Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
87,051–87,100 of 99,068
Mobylogixmobylogix.com
Technology · Pakistan
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Mobylogix is a technology company specializing in software engineering and marketing services, targeting entrepreneurs, startups, and enterprises. The company offers a broad range of services including mobile app development, SaaS/web development, ecommerce, AI/machine learning, blockchain, cloud services, virtual reality, MVP development, and custom enterprise software. Positioned as a trusted and top-rated software development company, Mobylogix has multiple certifications and awards, and serves clients globally with a focus on innovation and digital transformation. Technically, the website is built using modern JavaScript frameworks such as React, with integrations of popular libraries like Slick Carousel and Animate.css. The site is hosted with GoDaddy and uses HTTPS with valid SSL certificates. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks important security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Analytics and marketing tools like Google Analytics and Calendly are used without visible cookie consent mechanisms, indicating partial privacy compliance. Overall, the website presents a professional and credible business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, enabling DNSSEC, and establishing vulnerability disclosure processes.
- AAS Postimees Grupp
bns.ee
Media · Estonia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Baltic News Service (BNS) is a leading news agency serving the Baltic states of Estonia, Latvia, and Lithuania, providing economic and political news in multiple languages. The company operates under AS Postimees Grupp and targets professional information users and media outlets. The business model is subscription-based, requiring valid information service agreements for access to the news terminal. The website content is professionally presented with clear navigation and relevant news updates, reflecting a strong market position in the regional media sector. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.4.2, TinyMCE, and Google Tag Manager for analytics. While HTTPS is enforced and cookie consent is implemented, the use of outdated libraries introduces security risks. No explicit privacy or terms of service policies were found, indicating room for compliance improvement. Overall, the site is accessible without WAF or blocking mechanisms, and the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.
BIC Corporate | BICbicworld.com
—
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Festina Finance A/Sfestinalente.dk
Finance · Denmark
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Festina Finance A/S is a Copenhagen-based fintech company specializing in advanced financial software solutions for life insurance, pensions, and financial planning. The company serves a broad range of European financial institutions including banks, insurance companies, and pension funds. With over 40 customers and more than 100 employees, Festina Finance has established itself as a trusted technology partner in the financial sector since its first customer engagement in 2014. Their key offerings include configurable policy administration platforms and advisory tools that leverage AI and optimization techniques to enhance financial advice and planning. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, Google Tag Manager, Google reCAPTCHA, and Cookiebot for consent management. The site is well-optimized for performance and mobile responsiveness, providing a professional user experience with clear navigation and rich content including case studies and client testimonials. However, the absence of explicit security headers and published security policies indicates room for improvement in security transparency. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks published incident response contacts or vulnerability disclosure mechanisms. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance and business legitimacy of the site. Overall, Festina Finance presents a strong business and technical profile with a solid market position in the European financial software industry. To enhance trust and security posture, it is recommended to publish comprehensive privacy and security policies, improve WHOIS transparency, and implement additional security headers and disclosure practices.
BC Hydrobchydro.com
Energy · Canada
74Medium
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
BC Hydro is a large Canadian electric utility serving British Columbia with electricity generation, transmission, and distribution services. The website presents a professional and comprehensive digital presence with extensive customer resources, energy-saving programs, and project information. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, jQuery, Font Awesome, and integrates analytics and marketing tools such as Google Tag Manager and Qualtrics. Security posture is strong with HTTPS enforcement, security headers, and secure login portals, although no explicit incident response or vulnerability disclosure policies were found. The absence of WHOIS registration data is unusual for a public utility domain and warrants further verification, but the website content and branding strongly support legitimacy. Overall, the site is well designed, accessible, and trustworthy, serving a broad audience of residential and business customers in British Columbia.
Outer Studioouter.studio
Technology · Lithuania
61Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Outer Studio is a Lithuania-based branding and web design agency specializing in strategy-driven, innovative digital solutions for businesses of all sizes worldwide. The company offers a comprehensive suite of services including visual identity design, web design and development, UX/UI, motion design, and digital product creation. Their portfolio showcases collaborations with notable clients across various industries, supported by strong client testimonials and high ratings on platforms like Clutch and Google Reviews. Technically, the website is built on modern technologies such as Webflow CMS, GSAP animations, and integrates analytics and session recording tools like Google Analytics, Hotjar, and SessionStack, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is partially addressed with a cookie consent banner but lacks a dedicated privacy policy or terms of service pages. Overall, the site demonstrates high professionalism and trustworthiness, though enhancing transparency around privacy and security policies would strengthen user confidence further.
Urban Estate and Buildersurbanestate.pk
Real Estate · Pakistan
70Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Urban Estate and Builders is a small-sized real estate company based in Lahore, Pakistan, with over 15 years of experience. The company specializes in property sales, rentals, and investment guidance, targeting buyers, sellers, and investors in the Lahore region. Their website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting their market position as a premier real estate service provider in the area. Technically, the website uses modern web technologies including Bootstrap, Google Tag Manager, and responsive design elements, though some performance and accessibility aspects are basic. Security-wise, the site uses HTTPS but lacks visible security headers and published security policies, indicating room for improvement in security posture and compliance. The WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, the website scores moderately well but should address privacy and security policy gaps to enhance trust and compliance.
Other
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The domain opinioapp.com is registered since 2014 with GoDaddy.com, LLC and uses Cloudflare DNS services. However, the website is currently inaccessible, returning a 403 Forbidden error served by nginx, indicating that access is blocked or restricted. Due to the lack of accessible content, no metadata, business information, or security policies could be extracted or analyzed. The technical infrastructure shows usage of nginx and Cloudflare DNS but no further details on SSL or security headers are available. The security posture cannot be properly assessed due to blocked content, but the absence of visible HTTPS or security headers is a concern. Overall, the website's inaccessibility severely limits the ability to evaluate its business credibility, privacy compliance, or security maturity. Strategic recommendations include resolving access issues, enabling HTTPS, and publishing clear privacy and security policies.
Caleffi Hydronic Solutionscaleffi.com
Energy · Italy
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Caleffi Hydronic Solutions is a well-established company specializing in hydronic system components, serving a global market with a focus on energy-related heating and plumbing solutions. The company presents a professional and consistent brand image with a multilingual website targeting various international regions. Their digital infrastructure is built on Drupal CMS with integrations for analytics and cookie consent, reflecting a moderate to advanced digital maturity. Security posture is generally strong with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. The absence of WHOIS registration data is a notable anomaly that impacts trust assessment. Overall, the website is functional, professional, and compliant with privacy regulations, but further verification of domain legitimacy is recommended.
- MACNA Investimentos
macna.com.br
Finance · Brazil
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MACNA Investimentos is a Brazilian investment and consulting firm specializing in mergers and acquisitions, corporate governance, strategic consulting, and business modeling. The company targets businesses seeking professional advisory services in corporate finance and governance. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and editor elements, with moderate performance and good mobile optimization. The site uses HTTPS and implements some JavaScript security hardening but lacks explicit security headers and published privacy or cookie policies. No contact emails or phone numbers are directly available, though a physical address in São Paulo is provided in structured data. SEO is limited due to a noindex robots meta tag. Overall, the site presents a professional business presence but could improve in privacy compliance and security transparency.
- HHugeDomains.com
gamaitalia.com
E-commerce
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HugeDomains.com operates as a reputable domain marketplace specializing in premium domain name sales. The website offers clear pricing, payment plans, and secure purchasing options, targeting individuals and businesses seeking valuable domain assets. The platform has been active since 2005, establishing a solid market presence with thousands of satisfied customers. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. The presence of cookie consent mechanisms and comprehensive privacy policies demonstrates a commitment to privacy compliance. Security posture is strong with HTTPS enforced and secure payment options, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for mobile and SEO.
Macawmacaw.nl
Technology · Netherlands
64Medium
NIS2 35 · GDPR 48
NIS2 35 · GDPR 48
Macaw is a well-established full-service digital partner specializing in AI and digital transformation with a strong market presence in the Netherlands and regional offices in Germany and Lithuania. The company offers a broad portfolio of services including AI, data analytics, employee experience, business applications, digital marketing, cloud services, and security compliancy. Their client base includes major enterprises such as Heineken and VGZ, underscoring their market credibility and expertise. Technically, the website is built on WordPress with modern frameworks and integrations such as Algolia search, HubSpot forms, and Microsoft Dynamics 365 marketing, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and coordinated vulnerability disclosure, though improvements can be made in cookie consent and explicit security policies. Overall, the website is professional, well-optimized for SEO, and provides comprehensive business and service information, supporting a high trust level.
N/Atheisg.com
Other
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website theisg.com is a parked domain primarily monetized through advertising and related search content. It lacks substantive business information, contact details, or user engagement features. The domain is registered since 2008 with GoDaddy.com, LLC and is not privacy protected, indicating a stable registration but no clear business identity. Technically, the site uses basic HTTPS and integrates Google Adsense and Bodis domain parking services, but lacks modern security headers and cookie consent mechanisms. The overall security posture is basic with room for improvement in DNS security and privacy compliance. The site’s content quality and business credibility are low, reflecting its status as a parked domain rather than an active business website.
Government · Lithuania
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website vtpsi.lrv.lt is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks direct content access. This subdomain appears to be part of the Lithuanian government domain (lrv.lt), suggesting it serves a governmental function. However, due to the security challenge, no business or contact information, privacy policies, or terms of service are visible. The technical infrastructure relies on Cloudflare's security and performance services, including Turnstile captcha and Cloudflare Insights for analytics. The security posture cannot be fully evaluated due to the blocked content, but the presence of Cloudflare indicates a baseline of protection. Overall, the site lacks visible content and compliance indicators, resulting in a low trust and quality score.
- IdealInvent
idealinvent.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
IdealInvent is a website hosted on the Wix platform, presenting minimal content and lacking detailed business descriptions or contact information. The site uses Wix's Thunderbolt framework and standard Wix scripts, indicating a basic technical infrastructure with moderate performance and mobile optimization. However, the absence of WHOIS registration data for the domain raises concerns about the legitimacy and trustworthiness of the domain ownership. Security posture is minimal with no detected security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website appears to be in an early or incomplete stage of development with limited business credibility and security maturity.
- IInsurance company
aegisgeneral.com
Insurance · United states
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Global Horizons USAglobalhorizons-usa.org
Education
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Global Horizons USA operates as a student exchange organization focused on facilitating cultural and educational exchange programs within the USA. The website presents a professional and consistent brand image with clear descriptions of its services targeted at students, educational institutions, and host families. The technical infrastructure is based on WordPress using the Divi theme and Yoast SEO plugin, indicating a standard modern CMS setup with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are absent, which is a compliance gap. WHOIS data is unavailable, reducing transparency and trustworthiness from a domain registration perspective. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.
Education · Lithuania
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vytauto Didžiojo universitetas (VDU) is a prominent Lithuanian higher education institution based in Kaunas, offering over 120 diverse study programs. The university targets students, academic staff, and researchers, including international participants, providing undergraduate, graduate, doctoral studies, and international exchange opportunities. The website reflects a mature digital presence with a WordPress CMS infrastructure enhanced by modern plugins and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. The site is well-structured, mobile-optimized, and provides comprehensive institutional information, including contact details and social media links. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers could be further improved. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. The WHOIS data is unavailable due to query limits or privacy protection, but the website's professional presentation and consistent branding support its legitimacy. Overall, VDU's digital footprint aligns with its status as a large educational institution, providing a trustworthy and user-friendly online experience.
UAB webRobotswebrobots.io
Technology · Lithuania
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Webrobots.io is a Lithuania-based small technology company specializing in B2B web crawling and scraping services. Founded in 2014, the company offers a range of solutions including a free browser extension for instant data scraping, a fully managed scraping service, and a SaaS platform for custom scraping robot development. Their market position is supported by notable customers such as Balderton Capital, Merck, and Stanford University, indicating a trusted niche player in the web data extraction industry. The website is professionally designed using WordPress with the Avada theme, providing good user experience and clear navigation tailored for business clients. Technically, the site employs modern web technologies including Google Analytics and reCAPTCHA for security and analytics, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security and privacy practices.
Infolex S.A.infolex.gr
Technology · Greece
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Infolex S.A. is a well-established Greek company specializing in printing and document management solutions, serving a broad range of business customers from home offices to large enterprises. Their offerings include printers, multifunction devices, consumables, and professional software solutions, complemented by technical support and warranty services. The company demonstrates a strong market position with a client base that includes major corporations and public institutions. Technically, the website is built on WordPress using modern libraries and frameworks, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced, but could benefit from enhanced security headers and explicit privacy and cookie policies. Overall, the website reflects a professional and trustworthy business presence, though improvements in privacy compliance and security best practices are recommended.
Slant Co.slant.co
Technology
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Slant.co operates as a technology-driven product recommendation community aimed at simplifying the process of finding the best products, apps, or games for consumers. With over 2.8 million monthly users, it holds a strong market position as a trusted platform for product rankings and user-generated reviews. The business model leverages community contributions and affiliate marketing, notably through Amazon Associates, to generate revenue. The platform also offers browser extensions to enhance user experience and engagement. Technically, the website employs a modern technology stack including Google Analytics, Customer.io for marketing automation, Quantcast for consent management, and Freestar for advertising. The site is well-optimized for mobile devices and demonstrates good SEO practices, although there is room for improvement in accessibility and structured data implementation. Performance is moderate, with asynchronous loading of scripts and use of CDN resources. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with cookie regulations. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit privacy policy and terms of service pages, as well as lack of direct contact information, represent compliance and trust gaps. The WHOIS data is redacted, which is common but limits transparency. Overall, Slant.co presents a solid digital presence with good business credibility and technical implementation. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance trust and compliance, supporting sustained growth and user confidence.
Rodes For Him | For Herrodes.com
Retail · United States
68Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Rodes For Him | For Her is a small retail fashion specialty store based in Louisville, Kentucky, offering men's and women's fashion, personal styling, tailoring, and formal wedding group services. The website is professionally designed using the Wix platform, featuring structured data that clearly identifies the business location and contact phone number. However, the domain WHOIS data is unavailable, raising questions about domain registration legitimacy. Technically, the site uses modern web technologies provided by Wix, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enforced but lacks explicit security headers and privacy compliance mechanisms such as privacy and cookie policies. Overall, the site presents a professional front but would benefit from enhanced security and compliance features to improve trustworthiness and regulatory adherence.
- A. Espersen A/S
espersen.dk
Manufacturing · Denmark
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Espersen is a medium-sized Danish company specializing in sustainable seafood production, emphasizing responsible sourcing, quality, and social responsibility. Their website highlights their commitment to environmental sustainability, worker welfare, and product innovation. The company targets seafood industry professionals, environmentally conscious consumers, and potential employees. Technically, the website is built on Dynamicweb 8 CMS, uses Bootstrap and jQuery libraries, and features a responsive design with moderate performance. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS registration data reduces trustworthiness and suggests a need for further verification. Overall, the website is professional and trustworthy but could improve privacy transparency and security hardening.
PrintNonStopprintnonstop.com
Technology · Lithuania
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
PrintNonStop is a Lithuania-based managed print services provider specializing in optimizing printing device fleets for businesses. Their offerings include real-time monitoring, automatic consumables supply, device repair and maintenance, and device leasing, supported by proprietary PRINTlog™ software. The company positions itself as an independent multi-vendor service provider aiming to reduce printing costs by up to 40%. The website is professionally designed, mobile-optimized, and provides clear service descriptions and contact options, including a client login portal and free software offerings. Technically, the website employs modern web technologies such as Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site uses HTTPS with good SSL configuration but lacks visible security headers. Performance is moderate with good mobile responsiveness and basic accessibility features. SEO is adequately addressed with proper meta tags and Open Graph data. From a security perspective, the site demonstrates good practices like HTTPS enforcement and spam protection on forms. However, the absence of security headers and explicit security or incident response policies indicates room for improvement. The missing WHOIS data for the domain raises concerns about domain registration transparency, which impacts overall trustworthiness despite the professional web presence. Overall, the website presents a credible business with solid technical infrastructure but would benefit from enhanced security policies, WHOIS transparency, and formalized terms of service to improve trust and compliance.
Ramirent Groupramirent.com
Energy · Finland
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ramirent Group is a leading equipment rental service provider specializing in construction and industrial equipment rental, scaffolding, and weather protection services. As part of the Loxam Group, Ramirent operates in 30 countries worldwide and holds a strong market position as a top three player in nine countries and fourth worldwide within its parent group. The company targets construction firms, industrial clients, and equipment renters, offering a wide range of high-quality rental equipment and support services. The website reflects a professional and comprehensive digital presence with excellent content quality and branding consistency. Technically, the website is built on WordPress CMS with modern technologies including Yoast SEO for optimization, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Performance is moderate, with room for improvement in hosting and speed. From a security perspective, the site enforces HTTPS, implements key security headers, and provides mechanisms for reporting cybersecurity incidents. However, it lacks a dedicated security policy page and vulnerability disclosure program. The absence of WHOIS registration data raises concerns about domain registration transparency, which slightly impacts business credibility. Overall, the security posture is good but could be enhanced with formal policies and disclosures. The overall risk assessment indicates a legitimate and professional business with strong digital maturity but with a notable gap in domain registration transparency. Strategic recommendations include verifying domain registration details, publishing formal security policies, and enhancing vulnerability disclosure practices to improve trust and compliance.
TOBIS, UABtobis.lt
Retail · Lithuania
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
TOBIS, UAB is a well-established distributor of automotive consumables and related products operating primarily in Lithuania, Latvia, and Estonia. Founded in 1992, the company represents numerous reputable brands and offers both B2B and B2C sales channels, including a dedicated B2B platform. The website reflects a professional and regionally focused business with a clear market position as a leading distributor in the Baltic automotive sector. Technically, the website is built on the OpenCart platform, utilizing modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and includes standard e-commerce features like product search, category navigation, and customer support chat. Analytics and marketing tools such as Google Analytics and Facebook Pixel are integrated, supporting moderate user tracking compliant with GDPR. From a security perspective, the site enforces HTTPS and uses secure forms with AJAX validation. However, it lacks explicit security headers and does not provide public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Cookie consent mechanisms are implemented, supporting privacy compliance. Overall, the website presents a trustworthy and professional digital presence for TOBIS, UAB, with room for improvement in security transparency and WHOIS data availability. The absence of WHOIS details limits domain trust verification, but business information and contact details support legitimacy.
CRT Partnercrtpartner.com
Energy · Lithuania
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CRT Partner is a Lithuania-based company founded in 2016, specializing in providing fuel card solutions and related services such as self-service platforms, mobile applications, road toll settlements, VAT refunds, and parking lot payments across Europe. The company targets business clients and fleet operators seeking efficient fuel and expense management solutions. Their market position is that of an established medium-sized player in the European energy and transportation sector. Technically, the website is built on modern frameworks like SvelteKit, uses Cloudflare for DNS and CDN, and integrates analytics and marketing tools such as Hotjar and Google Tag Manager. The site is mobile-optimized and professionally designed, offering a good user experience and clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks advanced security headers and incident response disclosures. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the website reflects a credible and professional business with room for improvement in security and privacy practices.
- Perfetti Van Melle Holding B.V.
perfettivanmelle.com
Manufacturing
59Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Perfetti Van Melle Holding B.V. is a global leader in the manufacturing and distribution of confectionery and chewing gum products, with a presence in over 150 countries. The company operates multiple regional websites and brands, including well-known names such as Chupa Chups, Mentos, and Alpenliebe. The website reflects a mature enterprise with a clear business model focused on innovation, brand management, and global market reach. Technically, the site uses standard web technologies including jQuery, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site is accessible and well-structured, though mobile optimization is basic and some technologies like jQuery are outdated. Security posture is moderate with no visible security headers and no explicit incident response or security policy pages found. Privacy compliance is good with clear privacy and cookie policies and GDPR consent mechanisms in place. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, though the website content and branding strongly support authenticity. Overall, the site scores a 75 out of 100 on AI evaluation, indicating a good but improvable security and technical posture.
Other
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website portofklaipeda.lt is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any substantive content, business information, or contact details. The domain WHOIS data is unavailable due to query limits, leaving registrar and registration details unknown. The site appears to be protected by Cloudflare's WAF, indicating some level of security infrastructure, but this also limits transparency and analysis. Without access to actual content, no privacy, cookie, or terms policies can be confirmed, and no business or security policies are visible. Overall, the site lacks accessible information to assess its business model, market position, or security posture comprehensively.
Innovita Research – Anti-aging, immunotherapy, regenerative medicineinnovitaresearch.com
Other
73Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
The domain www.innovitaresearch.com is currently not registered or the WHOIS data is unavailable, indicating the domain is either expired or unregistered. The website content is inaccessible or blocked, preventing any meaningful analysis of business operations, technical infrastructure, or security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available. The lack of domain registration and website content severely impacts the trustworthiness and legitimacy of the entity associated with this domain.
- Avesco AG
avesco.ch
Energy · Switzerland
73Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Avesco AG is a Swiss company specializing in construction machinery for earthmoving, road construction, recycling, quarrying, gardening, and concrete transport, as well as emergency power supply for data centers, hospitals, and industry. The company targets B2B clients in the construction and energy sectors within Switzerland, positioning itself as a reliable provider of essential machinery and power solutions. The website is built on TYPO3 CMS and integrates modern technologies such as Cookiebot for cookie consent management and Matomo for privacy-focused analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit privacy and terms of service policies are not found in the provided content. Overall, the site demonstrates good technical implementation and business credibility, with room for improvement in privacy documentation and contact transparency.
Plasta Groupmaiseliai.lt
Manufacturing · Lithuania
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Plasta Group is a leading European company specializing in flexible plastics recycling and manufacturing sustainable polyethylene products. The group operates multiple companies across Europe and is part of the larger CEDO group, a global leader in sustainable FMCG private label solutions. Their business model focuses on recycling post-consumer polyethylene waste and producing eco-conscious products such as garbage bags, films, and resins for various sectors. The company emphasizes sustainability and circular economy principles, holding multiple certifications that reinforce their market position. Technically, the website is built on WordPress with modern front-end technologies like Swiper.js and integrates Google Tag Manager and MailerLite for analytics and marketing. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Hosting is provided by Hostex.lt, and the domain is registered with Tucows Domains Inc. The domain age is relatively new but consistent with a possible rebranding or new web presence. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no visible security policy or incident response contact information, and no vulnerability disclosure mechanism is present. Cookie consent is implemented with express consent, supporting basic GDPR compliance. Overall, the website presents a professional and trustworthy image with good business credibility and moderate technical maturity. Security posture is adequate but could be enhanced by implementing DNSSEC, security headers, and publishing security policies. Privacy compliance is basic, with room for improvement in transparency and documentation.
- Smart Brands Lab
smartbrandslaboratory.com
E-commerce · United States
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Smart Brands Lab is a small US-based e-commerce business specializing in niche brand innovation and product development using proprietary algorithms. Their business model focuses on identifying product-market fit through data-driven methods and scaling brands globally via online marketplaces. The website is built on WordPress with Elementor, featuring multimedia content and a consistent brand presentation. Technically, the site uses modern web technologies and is hosted with Cloudflare DNS, but lacks DNSSEC and security headers. The security posture is moderate with HTTPS enabled and domain protections in place, but missing key policies and headers reduce compliance and trust. No privacy or cookie policies were found, and contact information is not explicitly provided, which impacts privacy compliance and business credibility scores. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.
Vilandra UABvilandra.lt
Other · Lithuania
57Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Vilandra UAB is a brand development company operating in the Baltic states, specializing in tailored brand strategies for new, established, and mature brands. The company positions itself as a trusted regional player with certifications such as ISO 9001:2015 and memberships in industry associations, targeting businesses seeking to enhance their brand presence in the Baltic market. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress with modern technologies including Bootstrap, jQuery, and Google services for analytics and security. It employs HTTPS with a valid SSL certificate and integrates GDPR-compliant cookie consent mechanisms. The site demonstrates good SEO practices and mobile optimization, although accessibility features are basic. No significant technical vulnerabilities were detected, but security headers could be improved. From a security perspective, the site shows a solid posture with HTTPS, reCAPTCHA protection on forms, and cookie consent. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for enhancement. WHOIS data was unavailable due to query limits, but no suspicious indicators were found on the site itself. Overall, Vilandra UAB presents a credible and professional online presence with moderate to good technical and security maturity. Strategic improvements in security headers, transparency on security policies, and vulnerability disclosure would further strengthen trust and compliance.
- TTęstinių Mokymų Centras
testiniaimokymai.lt
Education · Lithuania
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Tęstinių Mokymų Centras is a Lithuanian-based education company specializing in continuous training and professional consulting services for businesses and individuals. Established in 2008, it positions itself as the first continuous training company in Lithuania, offering tailored solutions based on detailed needs analysis. The website reflects a professional and consistent brand image, targeting Lithuanian enterprises and individuals seeking training services. Technically, the site is built on WordPress with Visual Composer, leveraging common marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a cookie consent banner indicating GDPR compliance awareness. However, explicit security policies and incident response information are not publicly available, and WHOIS data is inaccessible due to query limits, limiting domain transparency. Overall, the website demonstrates moderate technical maturity and business credibility with room for improvement in security transparency and WHOIS data availability.
- GGemega
gemega.lt
Retail · Lithuania
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Gemega is a Lithuanian retailer specializing in mattresses, beds, couches, and mattress toppers aimed at providing quality sleep products. The website presents a professional and user-friendly e-commerce platform with clear navigation and product categorization. The company targets consumers in Lithuania seeking comfortable and customizable sleep solutions. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Tag Manager and Analytics for marketing and tracking, and employs Google reCAPTCHA for form security. The site is fully HTTPS secured, with a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and published security policies are absent, which could be improved to enhance security posture. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site is well-structured, secure, and compliant with privacy norms, supporting a trustworthy online retail presence.
MB “Kalbėk”speakup.lt
Education · Lithuania
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Speak Up! is a Lithuanian language school established in 2015, offering a wide range of language courses including English, German, Spanish, French, Russian, Lithuanian, Japanese, Italian, and IELTS preparation. The school operates in Kaunas, Vilnius, and remotely across Lithuania and beyond. It targets both individual learners and corporate clients, emphasizing personalized, innovative, and high-quality language education. The website reflects a professional and consistent brand image with clear navigation and comprehensive service offerings. Technically, the site is built on WordPress with common plugins and marketing tools, including Google Analytics, Facebook Pixel, and MailerLite, indicating a mature digital marketing approach. Security posture is adequate with HTTPS and basic protections, though some advanced security headers are missing. Privacy compliance is addressed with cookie consent and a privacy policy, showing GDPR awareness. Overall, the site presents a trustworthy and credible business presence with room for technical and security improvements.
Qwadravorum.com
Healthcare
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Qwadra is a medium-sized company specializing in global CAD/CAM digital solutions for orthopedics and podiatry. Formed by the merger of Rodin4D, Techmed3D, and Vorum, it offers a comprehensive portfolio including 3D scanning, software, milling machines, 3D printers, and custom app development. The company targets healthcare professionals and manufacturers seeking advanced digital workflows and operates in over 85 countries, positioning itself as a market leader. Technically, the website is built on WordPress with modern libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is good with HTTPS and form protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact is primarily via web forms, with no direct email or phone numbers published. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.
Top Clean Packagingtopcleanpackaging.com
Healthcare · France
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Top Clean Packaging is a well-established multinational company specializing in the development and manufacturing of medical and pharmaceutical devices, with a strong presence in France, Italy, China, and India. The company offers a broad range of services including thermoforming, plastic injection molding, liquid silicone rubber injection, sterile packaging, and assembly. Their website reflects a professional and consistent brand image targeting healthcare and pharmaceutical sectors. Technically, the website employs modern analytics tools such as Matomo and Google Analytics, and uses responsive design techniques to ensure good user experience across devices. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear credible and professional. Security-wise, the site uses HTTPS and has a cookie consent mechanism but lacks visible security headers and explicit security policies, indicating room for improvement in security posture. Overall, the website scores well in content quality and business credibility but should address WHOIS transparency and enhance security practices to improve trust and compliance.
Quay Partnersquaypartners.com
Finance · United Kingdom
57Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Quay Partners is a specialized hedge fund solutions provider operating internationally with offices in London, Singapore, and Lithuania. Their business model focuses on offering a Platform-as-a-Service for investment management, targeting hedge fund managers and financial institutions. The website presents a professional image with clear navigation and relevant content describing their services and market positioning. Technically, the site is built on WordPress with modern libraries and plugins for SEO and security, including Wordfence and Yoast SEO. The site is mobile optimized and uses HTTPS with anonymized Google Analytics tracking, reflecting a moderate to good digital maturity. Security posture is solid with active security plugins and cookie consent mechanisms, though explicit HTTP security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts trust. Overall, the website is functional, professional, and compliant with GDPR, but could improve in security policy transparency and domain legitimacy clarity.
Secretariatsecretariat-intl.com
Other
57Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Secretariat is a globally recognized expert consulting firm specializing in litigation consulting, economic advisory, and expert witness testimony. Established in 2008, the company serves high-stakes legal, risk, and regulatory matters worldwide, positioning itself as a top-ranked firm in its industry. Their services span multiple sectors including construction, energy, financial services, healthcare, and technology, catering primarily to law firms and corporate clients requiring expert analysis and testimony. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and analytics. The site is well-optimized for SEO, mobile responsive, and incorporates structured data for improved search visibility. Hosting and domain registration are consistent with the business profile, with GoDaddy as the registrar and no privacy protection, indicating transparency. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies or incident response contacts. Cookie consent is implemented, supporting GDPR compliance. No critical vulnerabilities or suspicious elements were detected, though improvements in security headers and vulnerability disclosure practices are recommended. Overall, Secretariat presents a professional, trustworthy online presence with strong business credibility and technical maturity. Strategic enhancements in security policy transparency and DNS security would further strengthen their posture.
Dopharmadopharma.com
Healthcare · Netherlands
68Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Dopharma is a well-established company dedicated to the livestock healthcare sector, providing veterinary pharmaceuticals, autogenous vaccines, diagnostics, and comprehensive service and support. The company positions itself as a contributor to healthy livestock and sustainable farming practices, targeting livestock farmers and veterinary professionals globally. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the site is built on WordPress with WooCommerce and uses modern libraries and plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data for the domain is a notable gap, impacting trust verification. Overall, the site is professional and trustworthy, with room for enhanced transparency in security and incident response.
Travixtravix.com
Transportation · Netherlands
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Travix is a global online travel agency headquartered in Amsterdam, Netherlands, operating multiple brands across 17 countries with a focus on flight bookings and related travel products. The company is part of the Trip.com Group, enhancing its global capabilities. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various plugins for enhanced user experience. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is good with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the site is credible but would benefit from improved privacy compliance and security disclosures.
Cotenders UABcotenders.com
Technology · Lithuania
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Cotenders UAB is a Lithuanian technology company specializing in innovative IT products and electronic services tailored for the construction sector. With over 10 years of market presence and more than 10,000 users, Cotenders holds a strong position in providing electronic construction work journals and related digital tools. The company emphasizes direct benefits to all construction process participants including builders, architects, contractors, and engineers. Their business model focuses on IT product development, administration, and consultancy services within the construction industry. The website content is professionally presented in Lithuanian with an English option, targeting construction professionals and companies in Lithuania.
TripCreatortripcreator.com
Technology
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
TripCreator is a B2B travel management software platform targeting travel agencies, destination management companies (DMCs), and tour operators. It offers an all-in-one itinerary builder, booking system, and automation tools to simplify travel business operations. The website presents a professional and consistent brand image with clear navigation and relevant content showcasing product plans, features, and customer cases. Technically, the site uses modern JavaScript libraries, service workers for PWA functionality, and integrates multiple marketing and analytics tools such as Google Tag Manager, Usercentrics CMP, and VWO. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS registration data reduces domain trustworthiness, though the website content and external partner domains support legitimacy. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.
- ŽŽurnalas L’Officiel Lithuania nebeleidžiamas.
lofficiel.lt
Media · Lithuania
60Medium
NIS2 2 · GDPR 15
NIS2 2 · GDPR 15
The website lofficiel.lt currently serves as a placeholder page indicating that the L’Officiel Lithuania magazine is no longer published. The content is minimal, with no active business or service information presented. There are no metadata tags, structured data, or external links, and no contact or privacy information is provided. The lack of WHOIS data due to query limits further limits the ability to verify domain ownership or legitimacy. Technically, the site is very basic, with no detected scripts, frameworks, or CMS, and no security headers or HTTPS information available. This suggests a deprecated or abandoned digital presence. From a security perspective, the site lacks essential protections such as HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. The absence of contact information and business details reduces trust and credibility. Overall, the security posture is weak, and the domain legitimacy is questionable due to missing WHOIS data. Given these factors, the website poses a low risk but also offers minimal value or engagement. Strategic recommendations include securing the domain with HTTPS, adding privacy and cookie policies, providing clear contact and business information, and improving technical and content quality to restore trust and compliance.
Government · United States
58Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The San Gabriel Basin Water Quality Authority (WQA) is a government entity dedicated to protecting groundwater quality in the San Gabriel Valley, California. The organization coordinates groundwater cleanup efforts, manages treatment plants, and provides governance and public resources to ensure safe water supplies for local communities. The website reflects a well-established authority with a clear mission and goals, supported by a long-registered domain and consistent branding. Technically, the site is built on WordPress with a modern theme and plugins, offering good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with cookie policies present but no explicit privacy or terms of service pages found. Overall, the site is professional, trustworthy, and serves its governmental function effectively.
- UAB „Baltijos pervežimai“ / Baltic Shipping
baltic-shipping.lt
Transportation · Lithuania
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
UAB „Baltijos pervežimai“ (Baltic Shipping) is a medium-sized Lithuanian company founded in 1997, specializing in freight forwarding, ship agency, and multimodal container transport services primarily in the Baltic and CIS regions. The company positions itself as a leading logistics provider with ISO 9001:2015 certification and multiple industry memberships, indicating a strong market presence and commitment to quality. The website is professionally designed with good navigation and mobile optimization, leveraging technologies such as jQuery, Bootstrap, and Google Analytics for user tracking and performance. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of visible security headers and use of an outdated jQuery version suggest areas for improvement. The lack of WHOIS data limits domain trust analysis, but the presence of certifications and partner affiliations supports legitimacy. Overall, the site demonstrates a solid business and technical foundation with room to enhance security and transparency.
- UAB Transtira
transtira.lt
Transportation · Lithuania
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
UAB Transtira is a well-established Lithuanian logistics and transport company operating since 1993, providing a wide range of services including cargo transport across Europe and worldwide, warehousing, customs services, and vehicle servicing. The company targets businesses requiring reliable logistics solutions in the Baltic region and beyond. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses standard web technologies including jQuery and Google Analytics, with HTTPS enforced and cookie consent implemented, indicating a moderate level of digital maturity. Security posture is generally good with secure forms and SSL, but lacks some advanced security headers and uses an outdated JavaScript library, which could be improved. Privacy compliance is well addressed with a dedicated privacy policy and cookie banner. Overall, the website is trustworthy and professional, supporting the company's market position as a large regional logistics provider.
- JRD Group a.s.
jrd.cz
Real Estate · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
JRD Group a.s. is a well-established Czech company specializing in sustainable real estate development, energy projects, waste processing technologies, and real estate investment management. With over 20 years of market presence, it positions itself as a leader in healthy housing and environmentally conscious development. The company targets environmentally aware individuals and institutional investors seeking low-energy and sustainable property solutions. The website reflects a modern, professional digital presence built on Next.js and React, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high based on content and contact transparency.