Facebook Pixel, and Klaviyo. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with a comprehensive tech stack supporting e-commerce functionalities. From a security perspective, the site enforces HTTPS and employs secure form handling and reCAPTCHA for bot mitigation. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and privacy compliance is limited due to the absence of visible privacy and cookie policies. The WHOIS data is incomplete, lacking registrant details and domain age, which slightly diminishes trustworthiness but does not outweigh the professional site presentation. Overall, the site presents a solid e-commerce presence with room for improvement in privacy compliance and security header implementation. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and improving accessibility compliance to strengthen user trust and regulatory adherence.
iRobotirobot.pt
E-commerce · Portugal
65Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The website www.irobot.pt is a localized e-commerce platform for iRobot products targeting the Portuguese market. It offers robotic vacuum and mop products, accessories, and customer support information. The site is built on Salesforce Commerce Cloud and integrates modern technologies such as Braintree for payments, Gigya for customer identity management, TrustArc for cookie consent, and Google Tag Manager for analytics. The website demonstrates a good level of digital maturity with responsive design, accessibility features, and a professional user experience. Security posture is strong with HTTPS, security headers, and reCAPTCHA v3 implemented on forms. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a compliance gap. Contact information such as emails or phone numbers is also not directly visible, which may impact user trust and support accessibility. Overall, the site is legitimate, well-structured, and secure, but could improve privacy compliance and transparency.
iRobot Corporationirobot.nl
Retail · Netherlands
63Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.nl is the localized Dutch e-commerce website for iRobot Corporation, a leading global manufacturer of robotic vacuum and mop cleaners. The site offers a comprehensive product catalog including Roomba and Braava robots, accessories, and promotional offers. It targets consumers in the Netherlands and surrounding European markets, leveraging Salesforce Commerce Cloud for its e-commerce platform. The website demonstrates a mature digital infrastructure with integrations for secure payments (Braintree), customer identity management (Gigya), and consent management (TrustArc). Security posture is strong with HTTPS, security headers, and reCAPTCHA protections. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and aligned with corporate branding and business objectives.
iRobotirobot.ie
Retail · Ireland
70Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
iRobot.ie is the official Irish e-commerce website for iRobot, a leading global brand specializing in robotic vacuum and mop products. The site offers a comprehensive catalog of Roomba and Braava products, accessories, and deals tailored for the Irish market. The platform is built on Salesforce Commerce Cloud, integrating advanced identity management (Gigya), secure payment processing (Braintree), and analytics (Datadog, Google Analytics). The website demonstrates a mature digital infrastructure with good mobile optimization, accessibility features, and SEO practices. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections. Privacy and cookie policies are present and GDPR compliant, reflecting adherence to European data protection standards. WHOIS data is unavailable due to privacy protection, which is typical for commercial domains, but the website content and branding strongly support legitimacy. Overall, the site is a professional, secure, and user-friendly platform for iRobot's Irish customers.
iRobotirobot.be
E-commerce · Belgium
63Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.be is a professional e-commerce website dedicated to selling robotic vacuum and mop cleaning devices primarily targeting the Belgian market. The site is part of the global iRobot brand, a recognized leader in robotic cleaning technology. The website leverages a mature technical infrastructure based on Salesforce Commerce Cloud, integrating advanced customer identity management (Gigya), payment processing (Braintree), and consent management (TrustArc). The site is well-optimized for mobile and accessibility, with good SEO and user experience. Security posture is strong with HTTPS, reCAPTCHA, and consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. WHOIS data is restricted by the .be registry, but the domain and website content are consistent with a legitimate commercial entity. Overall, the site demonstrates a solid digital maturity and trustworthy e-commerce presence.
iRobotirobot.at
Retail · Austria
65Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.at is the Austrian localized e-commerce website for iRobot, a leading global brand specializing in robotic vacuum and mop cleaners. The site offers a range of Roomba and Braava products, accessories, and promotional deals tailored for the Austrian market. The website is built on Salesforce Commerce Cloud, leveraging modern e-commerce technologies and integrations such as Braintree for payments and Gigya for user authentication. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting the company's commitment to data protection. The site is professionally designed with good mobile optimization and accessibility features, providing a positive user experience. Security posture is strong with HTTPS, security headers, and secure form handling, although explicit security policies and incident response information are not publicly disclosed. WHOIS data is privacy protected, which is common for commercial retail sites and does not detract from the site's legitimacy. Overall, iRobot.at presents a trustworthy and professional online presence for consumers in Austria seeking robotic cleaning solutions.
iRobotirobot.co.uk
Technology · United Kingdom
63Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
iRobot UK operates a comprehensive e-commerce website focused on robotic vacuum and mop products tailored for the UK market. The site offers detailed product information, shopping capabilities, and customer support resources, positioning iRobot as a leading brand in home cleaning robotics. The technical infrastructure leverages Salesforce Commerce Cloud, integrates secure payment gateways like Braintree, and employs modern analytics and consent management tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and anti-bot protections, though explicit public security policies and incident response contacts are absent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR.
iRobotirobot.es
E-commerce · Spain
65Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.es is the official Spanish e-commerce website for iRobot, a leading global brand specializing in robotic vacuum cleaners and mops. The site offers a comprehensive catalog of products including Roomba and Braava robots, accessories, and promotional deals tailored for the Spanish market. The website demonstrates a mature digital infrastructure leveraging Salesforce Commerce Cloud, integrated payment gateways like Braintree, and advanced customer identity management via Gigya. Privacy and cookie compliance are robustly implemented using TrustArc, reflecting adherence to GDPR requirements. Security posture is strong with HTTPS enforcement, modern security headers, and secure payment processing. However, WHOIS data is restricted due to .es domain policies, limiting transparency on domain registration details. Overall, the site presents a professional, trustworthy, and user-friendly platform for consumers in Spain seeking robotic cleaning solutions.
iRobotirobot.fr
E-commerce · France
65Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.fr is the French localized e-commerce website for iRobot, a leading global brand specializing in robotic vacuum cleaners and floor cleaning devices. The site offers a comprehensive catalog of products including Roomba robots and accessories, supported by customer assistance and promotional offers. The website is well-structured, mobile-optimized, and integrates modern technologies such as Salesforce Commerce Cloud, Braintree for payments, and advanced tracking and consent management tools. Security posture is strong with HTTPS, security headers, and bot protection mechanisms in place. Privacy compliance is evident with GDPR-aligned policies and cookie consent banners. However, WHOIS data is unavailable, likely due to privacy protection, which slightly limits domain trust verification. Overall, the site presents a professional and trustworthy e-commerce platform targeting French consumers interested in robotic cleaning solutions.
iRobotirobot.de
Technology · Germany
68Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The website www.irobot.de is a professionally designed e-commerce platform targeting the German market for iRobot's robotic vacuum and mop products. It showcases a range of products with detailed images, pricing, and promotional offers. The site leverages modern technologies including Salesforce Commerce Cloud, Braintree payment gateway, Google Tag Manager, and GDPR-compliant cookie consent via TrustArc. User authentication and profile management are handled through Gigya, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, use of reCAPTCHA v3, and secure payment integrations. However, explicit privacy policy and terms of service links were not found in the provided content, which is a gap in privacy compliance. Overall, the site is trustworthy, technically sound, and well-positioned in the consumer technology sector.
iRobotirobot.ca
Retail · Canada
67Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
iRobot.ca is the Canadian e-commerce platform for iRobot, a leading global brand specializing in robotic vacuum and mop products. The website offers a comprehensive catalog of robotic cleaning devices, accessories, and related services, targeting Canadian consumers seeking advanced home cleaning solutions. The site demonstrates a mature digital presence with professional design, multimedia content, and integrated customer support features. Technically, the platform leverages Salesforce Commerce Cloud, integrates secure payment gateways like Braintree, and employs advanced analytics and consent management tools. Security posture is strong with HTTPS enforcement, reCAPTCHA, and secure authentication via Gigya. However, explicit privacy and cookie policies are not detected in the provided content, which may impact compliance and user trust. Overall, the site reflects a well-established retail operation with robust technical infrastructure and a high level of business credibility.
- Epson Monna Lisa
epson-monnalisa.eu
Technology · Italy
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Epson Monna Lisa is a specialized B2B technology provider offering advanced digital textile printers designed for fashion, sportswear, and home textile industries. The company emphasizes high speed, quality, and flexibility in its printing solutions, positioning itself as a leader in digital fabric printing technology. The website reflects a professional and consistent brand image aligned with Epson's global presence. Technically, the site employs modern web standards, including HTTPS, responsive design, and integration with marketing and analytics tools such as Adobe DTM and Attraqt. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers could be enhanced. Privacy compliance is partially addressed with a cookie consent mechanism, but no explicit privacy or terms of service pages were detected in the provided content. Overall, the website is trustworthy and well-maintained, though WHOIS data is obscured by privacy protection, which is common for commercial sites. Strategic recommendations include improving security headers, publishing clear privacy and terms policies, and enhancing contact information visibility.