Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
85,251–85,300 of 99,068
Sport in placesport-in-place.com
Other
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sport in place is a French-language website focused on fitness, musculation, dance, yoga, and overall well-being lifestyle content. It targets French-speaking fitness enthusiasts seeking advice and methods to improve their sports lifestyle. The site uses WordPress with the Elegant Themes Extra theme and integrates plugins for multilingual support and email subscriptions. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness, which impacts the overall risk profile. Strategic recommendations include improving privacy compliance, adding security headers, and verifying domain registration details to enhance trust.
Other
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website australianpokiesonline.net is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This prevents any meaningful analysis of the site's content, business model, or security posture. The domain is registered since 2016 with a reputable registrar and uses Cloudflare DNS services but lacks DNSSEC. No privacy, cookie, or terms of service policies are detectable, nor any contact or business information. The technical infrastructure is limited to Cloudflare's security service with no additional visible technologies or CMS. Security posture cannot be fully assessed due to lack of access, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the site presents a low trust and professionalism level based on the available data.
Other · New Zealand
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website pokiesonlinenz.co.nz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2014 with a reputable registrar and uses Cloudflare for DNS and security services. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business data significantly limit the ability to assess the company's market position or services. Technically, the site relies on Cloudflare but lacks DNSSEC and visible security headers, which could be improved. The security posture is unclear due to the block, but the presence of a WAF indicates some level of protection against attacks. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the block and missing information.
Other · New Zealand
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website onlinepokiesnz.co.nz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. The domain is registered since 2013 with a stable registrar and no privacy protection, indicating a moderate level of legitimacy. However, the lack of accessible content, absence of privacy and cookie policies, and no visible contact or business information severely limit the ability to assess the business or security posture comprehensively. The site uses Cloudflare for security and hosting, which provides a good SSL configuration but lacks DNSSEC. Overall, the site’s digital maturity and compliance posture cannot be fully evaluated due to the blocking mechanism.
Other · New Zealand
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website onlinebettingnz.co.nz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content. The domain is registered since 2014 with 101Domain GRS Ltd and uses Cloudflare for DNS and security services. Due to the WAF block, no privacy policies, contact information, or business details are available for analysis. The lack of accessible content severely limits the ability to assess the website's business model, technical infrastructure, or security posture beyond the presence of Cloudflare protection. The domain appears legitimate based on WHOIS data, but the absence of visible content and policies reduces trust and credibility.
Other
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website australiansportsbetting.net is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any content retrieval or analysis beyond the block page. The domain is registered since 2018 with Synergy Wholesale Accreditations Pty Ltd and uses Cloudflare for DNS and security services. Due to the block, no business information, contact details, or policies are available for review. The technical infrastructure relies on Cloudflare's security platform, but no further technical or content insights can be gathered. The security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site cannot be properly evaluated until access is granted or the block is lifted.
- SecurityNet.cz s.r.o.
securitynet.cz
Technology · Czech Republic
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SecurityNet.cz s.r.o. is a Czech Republic-based small IT service company specializing in comprehensive internet services including custom website and e-shop development, SEO optimization, custom software development, and hosting solutions. The company targets businesses and individuals requiring tailored IT and hosting services, positioning itself as a reliable provider with a portfolio of reputable clients such as KIKA, Gorenje, and T-Mobile. Their business model focuses on service delivery with an emphasis on quality and client satisfaction. Technically, the website employs modern frontend technologies including Bootstrap 5, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. The site is mobile optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Hosting details are not explicitly disclosed, but the presence of a partner hosting domain (hukot.net) suggests collaboration with a specialized hosting provider. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a visible privacy policy, which are critical for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in their security posture. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and business information appear professional and consistent. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced privacy compliance, security header implementation, and improved transparency regarding domain registration and security policies.
Hukot.nethukot.cz
Technology · Czech Republic
65Medium
NIS2 15 · GDPR 65
NIS2 15 · GDPR 65
Hukot.net is a Czech Republic-based hosting service provider with over 21 years of market presence, offering a comprehensive range of services including domain registration, webhosting, VPS, dedicated servers, and storage solutions. The company targets both individual users and businesses requiring reliable and scalable hosting infrastructure. Their business model focuses on providing high-performance hosting backed by 24/7 human customer support and GDPR compliance. The website reflects a professional and consistent brand image, supported by a parent company, SecurityNet.cz s.r.o. Technically, the website employs modern web technologies such as Bootstrap, FontAwesome, and Google Tag Manager, ensuring good performance, mobile responsiveness, and SEO optimization. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, though it lacks explicit published security policies or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and clarifying domain registration details to improve credibility and compliance.
Nameshift.comweglot.eu
Technology · Netherlands
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website weglot.eu currently serves as a domain sales landing page operated by Nameshift.com, a domain brokerage and escrow service based in the Netherlands. The platform offers domain purchase services with an emphasis on safe, fast, and fee-free domain transfers for buyers. The business model focuses on domain resale with escrow facilitation to ensure secure transactions. The target audience includes domain investors and buyers seeking a trusted intermediary for domain acquisitions. The website content is minimal and primarily transactional, reflecting its purpose as a domain sales portal rather than a full business site. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, hosted on a CDN associated with Nameshift.com. The site demonstrates moderate performance and basic mobile optimization. However, SEO and accessibility features are basic, and there is no evidence of a CMS or extensive platform integrations. The site uses external scripts for analytics and Trustpilot reviews, indicating some level of marketing and trust-building efforts. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks explicit security headers such as Content Security Policy or HSTS, and no privacy or cookie policies are present, which are critical for GDPR compliance. There is no visible incident response or security contact information. The domain registration data is consistent with the business purpose, registered via a known registrar without privacy protection, supporting legitimacy. Overall, the site presents a low-risk profile but has significant gaps in privacy compliance and security best practices. Strategic improvements in policy disclosures, security headers, and contact transparency would enhance trust and compliance. The site’s limited content and basic design reflect its narrow business focus but also limit user engagement and SEO potential.
Technology
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Ardalio.net operates the Web-Stat service, providing free real-time website analytics focused on detailed visitor monitoring and traffic growth insights. The service targets website owners and administrators seeking to optimize their sites through clear, live visitor data. The website presents a professional and consistent brand image with good design quality and user experience, although it lacks explicit privacy and terms of service documentation. Technically, the site uses modern JavaScript libraries and fonts, is mobile optimized, and is hosted with reputable providers including GoDaddy and Cloudflare DNS. However, DNSSEC is not enabled and no explicit security headers are detected, indicating room for security improvements. The cookie consent mechanism demonstrates some GDPR compliance awareness, but no privacy policy or incident response information is publicly available. Overall, the domain registration is consistent and legitimate for a small technology service founded in 2022.
Web Tracking Services, LLCweb-stat.com
Technology · United States
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Web-Stat is a small technology company providing real-time web analytics services primarily targeting website owners and webmasters. The company offers a free analytics platform with upgrade options and an affiliate program, positioning itself as an established player since 1996. The website is professionally designed with good content quality and clear navigation, optimized for mobile users. Technically, it employs modern JavaScript libraries and standard web technologies, delivering moderate performance and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and dedicated security policies are absent. The lack of WHOIS registration data for the domain introduces uncertainty in domain legitimacy, though the business identity is strongly supported by structured data and trust indicators. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.
- Race for the Cure | Home
raceforthecure.eu
Non-profit
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Race for the Cure is a European event organization focused on hosting the largest run and walk events across Europe, primarily aimed at charity participation. The website presents a professional and consistent brand image with clear navigation and a focus on participant engagement. Technically, the site is built on ASP.NET WebForms with Telerik UI components and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and uses modern web fonts and libraries, though accessibility features are basic. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks explicit security headers and visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with good content quality but no explicit contact or company information disclosed. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.
- Say Hey
sayhey.be
Media · Belgium
59Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Say Hey is a well-established full-service communication agency based in Belgium, specializing in branding, marketing, content creation, and web development. With over 20 years of experience and a portfolio of more than 300 clients, the company positions itself as a strategic and creative partner for businesses seeking impactful communication solutions. The website reflects a professional and modern digital presence, leveraging advanced JavaScript libraries and a CMS platform (DNN) to deliver a rich user experience. The site is fully accessible without any WAF or security blocking, indicating good operational stability. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. However, the WHOIS data for the domain is restricted, limiting transparency about domain registration details. Overall, the website demonstrates high professionalism and trustworthiness, with room for improvement in explicit security and incident response disclosures.
Fromi GmbHfromi.com
Retail · Germany
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Fromi GmbH is an established German company specializing in the wholesale and distribution of cheese specialities and fine foods, with over 50 years of experience and an international reputation. The company targets cheese retailers, food service professionals, and gourmet consumers, offering a wide range of products and services including cheese selections, fine food offerings, and customer support. The website reflects a professional and consistent brand image with multilingual support and comprehensive product information. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and includes cookie consent mechanisms. Security posture is strong with HTTPS, obfuscated emails, and no visible vulnerabilities, though security headers could be improved. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic recommendations include enhancing security headers, publishing incident response policies, and clarifying domain registration details to improve trust and compliance.
Montibello – Skinmontibello.com
Retail · Spain
70Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Montibello is a Spanish-based company specializing in hair care, facial, and body treatment products, targeting professionals in the beauty and aesthetics industry. The website provides product information, professional courses, and inspiration for hairdressers and aesthetic professionals, positioning itself as a reputable brand in the retail beauty sector. The digital presence is built on WordPress with WooCommerce, indicating a mature e-commerce platform with integrated marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Security is enhanced by the Wordfence plugin, and HTTPS is enforced, reflecting a good security posture. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency. Additionally, the lack of explicit privacy policy, terms of service, and contact information limits the website's compliance and trustworthiness from a privacy and regulatory perspective. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and compliance documentation.
Other
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website grosseron.com is currently inaccessible, returning an HTTP 404 Not Found error with minimal HTML content. This prevents any meaningful analysis of the business, its services, or security posture. The domain is registered with Gandi SAS since 1997, indicating a long-standing registration, but the lack of accessible content severely limits digital maturity and trustworthiness assessments. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available. The technical infrastructure cannot be fully assessed due to the absence of content and metadata. Security posture is unknown but likely poor given the lack of HTTPS information and security headers. Overall, the site appears offline or under maintenance, resulting in a critical risk for business credibility and user trust.
HP Papers - Printing & Copier Paperhp-papers.eu
Manufacturing · Poland
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
HP Papers is a European-focused paper product brand specializing in printing and copier paper with a strong emphasis on sustainability and climate action. Their product range includes various paper types certified by ClimatePartner, FSC®, PEFC, and the EU Ecolabel, positioning them as a responsible and quality-conscious player in the manufacturing and retail sectors. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, providing a good user experience with responsive design and clear navigation. However, the absence of explicit privacy and terms of service policies, as well as contact information, limits transparency and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks visible security headers and formal security policies.
- CrossCafe Pražírna
crosscafeprazirna.cz
Retail · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
CrossCafe Pražírna is a specialized coffee roasting company based in the Czech Republic, offering high-quality coffee products through both retail and wholesale channels. The company emphasizes craftsmanship and quality, operating its own roasting facility and maintaining a strong online presence with an e-commerce platform. Their product portfolio includes various coffee blends, capsules, teas, and merchandise, targeting coffee enthusiasts, cafes, offices, and restaurants. The website reflects a professional and consistent brand image with clear business information and active social media engagement. Technically, the website is built on the Shoptet e-commerce platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security practices include HTTPS enforcement and CSRF protection on forms, alongside a cookie consent mechanism compliant with GDPR. However, some security headers like Content-Security-Policy are not explicitly present, and no incident response or vulnerability disclosure information is published. The absence of WHOIS data is a notable gap, limiting the ability to verify domain registration details and ownership, which slightly impacts trustworthiness. Despite this, the website content and business information appear legitimate and professionally maintained. Overall, the site demonstrates a solid digital maturity level with room for security enhancements and transparency improvements.
Alma Careerlmc.eu
Other · Czech Republic
75Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Alma Career is a prominent HR and recruitment services provider operating primarily in Czechia and across Europe. The company offers a comprehensive suite of services including job portals, online education platforms, recruitment management tools, employee engagement surveys, and salary benchmarking. Their market position is strong, supported by multiple well-known brands such as Jobs.cz and Platy.cz, serving a broad audience of HR professionals, employers, and job seekers. The website reflects a mature digital presence with modern technologies and a professional design. Technically, the website is built using Next.js and React frameworks, leveraging modern web standards and optimized for performance and mobile responsiveness. The use of Google Tag Manager and Analytics indicates a moderate level of user tracking balanced with privacy compliance. The site employs security best practices including HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. From a security perspective, the site demonstrates a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the strong brand presence and consistent business information mitigate this concern. Overall, the risk is moderate with recommendations to enhance transparency around security policies and incident response. Strategically, Alma Career should focus on publishing detailed security and incident response policies, consider a vulnerability disclosure program, and continue to monitor domain registration details to maintain trust. Enhancing accessibility and expanding data retention disclosures would further improve compliance and user trust.
Prague City Tourismpraguecitytourism.cz
Government · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Prague City Tourism is a government-affiliated destination management organization focused on promoting sustainable tourism and preserving Prague's cultural heritage. The website serves as an official portal providing information about their activities, public benefit projects, commercial services, and partnership opportunities. The organization targets tourists, business partners, and media stakeholders interested in Prague's tourism sector. Technically, the website is built on WordPress with modern SEO and consent management tools, delivering a good user experience with mobile optimization and structured data integration. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature and credible public entity.
Always Advancing Promotions & Manufacturingalwaysadvancing.net
Manufacturing · United States
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Always Advancing Promotions & Manufacturing operates as a specialized manufacturer of custom finisher medals, awards, apparel, and promotional products primarily serving endurance events and businesses globally. Established in 2008, the company emphasizes custom design and quality, targeting event directors and business owners who require personalized products. The website reflects a medium-sized enterprise with a professional digital presence built on the Duda platform, leveraging modern web technologies and analytics tools. While the site is well-designed, mobile-optimized, and accessible, it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is strong with HTTPS and CAPTCHA protections, but security headers and incident response policies are absent. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration consistency, which should be addressed to enhance trust. Overall, the company demonstrates a solid market position with room for improvement in privacy compliance and domain registration transparency.
- Rrunjapan.jp
runnetglobal.com
Other · Japan
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Run Japan is an online platform dedicated to providing international runners with comprehensive information and registration services for marathons and running events across Japan. The website positions itself as a gateway to Japan's best running events, offering race listings, travel planning assistance, and event registration. The target audience primarily consists of international and domestic runners interested in participating in Japanese marathons. The business operates in the niche sports and events sector, with a small company size and a recent founding date in 2024. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and Slick Carousel, hosted on Amazon AWS infrastructure. It uses Google Tag Manager for analytics and tracking. The site is mobile optimized with good SEO practices and a consistent branding approach. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy or cookie consent mechanism, which impacts privacy compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data shows privacy protection but is consistent with the business location in Japan, and the domain age aligns with the business launch. Overall, Run Japan presents a professional and functional platform with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and user data protection would enhance trust and compliance, supporting its growth in the international running community.
Other
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website eestikasiinod.ee is currently inaccessible due to a Cloudflare security block, which prevents any meaningful content or business information from being analyzed. The domain is registered since 2013 with NETIM and uses Cloudflare nameservers, indicating a standard setup for security and performance. However, the lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact or business details. The technical infrastructure relies on Cloudflare, but no further technology stack or CMS can be identified. Security posture cannot be evaluated beyond the presence of Cloudflare's WAF blocking access. Overall, the site’s risk assessment is limited by the WAF block, resulting in a low AI score and unknown compliance and trustworthiness.
ADHOG Advertising, s.r.o.adhog.eu
Other · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ADHOG Advertising, s.r.o. is a small Czech marketing communication agency with over 20 years of experience, offering comprehensive creative services from concept to campaign evaluation. The company targets local and international brands seeking innovative and reliable marketing solutions. The website is built on WordPress using the Betheme theme and integrates standard technologies such as jQuery and Google reCAPTCHA for form security. The site is well-structured, mobile-optimized, and presents clear contact information including multiple company email addresses and a physical address in Prague. Security posture is good with HTTPS enforced and CAPTCHA protection, though advanced security headers and cookie consent mechanisms are missing. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website reflects a professional and credible marketing agency with room for improvement in privacy compliance and security best practices.
Other · Czech Republic
68Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website fashioneventdotek.cz is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that the site is either restricted by server access controls or a security mechanism is blocking public access. Due to this, no meaningful content, metadata, or business information can be extracted or analyzed. The domain is registered since 2016 with a Czech registrar, suggesting some longevity, but the lack of accessible content severely limits assessment of the business or its digital presence. Technically, no information about the technology stack, security headers, or SSL configuration is available, indicating poor or no operational website infrastructure. Security posture is weak or unknown, with no privacy or cookie policies detected, and no contact or incident response information provided. Overall, the site appears non-operational or restricted, resulting in a very low trust and credibility score.
Prague City Tourismpraguecitytourism.com
Hospitality · Czech Republic
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Prague City Tourism is the official Destination Management Organisation for the City of Prague, focusing on sustainable tourism, cultural heritage preservation, and marketing Prague as a premier travel destination. The organization provides a range of services including guide services, concierge experiences, and business cooperation opportunities targeting tourism industry partners and visitors. The website reflects a well-established entity with a consistent brand and professional content tailored to its audience. Technically, the website is built on WordPress, utilizing modern tools such as Google Tag Manager, Cookiebot for consent management, and Yoast SEO for search engine optimization. Hosting is provided by Active24, and the site demonstrates good mobile optimization and moderate performance. The technical implementation is solid with no critical vulnerabilities detected. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, indicating compliance with GDPR. However, DNSSEC is not enabled, and no advanced security headers were detected, suggesting room for improvement. No incident response or security policy information is publicly available, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. The risk profile is low, with recommendations focusing on enhancing DNS security, publishing security policies, and adding terms of service to strengthen legal and security posture.
WebActive s.r.o.tourdefeminin.com
Transportation · Czech Republic
75Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Tour de Feminin is an established international women's stage cycling race organized and promoted primarily in the Czech Republic. The event is supported by WebActive s.r.o., which provides the digital platform and content management. The website offers comprehensive race information, historical data, results, and media galleries targeting cycling enthusiasts and participants. The technical infrastructure is built on modern web technologies including jQuery, Bootstrap, and a proprietary CMS (WebJET), delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in transparency and security documentation are recommended to enhance credibility and compliance.
Bloom Robbins CZbloomrobbins.cz
E-commerce · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Bloom Robbins CZ operates as a specialized e-commerce platform focused on selling vitamin supplements aimed at promoting hair growth and scalp health. The website targets consumers primarily in the Czech Republic and neighboring countries, leveraging a Shopify-based infrastructure to deliver its products. The business model centers on direct online retail with regional sister sites supporting localized markets. The site demonstrates consistent branding and a clear product focus, appealing to a niche audience seeking hair care solutions. Technically, the website utilizes a modern tech stack including Shopify's Dawn theme, JavaScript libraries such as Swiper.js, and integrates multiple marketing and analytics tools like Google Tag Manager, Facebook Pixel, Klaviyo, and Smartlook. The site is hosted on Shopify's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, though the website content and technology usage suggest a legitimate operation. Overall, Bloom Robbins CZ presents a professional and trustworthy e-commerce presence with room for improvement in security hardening and transparency regarding business and security policies. Strategic enhancements in these areas would bolster customer trust and compliance posture.
CrossCafecrosscafe.cz
Hospitality · Czech Republic
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
CrossCafe is a Czech coffeehouse chain providing coffee, cakes, and related products through physical locations and an e-commerce platform. The website demonstrates a solid digital presence with integrated cookie consent mechanisms and advertising/tracking technologies such as Google Analytics, Adform, and Facebook Pixel. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. No direct contact emails or phone numbers are exposed on the site, which may impact user trust and business credibility. Security policies and incident response information are not publicly available, indicating room for improvement in transparency and compliance documentation.
- Think Pink Europe
thinkpinkeurope.org
Healthcare
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Think Pink Europe is a non-profit organization dedicated to raising awareness and funds to combat breast cancer across Europe. The organization runs major campaigns such as Race for the Cure and Pink@Work, engaging the public and corporate sectors to support breast cancer research and patient care. Their website reflects a well-structured, content-rich platform with clear calls to action for donations and participation in events. Technically, the site is built on a mature ASP.NET framework with modern front-end libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no incident response information is published. Overall, the site demonstrates a professional and trustworthy presence suitable for its non-profit mission.
—
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
- NNáš Chomutov - rozcestník projektů
naschomutov.cz
—
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Rodinné zápolení | Další web používající WordPressrodinnezapoleni.cz
Other · Czech Republic
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Rodinnezapoleni.cz is a Czech language website created in 2011, built on WordPress using the Divi theme. The site appears to be a small-scale or personal project with limited content and minimal business information. The technical infrastructure is standard for WordPress sites, utilizing common libraries such as jQuery and Google Fonts. Hosting is provided by REG-ZONER, a Czech domain registrar and hosting provider, consistent with the website's regional focus. Security posture is basic with HTTPS enabled but lacking important security headers and policies. No privacy or cookie policies are present, indicating potential compliance gaps. Contact information and social media presence are not evident, limiting business credibility and user trust. Overall, the site is functional but lacks comprehensive security, privacy, and business transparency features.
Other · Czech Republic
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website 'Naše Kamencové jezero' serves as an informational platform focused on the development and promotion of the Kamencové jezero recreational area in the Czech Republic. It targets local visitors and tourists interested in leisure activities around the lake. The site uses WordPress with the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. However, the content quality is basic, with limited business information and no visible contact details or privacy policies. From a security perspective, the website lacks visible security headers and privacy compliance documentation, which are critical for protecting user data and building trust. No analytics or tracking scripts were detected, suggesting minimal user tracking but also limited insights into visitor behavior. The domain registration is consistent and appropriate for the business type, registered since 2017 with no privacy protection masking. Overall, the website presents a basic but functional digital presence with room for improvement in security posture, privacy compliance, and business credibility. Strategic enhancements in these areas would strengthen trust and user engagement.
Bezpečné parkování v centru Prahy - Parking Opletalovaparkingopletalova.cz
Transportation · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Parking Opletalova is a service provider offering secure parking solutions in the center of Prague. The website targets drivers seeking safe and convenient parking options in a busy urban area. The business model revolves around parking space booking and management, leveraging an e-commerce platform to facilitate reservations. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with integration of performance optimization tools like WPRocket and multilingual support via Weglot. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy policies suggests room for improvement. The lack of WHOIS registrant data reduces domain trustworthiness, though the website content and technical setup appear legitimate. Overall, the site presents a functional and user-friendly experience but would benefit from enhanced transparency and security practices.
- ADOL Monitor s.r.o.
adol.cz
Real Estate · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.
AddTexaddtex.eu
Education
60Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
AddTex is an EU-funded Erasmus Plus project focused on advancing digital and green innovations in the advanced textile industry through innovative learning and training. The project collaborates with a network of 12 partners across 10 European countries to develop educational resources such as MOOCs and training platforms aimed at students, educators, and industry professionals, particularly SMEs. The website is built on WordPress with Elementor and integrates modern web technologies and analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are absent. WHOIS data is privacy-protected by EURid, consistent with EU project norms. Overall, the site is professional, content-rich, and trustworthy, supporting its educational mission.
Growth Clubgrowthclub.cz
Other · Czech Republic
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Growth Club is a website presenting itself as a closed network for entrepreneurs in the Czech Republic and Slovakia. The site is built using the Framer platform and features basic marketing content describing its purpose. However, the website lacks critical compliance and security information such as privacy policies, cookie consent mechanisms, terms of service, and contact details. The WHOIS data raises significant concerns due to a domain creation date set in the future (December 2025), which undermines the legitimacy and trustworthiness of the domain. Technically, the site uses modern web fonts and image hosting but does not implement advanced security headers or analytics tools. Overall, the digital maturity is basic, with room for improvement in compliance and security posture.
- Aloka Properties
alokaproperties.com
—
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
- MModrý zub s.r.o.
modryzub.com
Hospitality · Czech Republic
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Modrý zub s.r.o. operates an established authentic Thai restaurant business in Prague with multiple branches and catering services. The website presents a professional image with detailed descriptions of their culinary offerings and physical locations, targeting tourists, locals, and expats. The digital infrastructure includes modern analytics and tracking tools, with a cookie consent mechanism supporting privacy compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and well-maintained website. Security posture is generally good with HTTPS enforced, but lacks some security headers and formal policies such as privacy and terms of service. Overall, the website is functional and credible but would benefit from improved transparency and security documentation.
- Avocasino
gsatickets.top
Other
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Avocasino3.com operates as an online casino review platform focusing on cryptocurrency-friendly casinos, providing detailed reviews, promotions, and gaming information. The site targets online casino players interested in crypto wagering and operates primarily as an affiliate marketing business. Technically, the website uses modern technologies including Angular and Tailwind CSS, with hosting and DNS services via Cloudflare. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and some security best practices observed, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of privacy and cookie policies but no explicit GDPR compliance indicators or data protection officer information. Business credibility is moderate due to lack of direct contact details and suspicious WHOIS domain data indicating a future creation date, which raises concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from improved transparency and security enhancements.
Book Of Ideas Casino - Get The Top Casino Insights & Tips Right Here, Right Now Onlinebookofmormontourtickets.top
Other · Australia
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Book Of Ideas Casino is a content-focused website providing insights, tips, and reviews related to online casino games, slots, poker, roulette, and sports betting. The site targets online casino players and gambling enthusiasts, offering a variety of articles authored primarily by a single author. The business model appears to be content and affiliate marketing within the online gambling niche. Technically, the site is built on WordPress, uses Cloudflare DNS, and serves content over HTTPS with a valid SSL certificate. The site is moderately optimized for mobile and SEO, with good navigation and content relevance. However, it lacks privacy and cookie policies, contact information, and security headers, which impacts its compliance and trustworthiness. The domain is privacy protected and registered in Australia since 2016, consistent with the site's content age and scope. Overall, the website is functional and content-rich but requires improvements in privacy compliance, security posture, and business transparency to enhance trust and regulatory adherence.
- TTempat Berita Judi Online Terbaik Sweethomeguide
sweethomeguide.net
Other
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Tempat Berita Judi Online Terbaik Sweethomeguide is a small Indonesian-language WordPress blog focused on online gambling, lottery (togel), and slot game news and guides. The site provides content primarily targeting Indonesian online gambling enthusiasts, offering promotional information and betting tips. Technically, the site runs on WordPress 6.8.1 with Yoast SEO plugin and uses Cloudflare DNS services. The site is accessible over HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, indicating low privacy compliance and business transparency. The site links to numerous external domains, some of which are IP-based and potentially suspicious, which may pose reputational risks. Overall, the site is functional but basic in design and content quality, with moderate technical implementation and security posture.
fsk industries GmbH & Co. KGfsk-industries.de
Manufacturing · Germany
55Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
fsk industries GmbH & Co. KG is a German-based company specializing in innovative automation solutions, including Cobot Welding, SmartArc technology, mechanical engineering, and fixture construction. The company targets industrial clients seeking advanced automation and welding solutions, positioning itself as a niche provider in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and user experience, primarily in the German language. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies such as Bootstrap and jQuery, hosted by Alfahosting. Performance and mobile optimization are adequate, with room for improvement in accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented via Cookiebot, though additional security headers and a vulnerability disclosure mechanism are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, scoring 78 out of 100 in the AI assessment.
- LLindner Group
lindner-group.com
Manufacturing
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Lindner Group website presents a comprehensive portfolio of interior fit-out and custom system products targeting construction and architectural professionals. The company positions itself as a strong partner in the manufacturing sector, focusing on acoustics, fire protection, sustainability, and design. The website is professionally designed with clear navigation and a broad product catalog, indicating a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools such as Matomo and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit security policies. The absence of WHOIS registration data is a notable concern, potentially impacting trust and legitimacy perceptions. Privacy compliance is minimal, with no clear privacy or cookie policies detected. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.
- Zeppelin GmbH
zeppelin-systems.com
Manufacturing · Germany
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Zeppelin Systems, a division of Zeppelin GmbH, specializes in customized solutions for bulk material handling and plant engineering, serving industries such as food, chemicals, plastics, and recycling. The company offers a comprehensive portfolio including engineering, components, and services, positioning itself as a key player in the manufacturing sector with a strong B2B focus. The website reflects a mature digital presence with modern technologies like Next.js and AWS hosting, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in DNS security and security headers. Overall, the site demonstrates high professionalism and trustworthiness, supported by clear contact information and legal compliance.
Grimm & Wulff Anlagen- und Systembau - Grimm & Wulffanlagen-systembau.de
—
55Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
DAMI development s.r.o.damidev.com
Technology · Czech Republic
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
DAMI development s.r.o. is a Czech Republic based software development company specializing in mobile and web application development with over 13 years of market presence. They serve businesses and startups by delivering software solutions that enhance internal processes and cost efficiency. Their key services include development for multiple mobile platforms (Android, iOS, TV, wearables), web applications, third-party hardware/software integration, and innovative technologies such as IoT, augmented reality, and machine learning. The company showcases a professional website with clear navigation, client references, and modern technology usage, indicating a mature digital presence. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified.
Online Kasino Česko ⚡️ Nejlepší Kasina v České Republicekasinoczech10.com
Other · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website kasinoczech10.cz is a Czech-language online casino affiliate and review platform focused on providing detailed information about online casinos available to Czech players. It offers curated casino reviews, bonus offers, payment method guides, and game type information to help users make informed decisions. The site targets adult Czech players interested in online gambling and operates primarily through affiliate marketing partnerships with various casinos. Technically, the site is built on WordPress, uses Cloudflare DNS, and integrates Google Analytics, Google Tag Manager, and OneSignal for analytics and notifications. The site is mobile-optimized with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks explicit security headers and formal privacy or cookie policies. The domain is relatively new (created in 2023) but consistent with the business age and model. Overall, the site is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and security policy disclosures.
- SStudio GAT
gat.cz
—
54Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55