Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,177001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
86,551–86,600 of 99,068
- Mediahuis Radio
slam.nl
Media · Netherlands
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
SLAM! is a well-established Dutch radio station specializing in pop and dance music, targeting listeners primarily in the Randstad region and digitally across the Netherlands. Operated by Mediahuis Radio, the station offers live streaming, curated playlists, DJ profiles, and music-related news and events, positioning itself as a key player in the Dutch media landscape. The website reflects a strong digital maturity with a modern tech stack based on SvelteKit, integration of Google Tag Manager, and Mediahuis proprietary analytics and advertising tools. The site is optimized for mobile and desktop with excellent design and user experience. Security posture is robust, featuring HTTPS, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks a dedicated security policy and incident response contact information, which could enhance trust and preparedness. Overall, SLAM! demonstrates a high level of professionalism, technical sophistication, and market credibility, making it a reliable and engaging platform for its audience.
ESPNespn.nl
Media · Netherlands
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ESPN Nederland is a prominent sports media platform delivering comprehensive football news, summaries, and interviews focused on Dutch and international football leagues. The website targets sports fans in the Netherlands, leveraging ESPN's global brand and Disney's infrastructure. Technically, the site employs modern web technologies including service workers, prebid advertising, and structured data for SEO. The security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit privacy and security policies are not directly found in the provided content. Overall, the site is professional, trustworthy, and well-positioned in the Dutch sports media market.
Picture Ideaspictureideas.lt
Technology · Lithuania
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Picture Ideas is a Lithuanian digital services company specializing in creating internet websites, e-commerce solutions, and web-based systems. Established in 2013, the company targets businesses seeking effective digital solutions to enhance their market presence and operational efficiency. Their portfolio includes collaborations with strong industrial and governmental clients, indicating a solid market position in the technology sector. Technically, the website is built on WordPress with modern plugins and analytics tools, hosted behind Cloudflare, ensuring good performance and security. However, the absence of explicit privacy and cookie policies, as well as contact details, indicates gaps in privacy compliance and user trust facilitation. Security posture is generally good with HTTPS and Cloudflare protection, but could be improved with additional security headers and published policies. Overall, the website is professional and functional but should address compliance and transparency to enhance trust and legal adherence.
QUORiON Data Systems GmbHquorion.com
Retail · Germany
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
QUORiON Data Systems GmbH is a German-based company specializing in Android POS systems and cash registers, serving over 650,000 small businesses across more than 70 countries. The company operates primarily through a B2B reseller model, offering a comprehensive product line including hardware and software solutions tailored for retail stores and restaurants. Their market position is strong, supported by a global reseller network and a focus on customization and scalability. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and lazy loading. It uses Google Analytics 4 for tracking and maintains good SEO and mobile responsiveness. The technical infrastructure reflects a mature digital presence with a focus on user experience and performance. From a security perspective, the site enforces HTTPS and implements several security headers, although explicit security policies and incident response information are not published. The cookie consent mechanism is present and GDPR compliance is indicated. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website and business appear legitimate and professional, with strong branding and trust signals such as testimonials and social media presence. However, improvements in transparency regarding security policies and domain registration details would enhance credibility and security posture.
UAB "Interneto vizija"vipzone.lt
Retail · Lithuania
61Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Vipzone.lt is a Lithuanian e-commerce and retail website specializing in outdoor furniture, SPA, and massage pools. The company offers a wide range of products including aluminum facades, sun protection solutions, and various outdoor and indoor furniture items. The website targets consumers and businesses looking for high-quality, stylish, and functional outdoor living products. Established in 2014, the company has a solid market presence in Lithuania with a medium-sized business model focused on retail and showroom sales. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries such as jQuery and Bootstrap for UI components. It integrates marketing and analytics tools including Google Tag Manager, Facebook Pixel, and MailerLite for email marketing. The site is mobile optimized with good SEO practices and uses structured data (JSON-LD) for enhanced search engine visibility. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and the use of an older Bootstrap version may pose minor risks. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data shows a consistent and legitimate domain registration with no privacy protection, supporting the site's credibility. Overall, Vipzone.lt demonstrates a good balance of business professionalism, technical maturity, and privacy compliance. Strategic improvements in security headers and updating legacy libraries would further strengthen its security posture and trustworthiness.
Bundesministerium für Bildung und Forschung (BMBF)buendnisse-fuer-bildung.de
Government · Germany
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website 'BMBF Bündnisse für Bildung' is an official German government platform managed by the Bundesministerium für Bildung und Forschung (BMBF). It serves as a comprehensive information hub for the cultural education funding program 'Kultur macht stark. Bündnisse für Bildung', targeting children, youth, and educational stakeholders. The site provides detailed program information, funding opportunities, service resources, and event calendars, positioning itself as a trusted authority in the cultural education sector in Germany. Technically, the website is built on the Government Site Builder CMS, featuring modern web technologies including JavaScript and CSS, with a focus on accessibility and mobile optimization. The site employs HTTPS and uses Matomo analytics, reflecting a commitment to privacy and security. Navigation is clear and content quality is excellent, supporting a positive user experience. From a security perspective, the site enforces HTTPS and secure form handling but lacks explicit security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with relevant regulations. It effectively supports its mission to promote cultural education through government-backed initiatives. Strategic improvements could include adding explicit security headers, incident response contacts, and a vulnerability disclosure policy to further enhance security posture.
Theater der Zeittdz.de
Media · Germany
55Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Theater der Zeit is a specialized German media publisher focusing on theater-related content including books, magazines, and digital media. It serves a niche audience of theater professionals and enthusiasts, offering subscription services, event organization, and advertising opportunities. The company holds recognized awards and certifications, enhancing its market credibility. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and accessibility. Security posture is strong with HTTPS and appropriate headers, though the absence of a cookie consent mechanism and public security policies are minor gaps. Overall, the site is professional, trustworthy, and well-positioned in its sector.
Stadttheater Gießenstadttheater-giessen.de
Hospitality · Germany
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Stadttheater Gießen is a prominent publicly funded cultural institution in Hessen, Germany, operating as a five-division theater with a broad regional influence. The website serves as a comprehensive portal for visitors, offering detailed information about performances, ticketing, educational programs, and services for people with disabilities. The organization targets theatergoers, schools, and the local community, positioning itself as a key cultural hub with a strong public service orientation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various UI libraries such as Fancybox and Slick Slider, likely built on the Kirby CMS platform. Hosting is managed via Schlundtech, a reputable provider. The site is mobile-optimized with good SEO practices and moderate performance, delivering a professional and accessible user experience. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The website demonstrates high business credibility with clear contact details, social media presence, and trust signals such as privacy policies and terms of service. The domain registration aligns with the business profile, showing no suspicious patterns. The overall risk is low, with recommendations focusing on improving security headers and incident response transparency to further strengthen trust and compliance.
- N
Non-profit · Germany
62Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
NRW Landesbüro Freie Darstellende Künste e.V. is a non-profit organization serving as a service office and advocacy group for the free performing arts scene in North Rhine-Westphalia, Germany. The organization supports cultural and theater projects through funding, training, and event management, positioning itself as a key regional player in the cultural sector. The website reflects this mission with clear information, regular news updates, and active social media engagement. Technically, the site uses a combination of Bootstrap 3.3.6, jQuery 1.9.1, and other JavaScript libraries to deliver a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS enforced but could be improved by updating outdated libraries and adding security headers and policies. Privacy compliance is supported by a visible privacy policy and contact information, though no cookie consent mechanism was detected. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.
Knock Knock WHOIS Not There, LLCjungespublikum.blog
Other · United States
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website 'darstellende künste & junges publikum' is a German language cultural blog focused on performing arts and young audiences, providing networking, event information, funding, and research content. It operates as a niche platform serving professionals and stakeholders in the cultural sector, with a small organizational footprint and hosted on WordPress.com. The technical infrastructure is modern, leveraging WordPress CMS, Jetpack plugins, and Google Fonts, with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies, and no GDPR compliance indicators are present. Contact information is limited to a subscription form without direct emails or phone numbers. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security policies.
Daily Spoondailyspoon.lt
Retail · Lithuania
66Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Daily Spoon is a Lithuanian-based e-commerce business specializing in superfood and wellness products designed to promote internal well-being and skin health. The company operates a modern, well-structured website with a clear focus on product categories such as supplements, adaptogens, matcha, and ritual accessories. Their market position is niche, targeting health-conscious consumers in Lithuania and possibly neighboring regions. The business model includes direct retail and subscription services, supported by a dedicated subscription domain. Technically, the website is built on WordPress with WooCommerce, leveraging Cloudflare for DNS and CDN, and integrates multiple marketing and analytics tools including Facebook Pixel, TikTok Pixel, Hotjar, and Google Tag Manager. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service in the analyzed content. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.
Persy Boothspersybooths.com
Other
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Persy Booths is a company specializing in the manufacture and sale of soundproof office pods and booths designed to enhance privacy and focus in busy work environments. Their product range targets companies and teams seeking affordable, stylish, and effective solutions for calls, meetings, and deep work. The website is professionally designed, mobile-optimized, and rich in content, showcasing product features, client testimonials, and detailed information to support purchasing decisions. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot, and multiple analytics and tracking tools, ensuring a robust digital presence. Security posture is strong with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data for the domain is a notable concern, suggesting either recent registration or privacy protection, which should be verified for full trust assurance. Overall, the site presents a trustworthy and professional front with minor areas for security and compliance enhancement.
Royalty Rangeroyaltyrange.com
Technology
75Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Royalty Range is a specialized data provider offering professional databases covering royalty rates, service fees, loan rates, and companies' financials. The company targets businesses and professionals requiring detailed financial and royalty-related data, positioning itself as a niche player in the technology and data services sector. The website is built on WordPress and integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. Social media presence on Facebook, Twitter (X), and LinkedIn supports its digital footprint. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data and explicit contact information slightly reduces trust but does not detract from the overall professional presentation.
La Baracca Testoni ragazzitestoniragazzi.it
Non-profit · Italy
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
La Baracca Testoni ragazzi is a well-established Italian non-profit cultural organization specializing in children's theater and educational programming. With over 45 years of experience, it serves families and schools primarily in Italy, offering theater productions, workshops, and publishing activities. The organization maintains a strong digital presence with a professionally designed WordPress website, multilingual support, and active social media channels. The site demonstrates good SEO and mobile optimization, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the website is trustworthy and aligns well with the organization's mission and history.
Other · Spain
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
elPetit is an international arts festival focused on early childhood, operating primarily in Catalonia, Spain. The festival emphasizes live artistic experiences for young children and runs events across multiple cities. The website reflects a niche cultural organization with a clear target audience of families and early childhood educators. The digital infrastructure is built on modern web technologies including jQuery, Foundation, and Matomo analytics, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional web presence and active social media channels. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving direct contact information visibility.
Théâtre La montagne magiquelamontagnemagique.be
Other · Belgium
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Théâtre La montagne magique is a small cultural theatre based in Brussels, Belgium, offering a variety of artistic and educational services including performances, workshops, training, and residencies. The website targets a broad audience including families, children, educators, and artists, emphasizing imaginative and creative experiences. The business operates primarily in the cultural and educational sector with a niche market position focused on artistic theatre experiences. Technically, the website is built on WordPress, leveraging common libraries such as jQuery and Slick Carousel, and uses Mailchimp for newsletter management. Hosting is provided by OVH, a reputable provider, and the site uses HTTPS with good SSL configuration. Security posture is adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is addressed with a cookie consent banner and a basic privacy policy mention. Contact information is clearly provided, enhancing business credibility. Overall, the website is professionally designed, user-friendly, and trustworthy, with moderate technical sophistication and good privacy practices.
Other · Belgium
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
AGORA Theater is a cultural organization serving the German-speaking community in Belgium, focusing on theater performances and cultural events. The website is built on WordPress and includes basic analytics tools such as Google Analytics and WP Statistics. The digital maturity is moderate with basic mobile optimization and SEO features but lacks comprehensive content and navigation clarity. Security posture is minimal with no detected security headers or documented policies, and privacy compliance is poor due to the absence of privacy and cookie policies. Overall, the website is functional but requires significant improvements in security, privacy, and content richness to enhance trust and compliance.
Baboróbaboro.ie
Non-profit · Ireland
51Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Baboró is a well-established non-profit arts festival based in Galway, Ireland, dedicated to children and families. The organization focuses on fostering creativity through an annual festival, subsidized ticketing, workshops, and community engagement projects. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to its audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and CookieYes for consent management, ensuring a good level of digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the website presents a trustworthy and credible online presence for a small non-profit entity.
Brabants Internationaal Kinderfestivalstiltefestival.com
Other · Netherlands
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The Brikfestival.com website represents the Brabants Internationaal Kinderfestival, a cultural event focused on children's circus and theater performances held in Breda, Netherlands. The site is well-structured, professionally designed using WordPress and Elementor, and targets families and local communities interested in cultural festivals. The business model revolves around event organization and community engagement with a regional market position. Technically, the site uses modern web technologies including Google Analytics for visitor tracking and Cloudflare DNS for hosting. The site is mobile optimized with good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some advanced security headers and vulnerability disclosures are missing. Privacy compliance is strong with a comprehensive cookie policy and GDPR consent mechanisms. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is trustworthy and legitimate with consistent WHOIS data and appropriate domain age.
- Teatercentrum
aprilfestival.dk
Non-profit · Denmark
50Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
KLAP-teaterfestival is a well-established Danish cultural event focused on theater for children and youth, organized by Teatercentrum. It offers free tickets and a rich program including performances, workshops, and volunteer opportunities, targeting families, educators, and theater enthusiasts. The festival enjoys a strong market position as one of the world's largest touring theater festivals in its niche. Technically, the website is built on Ajour CMS with jQuery and PHP, featuring a cookie consent mechanism compliant with GDPR. The site is accessible, mobile-optimized, and uses HTTPS with Google Analytics for moderate user tracking. Security posture is good with no obvious vulnerabilities, though some security headers could be improved. WHOIS data for the main domain is missing, likely due to querying the 'www' subdomain, but the website content and external references support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
LISICKI SP. Z O.O.fmrlisicki.pl
Manufacturing · Poland
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LISICKI SP. Z O.O. is a medium-sized Polish manufacturer specializing in agricultural, orchard, and municipal machinery. Founded in 1995, the company has established a solid market position with exports to several European countries. Their business model focuses on manufacturing, distribution, and after-sales services including transport and spare parts supply. The website reflects a professional and consistent brand image targeting agricultural and municipal sectors. Technically, the website is built on WordPress with WooCommerce and uses modern tools such as Google Analytics, Hotjar, and Microsoft Clarity for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly, hosted by home.pl S.A. The domain registration is consistent and legitimate, with no privacy protection masking ownership. Security posture is good with HTTPS enabled and cookie consent implemented, though DNSSEC is not enabled and security headers are missing. No explicit security or incident response policies are published, which could be improved. The site does not show signs of blocking or WAF interference, allowing full content access. Overall, the website presents a trustworthy and professional digital presence with minor technical and security improvements recommended to enhance protection and compliance.
Inter Techintertech-agro.pl
Manufacturing · Poland
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
INTERTECH Sp. z o.o. is a Polish manufacturer specializing in agricultural and municipal machinery, including front loaders, tillage machines, forage equipment, and municipal machines. Established in 2012, the company has developed a strong market presence with an international dealer network, targeting farmers and municipal service providers. The website reflects a professional and comprehensive digital presence, featuring detailed product lines, news updates, and dealer locator services. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a mature digital infrastructure and marketing strategy, with room for enhanced security transparency and incident response readiness.
Promar Złotkipromar-zlotki.pl
Manufacturing · Poland
71Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Promar Złotki is a well-established Polish manufacturer specializing in agricultural machinery, including sprayers, fertilizer spreaders, and orchard equipment. The company operates a professional website featuring an online shop and product catalog, targeting agricultural businesses and farmers. Their market position is that of a leading manufacturer in their sector, supported by a medium-sized business infrastructure founded in 2009. The website demonstrates good digital maturity with WordPress and WooCommerce platforms, enhanced by SEO best practices and structured data for improved search visibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and explicit security policies. Privacy compliance is partially addressed via cookie consent but lacks a dedicated privacy policy or terms of service pages. Overall, the site is professional and trustworthy, with clear contact information and social media presence.
Tepalai Pagal Automobilįtepalaipagalautomobili.lt
Transportation · Lithuania
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TepalaiPagalAutomobili.lt is a Lithuanian website dedicated to providing precise and convenient recommendations for engine oils based on car make, model, and production year. The platform targets Lithuanian car owners seeking reliable automotive maintenance information, offering a rich collection of articles and a user-friendly search interface. The business operates as an informational service with a focus on automotive transportation sector needs. Technically, the site is built on WordPress with modern SEO plugins and Google services integration, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website presents a professional and trustworthy front for its niche audience, with consistent branding and relevant content.
- BBloomberg Finance L.P.
businessweek.com
Finance · United States
72Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Bloomberg Finance L.P. operates Bloomberg Businessweek, a leading global media and financial information platform providing in-depth analysis, news, and insights for business leaders and financial professionals worldwide. The website demonstrates a mature digital presence with a modern tech stack including React and Next.js, integrated with advanced monitoring and analytics tools such as New Relic and Google Tag Manager. Security posture is strong with HTTPS enforcement, comprehensive security headers, and consent management for privacy compliance. However, the absence of publicly accessible WHOIS data is notable but likely due to registry policies rather than malicious intent. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.
BABELbabel-tya.com
Non-profit · Denmark
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BABEL is a European large-scale cultural cooperation project focused on Theatre for Young Audiences, promoting cultural citizenship, intercultural dialogue, and mutual understanding. It involves 14 partners across 11 European countries and is coordinated by Teatercentrum in Denmark. The project organizes festivals, residencies, workshops, and research activities to engage young audiences and artists. The website serves as an information hub for the project activities, partners, and resources, with a clear focus on cultural and educational content. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, hosted with Amazon Registrar and AWS DNS services. It uses modern web technologies and is optimized for mobile devices, though performance is moderate. The site lacks advanced SEO and accessibility features but maintains a professional design and clear navigation. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a compliance risk. Overall, the website is a credible and professional platform for a non-profit cultural project but should improve privacy compliance and security practices to enhance trust and regulatory adherence.
Darstellende Künste & Junges Publikumjungespublikum.de
Non-profit · Germany
73Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website jungespublikum.de serves as a professional and comprehensive platform for the cultural sector focused on performing arts for young audiences in Germany. It represents organizations such as ASSITEJ and KJTZ, providing event information, funding opportunities, publications, and advocacy resources. The site targets theater professionals, cultural institutions, and young audiences, positioning itself as a key network and information hub in this niche cultural domain. The business model is non-profit, emphasizing cultural participation and support rather than commercial activities. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie for privacy compliance. It uses Matomo for privacy-conscious analytics and Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. However, security headers could be improved, and the site lacks a published security policy or incident response information. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website demonstrates a mature digital presence with strong content quality, technical implementation, and privacy compliance. The risk profile is low, with no signs of malicious activity or blocking. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.
Neat Digitalitsneat.digital
Technology
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Neat Digital is a specialized UX/UI design and web development studio that focuses on connecting brands and users through tailored digital experiences. Their services range from no-code websites to complex digital platforms, emphasizing functional and user-centric solutions. The company positions itself as a boutique digital studio with a strong focus on quality and client engagement. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA, indicating a mature digital infrastructure with attention to user analytics and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses CAPTCHA protections on forms, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the professional presentation and comprehensive privacy and cookie policies suggest a trustworthy operation. Overall, the website scores well on content quality and technical implementation, with moderate scores on privacy compliance and business credibility due to missing explicit contact details and terms of service.
Suknelių nuoma Kauneingridossalonas.lt
Retail · Lithuania
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Suknelių nuoma Kaune is a small retail business specializing in wedding dress rentals located in Kaunas, Lithuania. The website serves as a digital storefront showcasing their offerings and providing contact channels for potential customers. The business targets individuals seeking wedding dress rental services locally. The website is built on WordPress using Elementor and Slider Revolution plugins, hosted by HOSTINGER operations, UAB. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie banner present. Overall, the website presents a professional and trustworthy image suitable for a small local business.
BaldųSkelbimai.ltbalduskelbimai.lt
Retail · Lithuania
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BaldųSkelbimai.lt operates as a specialized online marketplace focused on furniture sales and search within Lithuania. The platform offers a comprehensive catalog of new and used furniture listings, including advanced search features such as photo-based furniture search. It also provides a directory of service providers related to furniture design, manufacturing, assembly, restoration, transportation, and cleaning. The website targets furniture buyers and sellers, aiming to consolidate the largest furniture selling community in Lithuania. Technically, the site leverages AMP for mobile optimization, uses jQuery and Swiper.js for UI interactions, and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. Privacy compliance is well addressed with a cookie consent banner and a detailed privacy policy in Lithuanian. However, the absence of WHOIS data limits domain legitimacy verification. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the site lacks explicit security headers and updated JavaScript libraries. Overall, the platform presents a professional and trustworthy user experience with room for improvement in security and contact transparency.
Other · Netherlands
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The Federatie van betaald voetbal organisaties (FBO) is a well-established Dutch employers' organization representing professional football clubs in the Netherlands, primarily from the Ere- and Eerste Divisie. Founded in 1968, the FBO provides services including member support, job listings, legal and HR information, and networking opportunities. The website serves as an information hub and job portal for the football sector, targeting clubs, professionals, and stakeholders within Dutch professional football. Technically, the website is built on a modern WordPress platform using popular plugins such as WooCommerce, Gravity Forms, and Easy Digital Downloads. It integrates Google Analytics and Tag Manager for tracking and uses Google Maps API for location services. The site is mobile-optimized with good navigation and content structure, though some accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks several security headers that could enhance protection. No privacy or cookie policies are explicitly presented, which is a compliance gap. No vulnerability disclosure or incident response policies are visible. The domain registration is consistent and longstanding, supporting the site's legitimacy. Overall, the FBO website is professional and trustworthy with good business credibility and technical implementation. However, improvements in privacy compliance, security headers, and explicit policies would strengthen its security posture and regulatory adherence.
- Нет Инфо ЕАД
vcards.bg
Media · Bulgaria
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Vcards.bg is an established Bulgarian online greeting card platform operated by Нет Инфо ЕАД since 1999. It offers a wide variety of categorized electronic greeting cards for numerous occasions, targeting Bulgarian-speaking users. The website integrates multiple third-party advertising and analytics services, including SmartAdServer, Google Tag Manager, and Gemius Audience, indicating a mature digital marketing approach. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.10.2 and includes asynchronous loading of scripts to optimize performance. Security posture is moderate with HTTPS enabled but lacks explicit security headers and advanced form protections. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited to a feedback form without direct emails or phone numbers. Overall, the site demonstrates good content quality and business credibility but requires improvements in privacy and security practices.
fs22 modsfsmods.lt
Other · Lithuania
55Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
FSmods.lt is a specialized website dedicated to providing free mods and related news for Farming Simulator 22 and 25 games. It serves a niche gaming community by aggregating and distributing a wide range of mods including vehicles, implements, maps, and miscellaneous content. The site is positioned as a community resource inviting mod creators to collaborate and share their work. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and SEO optimizations via Yoast. It is hosted by HOSTINGER operations, UAB and uses Cloudflare DNS for domain resolution. The site employs HTTPS with good security headers, indicating a solid security posture. However, it lacks explicit privacy and cookie policies, GDPR compliance indicators, and incident response information, which are important for regulatory compliance and user trust. Overall, the website is functional, well-structured, and professionally presented but would benefit from enhanced privacy and security disclosures.
- EEnterprise Holdings, Inc.
alamo.com
Transportation · United States
75Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Alamo Rent a Car, a brand under Enterprise Holdings, Inc., operates a comprehensive car rental service platform targeting travelers across North America, Latin America, the Caribbean, Europe, and parts of Asia-Pacific and the Middle East. The website offers reservation services, loyalty programs, and promotional deals, positioning itself as a large enterprise in the transportation sector with a strong market presence. The digital infrastructure is built on modern technologies including React and Adobe Experience Manager, supported by robust analytics and marketing tools such as Adobe Target and Google Analytics. Privacy and cookie compliance are well addressed with OneTrust integration, reflecting a mature approach to user data protection. Security posture is solid with HTTPS enforcement and use of ReCaptcha, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is notable but likely due to registry or query limitations rather than malicious intent. Overall, the website demonstrates good professionalism, trustworthiness, and technical maturity.
toprent.lvtoprent.com
Transportation · Latvia
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Toprent.lv operates as a regional car rental service primarily targeting customers in the Baltic states, including Latvia, Lithuania, and Estonia. The company offers an online platform for vehicle rentals with multilingual support, catering to both local and international clients. The website's content and structure reflect a professional and user-friendly approach, with clear navigation and relevant business information. The business model focuses on providing accessible car rental services with customer support and FAQ resources to enhance user experience. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, leveraging Cloudflare for DNS services. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented through meta tags and structured data. The presence of Cookiebot for cookie consent and Google Analytics for traffic analysis indicates a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with granular user controls. However, some standard security headers are missing, and there is no explicit security policy or incident response information publicly available. No critical vulnerabilities or exposed sensitive data were detected, suggesting a reasonable security posture but with room for improvement in header implementation and formal security documentation. Overall, Toprent.lv presents a credible and professional online presence with solid business credibility and compliance with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a formal security policy, and establishing a vulnerability disclosure program to further strengthen trust and security maturity.
Flexspaceflexspace.ai
Technology
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Flexspace is a technology company specializing in providing ecommerce revenue platforms and AI-driven dynamic pricing solutions for coworking spaces. Their platform enables coworking operators to optimize workspace and meeting room bookings, leveraging AI marketing agents and personalized service. The company positions itself as a thought leader in the future of work, targeting coworking operators and companies seeking flexible workspace solutions. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Analytics, HubSpot, Hotjar, and Crazy Egg, indicating a mature digital marketing approach. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNSSEC and security headers. Privacy compliance is minimal with no visible privacy or cookie policies, which is a gap for GDPR compliance. Overall, the site is professional and trustworthy but could improve transparency and security practices.
FS22.comfs22.com
Other
73Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
FS22.com is a specialized content platform focused on providing downloadable mods for the Farming Simulator 22 game. Established in 2013, it has built a niche presence with a comprehensive mod database, daily updates, and categorized content targeting the gaming community interested in farming simulation. The website leverages WordPress CMS with popular plugins for SEO, ratings, and social sharing, hosted behind Cloudflare DNS and CDN services. The technical infrastructure is modern and supports good user experience with mobile optimization and structured navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is moderate due to lack of direct contact information and limited transparency about the organization behind the site. Overall, FS22.com is a functional and relevant mod hub with room for improvement in security and privacy practices.
- RRico Sta. Cruz
ricostacruz.com
Technology · Australia
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Rico Sta. Cruz is an established web developer and open-source contributor with a personal website serving as a blog and portfolio. The site targets web developers and technology enthusiasts, showcasing expertise in JavaScript, Ruby, and UI design. The business model centers on personal branding and content creation, supported by active open-source projects and social media presence. Technically, the website uses modern frameworks such as Astro and Preact, is hosted with Cloudflare DNS, and employs Google Tag Manager for analytics. The site is performant, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from improved compliance and security practices.
IT Solutionsitsolutions.lt
Technology · Lithuania
66Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
IT Solutions is a Lithuanian-based technology company specializing in digital solutions and web development services. Established in 2007, the company offers programming and comprehensive website creation services, targeting businesses seeking to enhance their digital presence. The website reflects a professional and consistent brand image with a focus on delivering tailored IT solutions to its clients. The technical infrastructure is built on a modern WordPress CMS platform, utilizing Elementor for design and Yoast SEO for optimization. The site integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms; however, there is room for improvement in implementing additional security headers and publishing explicit security policies. Overall, the website is functional, professionally designed, and moderately optimized for SEO and mobile devices, supporting a trustworthy business presence. Strategic recommendations include enhancing privacy and security disclosures, improving accessibility, and providing clear contact information to strengthen compliance and user trust.
GTA 6 Chroniclesgta6chronicles.com
Media
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
GTA 6 Chronicles operates as a niche media outlet providing a weekly newsletter focused on the popular game GTA 6, delivering news, leaks, mods, and updates primarily targeting gaming enthusiasts interested in Vice City content. The website leverages WordPress CMS with common plugins such as Yoast SEO and integrates marketing tools like Google Analytics and Beehiiv for newsletter management. The site is moderately optimized for SEO and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing critical security headers and no visible incident response or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site functions well as a content delivery platform but requires improvements in security, privacy compliance, and transparency to enhance credibility and user trust.
Grand Theft Auto VI Wikigtasixwiki.com
Media
53Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The website www.gtasixwiki.com is a fan-operated wiki dedicated to the upcoming Grand Theft Auto VI game by Rockstar Games. It serves as a comprehensive resource for fans, providing news, cheat codes, character information, and detailed game analysis. The site is built on WordPress and integrates common web technologies such as jQuery, Google Adsense for monetization, and Google Tag Manager for analytics and tracking. The site demonstrates good SEO practices and offers a user-friendly experience with clear navigation and mobile optimization. Privacy and cookie policies are present with a consent management platform, indicating a commitment to GDPR compliance. However, the absence of WHOIS registration data for the domain raises concerns about the legitimacy and transparency of the domain ownership. No direct company contact emails or phone numbers are provided, with contact facilitated via a Google Forms link. Security headers are partially implemented, and HTTPS is enforced, but additional security headers could improve the security posture. Overall, the site is a well-maintained fan resource but lacks verifiable business identity and domain registration transparency.
VisitIQdriveniq.com
Technology · United States
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
VisitIQ is a US-based technology company founded in 2022, offering an AI-driven identity intelligence and activation platform targeted at marketers and enterprises. Their platform enables identification of anonymous digital traffic, ICP definition, audience expansion, and campaign activation through AI and geo-targeting. The website is built on WordPress with modern technologies and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Microsoft Clarity. Security posture is generally good with HTTPS and bot protection via hCaptcha, but lacks DNSSEC and visible security headers. Privacy and cookie policies are not found, indicating compliance gaps. Contact is primarily via a web form without direct emails or phone numbers listed.
UAB "Interneto vizija"radior.lt
Media · Lithuania
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Radior.lt is a regional Russian-language news radio service operating under the Lithuanian domain radior.lt. The website is managed by UAB "Interneto vizija", a Lithuanian registrar, indicating legitimate business registration and operation. The site uses WordPress CMS with Elementor and Proradio theme/plugins, providing a modern and responsive user experience. The content focuses on regional news broadcasting, targeting Russian-speaking audiences in Lithuania and surrounding areas. The business model centers on media broadcasting and news dissemination, supported by Google advertising and analytics services integrated with a cookie consent mechanism.
Other
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain hostlin.com is registered since 2011 with PDR Ltd. d/b/a PublicDomainRegistry.com but currently serves only a 404 Not Found error page with no active content or business information. The website lacks any metadata, structured data, or contact details, indicating it is either abandoned or not yet developed. The hosting environment uses LiteSpeed Web Server, but no CMS or modern web technologies are detected. Security posture is minimal with no HTTPS or security headers evident from the data provided. There are no privacy or cookie policies, nor any compliance indicators. Overall, the site presents a low trust profile and minimal digital maturity.
Government · Lithuania
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website e-tar.lt is an official Lithuanian government portal dedicated to the registration and search of legal acts. It serves as a critical resource for legal professionals, government officials, and the public to access up-to-date legislative documents and legal information. The portal is operated under the auspices of the Lithuanian Parliament's Chancellery, providing authoritative and reliable legal content. The site is primarily in Lithuanian but offers language options for broader accessibility. Technically, the site is built using JavaServer Faces with the PrimeFaces framework, leveraging jQuery and JavaScript for UI interactions. The infrastructure appears stable and moderately optimized, with basic mobile responsiveness and accessibility features. The site enforces HTTPS and includes measures to prevent framing by external sites, enhancing security. However, there is room for improvement in implementing modern security headers and enhancing privacy compliance. From a security perspective, the portal demonstrates a moderate security posture with enforced HTTPS and no visible vulnerabilities in the provided content. However, the absence of explicit privacy and cookie policies, security headers, and incident response information indicates gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is a trustworthy and authoritative government resource with a solid business credibility score. Strategic improvements in privacy policy publication, security header implementation, and accessibility enhancements would further strengthen its security and compliance posture.
Other · Lithuania
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website ekoatris.lt currently serves only a 404 error page indicating that the requested resource is not found. There is no accessible content, metadata, or business information available on the site. The domain is registered since 2017 under a Lithuanian registrar, which suggests a legitimate registration, but the lack of website content severely limits any meaningful analysis of the business or its services. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS information is provided, which raises concerns about security posture. Privacy and compliance policies are absent, and no contact or social media information is available, further reducing trust and credibility. Overall, the site is currently non-functional from a user and security perspective.
Other
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.e-rinkliava.lt currently presents minimal accessible content, with no visible business information, contact details, or policies. The WHOIS data for the domain is unavailable or invalid, indicating potential issues with domain registration or status. The site uses Angular 8 framework and includes Google Fonts and Material Icons, but lacks SEO optimization and accessibility features. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance indicators. Overall, the site appears either blocked, inactive, or improperly configured, limiting its business credibility and trustworthiness.
Tobalttobalt.lt
Technology · Lithuania
67Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Tobalt is a Lithuanian small business specializing in creating modern, professional websites and digital tools primarily for institutions and public sector organizations. Founded in 2019, the company offers a range of services including WordPress website development, e-commerce solutions, accessibility adaptations, and website maintenance. Their market position is focused on serving institutional clients with tailored digital solutions, supported by a professional website showcasing client logos and social media presence. Technically, the website is built on WordPress using Elementor, with integration of modern marketing and analytics tools such as Microsoft Clarity, Google Tag Manager, and Sendinblue. The site is mobile optimized and SEO friendly, though performance is moderate. Hosting and DNS are managed via Cloudflare, providing a reliable infrastructure. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks some recommended security headers and does not publish a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve trustworthiness.
- Vilniaus Gedimino technikos universitetas
vilniustech.lt
Education · Lithuania
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Vilnius Gediminas Technical University (VILNIUS TECH) is a leading Lithuanian university specializing in technology sciences, offering modern, labor market-oriented education programs including bachelor, master, and doctoral studies. The institution maintains a strong market position in education and research, supported by international partnerships such as the ATHENA European University Alliance. The website reflects a mature digital presence with comprehensive content targeting students, prospective students, researchers, and business collaborators. Technically, the site uses modern frameworks like Bootstrap and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.
Fluentfluent.dental
Healthcare · United States
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Fluent is a specialized data analytics and solutions provider serving the oral healthcare industry, including dental payers, dentists/DSOs, and dental suppliers. The company offers a comprehensive suite of products focused on utilization management, network management, member engagement, fee benchmarking, and CRM optimization. Positioned as a leading dental data partner, Fluent emphasizes improving efficiency and collaboration across the dental ecosystem. The website reflects a mature digital presence built on HubSpot CMS, with modern technologies and integrations supporting marketing and analytics. Security posture is strong with HTTPS, security headers, and recognized industry certifications such as URAC, SOC 2 Type 2, and HITRUST, although DNSSEC is not enabled and no explicit security policy or incident response page was found. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information including a contact form, email, phone, and physical address. Overall, Fluent demonstrates a professional, trustworthy, and business-focused online presence with room for minor security and accessibility improvements.