Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,169001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,051–9,100 of 99,069
Fundacja NUTRICIAfundacjanutricia.pl
Non-profit · Poland
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Fundacja NUTRICIA is a Polish non-profit foundation focused on nutrition research, education, and social change. Established in 2010, it operates nationally with multiple scientific partners and organizes educational programs and grant projects. The website reflects a professional and consistent brand presence targeting Polish-speaking audiences interested in nutrition and health. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google Analytics and Tag Manager for user tracking, and is hosted by cyber_Folks S.A. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and CSRF tokens, though additional security headers and policies could enhance protection. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, with no signs of suspicious activity or content.
BoboVitabobovita.pl
Retail · Poland
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BoboVita is a well-established brand specializing in infant and young children's nutrition products in Poland. The website offers a comprehensive range of products, educational content, and expert support aimed at parents and caregivers. The brand maintains a strong market position with a focus on quality and developmental appropriateness of its offerings. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates analytics and marketing tools like Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional digital presence for the BoboVita brand.
Zadbaj o przyszłość już dziś | BebiProgrambebiprogram.pl
Retail · Poland
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BebiProgram is a Polish retail-focused website dedicated to infant nutrition and parenting support, prominently featuring Bebilon infant formula products. The site offers comprehensive resources for parents and expecting mothers, including pregnancy tools, expert advice, and product information. Technically, the website is built using modern frameworks such as Next.js and Material-UI, hosted on AWS infrastructure, and integrates tracking tools like Google Tag Manager and Ipresso. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. The absence of WHOIS data limits full trust evaluation, but the professional presentation and content quality suggest a legitimate commercial entity. Overall, the site is well-structured, mobile-optimized, and provides valuable content to its target audience.
Nutriciabebiklub.pl
Healthcare · Poland
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BebiKlub is a Polish-language website operated by Nutricia, focusing on infant and child nutrition, development, and parenting support. The site offers educational content, product information, and community engagement features such as contests and expert advice. It targets parents and caregivers of infants and young children, positioning itself as a trusted resource in the healthcare and nutrition sector in Poland. The website is professionally designed with consistent branding and good content quality, supporting Nutricia's market presence in infant nutrition. Technically, the site uses modern frameworks like Next.js and React, hosted on AWS infrastructure, and integrates analytics and marketing tools such as Google Tag Manager and ipresso monitoring. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are recommended for compliance and trust. WHOIS data is not publicly available due to .pl domain registry policies, but the website content and structured data indicate a legitimate business. Overall, the site is safe, family-friendly, and well-positioned for its audience, though improvements in privacy compliance and security headers would enhance trust and regulatory adherence.
cyber_Folks S.A.akademianutricia.pl
Healthcare · Poland
72Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Akademia Nutricia is a Polish healthcare educational platform specializing in nutrition and medical knowledge dissemination. The website offers webinars, animations, product catalogs, and downloadable materials targeted primarily at healthcare professionals. The platform is positioned as a niche provider in the healthcare education sector in Poland, with a medium-sized business presence established since 2015. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes, and is hosted by cyber_Folks S.A. The site is mobile-optimized with a good user experience and consistent branding. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. No privacy policy or terms of service were detected, which is a compliance gap. Overall, the website is functional, professional, and safe for general audiences but would benefit from improved privacy and security practices.
Czech Specialsczechspecials.cz
Hospitality · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
CzechSpecials.cz is a professionally designed website dedicated to promoting and certifying Czech gastronomy, including restaurants and confectioneries. The project aims to showcase authentic Czech culinary traditions with high quality and respect for both tradition and modern trends. The website serves as a platform for certified entities, recipes, culinary news, and events, targeting both domestic and international guests interested in Czech cuisine. Technically, the site uses modern web technologies including Kentico CMS, Bootstrap, jQuery, and integrates analytics via Google Tag Manager and Microsoft Application Insights. The site is mobile-optimized and provides a rich user experience with clear navigation and professional content. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable, which limits domain trust assessment, but the website's professional presentation suggests legitimacy. Overall, the site is safe, trustworthy, and focused on hospitality and culinary certification.
Radio Dechovkaradiodechovka.cz
Media · Czech Republic
66Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Radio Dechovka is a specialized private radio station focusing on brass band, folk, and traditional music from Czechia and Slovakia. It serves a niche audience interested in regional and folk music genres, offering interactive features such as song requests via phone and email. The website is built on WordPress using the Astra theme and incorporates GDPR compliance tools including a cookie consent banner. Social media integration is present with active Facebook, Instagram, and Twitter accounts. However, the absence of a privacy policy page and WHOIS data limits full trust assessment. Technically, the site is well-structured, mobile-optimized, and uses modern web technologies, though security headers are missing.
- NNa kole
ostravounakole.cz
Transportation · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Na kole is a Czech language niche blog focused on urban cycling, sports, and healthy lifestyle topics. The website provides articles, event information, cycling route maps, and a sports catalog, targeting cycling enthusiasts and health-conscious individuals primarily in the Czech Republic. The site is built on WordPress with common plugins for SEO and forms, indicating a moderate level of digital maturity. The content is well-structured, regularly updated, and professionally presented, supporting good user experience and SEO. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The absence of public WHOIS data suggests domain privacy protection, common for small content sites. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security best practices.
- CCyklojizdy.cz
cyklojizdy.cz
Transportation · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Cyklojizdy.cz is a community-focused website dedicated to organizing and promoting cycling rides, primarily in Prague and other Czech cities. It serves as a platform for cycling enthusiasts and urban activists to share event information, galleries, and rules related to critical mass style rides. The site is small-scale and non-commercial, supported by local cycling organizations and partners. Technically, the website runs on WordPress with basic modern web technologies and moderate performance. It lacks advanced mobile optimization and accessibility features but provides clear navigation and relevant content for its audience. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies, indicating compliance gaps. The absence of WHOIS data reduces domain trustworthiness, though the website content and external partner links suggest legitimacy. Overall, the site is safe for general audiences and serves a niche community effectively.
Zahraniční Casinapodbrdskenoviny.cz
Other · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.podbrdskenoviny.cz operates as a Czech-language affiliate marketing portal specializing in reviews and comparisons of foreign online casinos for Czech players. It offers detailed content on casino bonuses, payment methods, and safety considerations, targeting adult Czech gamblers interested in international gambling platforms. The site is professionally designed using WordPress with SEO optimizations via Yoast and integrates Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, though explicit security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust verification, but the site content and structure indicate a legitimate affiliate business model. Overall, the site provides valuable information for its niche audience with moderate technical maturity and compliance.
Obec Panenské Břežanypanenskebrezany.cz
Government · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.panenskebrezany.cz serves as the official online presence for the municipality of Panenské Břežany in the Czech Republic. It provides residents and visitors with comprehensive information about local government services, news, events, waste collection schedules, and contact details for municipal offices. The site targets local citizens and stakeholders interested in community updates and administrative matters. The business model is that of a government information portal, focusing on transparency and public service. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper, and Leaflet for mapping. It is built on a CMS platform likely provided by Galileo Corporation, as indicated by footer references. The site is mobile optimized, accessible, and SEO-friendly, with a good user experience and clear navigation. Cookie consent mechanisms and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for trust and legitimacy, though the official nature of the content mitigates this somewhat. Overall, the website is a well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include enhancing security headers, publishing security policies, and resolving WHOIS data visibility to strengthen trustworthiness and compliance.
- Obec Kozomín
kozomin.cz
Government · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Obec Kozomín operates as the official municipal government website for the Kozomín municipality in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, contact details, office hours, and community news. The site targets local citizens and stakeholders interested in municipal affairs. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Swiper.js, and Leaflet for maps, built on the Galileo CMS platform. It is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly detailed. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
- Obec Vodochody
vodochody.cz
Government · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Obec Vodochody operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive local government information including news, events, official documents, contact details, and community services. It targets residents and visitors seeking municipal updates and services. The website integrates modern web technologies such as jQuery, Bootstrap, and Swiper.js to deliver a responsive and user-friendly experience. It also promotes a mobile app and virtual tours to enhance community engagement. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers or explicit security policies. WHOIS data is unavailable, which limits domain trust verification, but the official content and accessibility certification support legitimacy. Overall, the site is well-structured, accessible, and trustworthy for its intended audience.
- CCHALUPA GGS s.r.o.
chalupaggs.cz
Other · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
CHALUPA GGS s.r.o. is a Czech company specializing in engineering geology, hydrogeology, and geophysics services, operating primarily in Prague and the Central Bohemian region since 1990. The company targets businesses and entities requiring geological and environmental consulting services, positioning itself as an established local service provider with a solid customer base and references available upon request. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the website is built on the MySUITU CMS platform, utilizing jQuery 1.11.0, ResponsiveSlides.js, and Google Analytics for tracking. The site is mobile-optimized with a cookie consent mechanism in place, although it uses an older JavaScript library version which may pose security risks. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site enforces HTTPS and implements cookie consent with granular user control. However, it lacks important security headers and a privacy policy, which are critical for GDPR compliance and overall security posture. No vulnerabilities or exposed sensitive data were detected, but updating libraries and adding security headers are recommended. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.
Colloredo-Mannsfeld spol. s r.o.lesyzbiroh.cz
Other · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Colloredo-Mannsfeld spol. s r.o. is a medium-sized forestry and fishery management company based in the Czech Republic, with a long historical background linked to aristocratic roots. The company manages extensive forest areas and fishponds, focusing on sustainable forestry practices and nature conservation. Their website provides detailed information about their services, history, and ongoing projects, targeting a general audience interested in forestry and environmental stewardship. Technically, the website is built on WordPress using popular plugins like Yoast SEO and WPBakery Page Builder, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal policies. Overall, the site is professional and trustworthy but could improve privacy compliance and explicit contact information.
- 数数美科技
ishumei.com
Technology · China
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
数美科技是一家专注于基于人工智能技术的在线业务风控和内容安全解决方案提供商,成立于2013年,市场占有率领先,服务全球客户。其产品矩阵涵盖智能内容检测、业务风控、AIGC风控等多个领域,支持多行业应用。技术架构现代,采用Next.js和Ant Design,托管于阿里云,性能优良且移动端优化出色。安全方面,网站启用HTTPS,未发现明显漏洞,但缺少部分安全头和隐私合规机制。整体业务信息透明,拥有多项权威认证和客户推荐,显示出较高的可信度和专业性。
MOONTON Gamesmoonton.com
Technology
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MOONTON Games is an established international mobile gaming company specializing in game development, publishing, and esports. The company operates globally with offices in multiple Asian countries and has a strong presence in the mobile esports ecosystem, particularly with its flagship title Mobile Legends: Bang Bang. The website reflects a professional and consistent brand image targeting gamers worldwide and esports enthusiasts. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. Overall, the site is safe, accessible, and trustworthy, though WHOIS data for the subdomain is unavailable, which is typical for subdomains but limits full domain trust verification.
Other
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.circus-trap.org is currently inaccessible due to a Cloudflare Turnstile human verification challenge page that blocks direct content access. No meaningful business or contact information is available on the page, and the WHOIS data query returned a malformed response with no registrar, creation, or registrant details. This lack of accessible information severely limits the ability to assess the business, technical infrastructure, or security posture of the site. The presence of Cloudflare's security challenge indicates an intent to protect the site from automated access or attacks but also restricts external analysis. Overall, the site appears to be in a pre-access security check state with no visible content or policies.
- MMondial Relay
mondialrelay.com
Transportation · France
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Mondial Relay is a well-established parcel delivery service provider operating primarily in France and several other European countries. The company offers a dense network of Points Relais® and lockers for parcel pickup and drop-off, targeting both individual consumers and e-commerce merchants. The website reflects a professional and consistent brand presence with multilingual support and clear business focus on transportation and logistics services. Technically, the site uses Cloudflare DNS and includes Dynatrace monitoring scripts, indicating attention to performance and user experience. However, the absence of DNSSEC and security headers suggests room for improvement in security hardening. The website lacks visible privacy, cookie, and terms of service policies, which impacts privacy compliance scores. No contact emails or phone numbers are explicitly provided in the homepage HTML, limiting direct user contact options. Overall, the domain registration is consistent with the business claims, showing a long history and stable registration status. The site is accessible without WAF or security challenges, and content is safe for general audiences.
Le Saint Networkreseau-le-saint.com
Retail · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Le Saint Network operates as a distributor specializing in fresh products including fruits, vegetables, seafood, flowers, fresh meat, hygiene products, and wine. The company maintains a network of brands and purchasing offices across France, targeting B2B clients in retail and food distribution sectors. The website reflects a professional and consistent brand presence with clear navigation and relevant content. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and standard analytics tools such as Google Analytics. Security posture is solid with HTTPS enforced and anti-spam measures in place, though explicit security policies and incident response information are absent. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, which slightly impacts trustworthiness. Overall, the website is functional, professional, and safe, but could improve transparency and compliance documentation.
- Brets
brets.fr
Retail · France
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Brets is a French family-owned company specializing in the production and retail of potato chips, emphasizing Breton identity and local ingredients. Established since 1995, it operates a professional website showcasing its products, company history, values, and recruitment opportunities. The company maintains a consistent brand image and targets a general audience interested in quality snack foods. Technically, the website is built on WordPress using the Enfold theme and integrates modern web technologies including Google Analytics and Tag Manager for analytics, alongside a cookie consent solution to ensure GDPR compliance. Security measures such as HTTPS and security headers are properly implemented, though no explicit security policy or incident response information is published. Overall, the website presents a professional and trustworthy digital presence with moderate to good performance and accessibility.
Poule et Toquepoule-et-toque.fr
Hospitality · France
69Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Poule et Toque is a French company specializing in supplying poultry products to the professional foodservice and catering sectors. Their website presents a well-structured, professionally designed platform targeting restaurateurs and catering professionals with segmented product lines such as 'Prêt à Cuire', 'Prêt à réchauffer', and 'Prêt à Servir'. The company positions itself as an expert in French poultry, offering solutions tailored to various foodservice needs. The site includes rich content, social media integration, and a dedicated subdomain for a poultry competition, indicating active engagement in their industry. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Matomo for analytics, showing a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and compliance with GDPR suggest legitimacy. The site is accessible with no blocking or WAF challenges detected.
D'aucydaucy.fr
Retail · France
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
D'aucy is a well-established French cooperative brand specializing in vegetable products including canned, frozen, and prepared foods. The website reflects a mature digital presence with a focus on sustainability, cooperative values, and consumer engagement through recipes and educational content. Technically, the site uses WordPress with modern JavaScript libraries and analytics tools such as Matomo and Microsoft Clarity, ensuring a good user experience and data-driven insights. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and parent company association. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations.
EDF Renewables North Americaedf-renewables.com
Energy · United States
56Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
EDF Renewables North America operates as a market-leading independent power producer and service provider specializing in renewable energy solutions including wind (onshore and offshore), solar photovoltaic, energy storage, and electric vehicle charging across North America. The company positions itself as a sustainable energy partner, targeting businesses and communities seeking clean energy solutions. Their website reflects a mature digital presence with comprehensive content, multi-language support, and active engagement through social media channels. The business is a subsidiary of the EDF Group, a major global energy player, reinforcing its market credibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Yoast SEO, ensuring good SEO and user experience. The site is mobile-optimized and accessible, with a moderate performance profile. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, explicit security headers and incident response information are absent, representing areas for improvement. The WHOIS data for the domain is unavailable, indicating possible privacy protection or proxy registration. While this reduces transparency, the website's branding, content quality, and external affiliations support its legitimacy. No direct company contact emails or phone numbers are published, with contact facilitated via web forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the website demonstrates a professional and trustworthy digital presence aligned with its business objectives in the renewable energy sector. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving direct contact information to strengthen trust and compliance.
- DDesign by Think
designbythink.co.za
Technology · South Africa
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Design by Think is a South African technology/design company with a domain registered since 2016. The website currently serves a security challenge page powered by BitNinja, blocking direct access to content. The site uses outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are known to have security vulnerabilities. No privacy, cookie, or terms of service policies are present, and no contact information is visible on the page. The domain registration data is consistent and legitimate, matching the business claims and country. Overall, the website's digital maturity is low due to outdated technology and minimal accessible content.
- HHugeDomains
crebe.com
E-commerce · United States
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HugeDomains operates as a specialized e-commerce platform focused on selling premium domain names such as Crebe.com. Established since 2005, it offers customers flexible payment plans, a 30-day money back guarantee, and secure purchasing options including PayPal and Escrow.com. The website is professionally designed with clear navigation, mobile responsiveness, and customer testimonials that enhance trust and credibility. Technically, the site employs modern technologies including jQuery, Google Analytics, and Cloudflare Bot Management, ensuring a stable and secure user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. Privacy compliance is well addressed with comprehensive policies and GDPR-aligned consent banners. Overall, the platform presents a trustworthy and user-friendly domain marketplace with solid business and technical foundations.
Other · Austria
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Österreichischer Golf Verband is the national governing body for golf in Austria, providing membership services, event organization, and golf-related information to players and clubs. The website is professionally designed using the Neos CMS and Flow PHP framework, with modern technologies such as jQuery and Google Tag Manager integrated. The site demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data. Cookie consent is managed via OneTrust, indicating GDPR compliance. Overall, the website is trustworthy and serves its target audience effectively.
- Nncm - Net Communication Management GmbH
checkeffect.at
Technology · Austria
56Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website represents ncm - Net Communication Management GmbH, a small Austrian technology company specializing in GDPR-compliant web analytics through their proprietary tool CheckEffect. The company has a strong market position in the Alpine region, offering privacy-focused analytics as an alternative to Google Analytics. The technical infrastructure is modern, leveraging Contao CMS, Bootstrap, and JavaScript libraries, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive business reputation.
- Zukunft gestalten mit TGW Future Wings | futurewings
futurewings.at
Other
53Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
TGW Future Wings is a newly established initiative or organization focused on shaping the future, likely emphasizing innovation or sustainability, as indicated by the website title and content language. The domain was registered in early 2024 and uses modern web technologies including Nuxt.js and Storyblok CMS, hosted via Cloudflare. The website design is professional and mobile-optimized, providing a good user experience, though content depth is basic and lacks detailed business descriptions or contact information. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present. Tracking is minimal and privacy-conscious, using Ackee analytics. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance documentation.
- StaWEBnice - tvorba webových stránek a eshopů
stawebnice.com
Technology · Czech Republic
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
StaWEBnice is a small Czech technology service provider specializing in web development, e-commerce solutions, SEO, copywriting, and digital marketing. The company targets small business owners, entrepreneurs, and bloggers primarily in the Czech Republic, offering affordable and professional web and e-shop creation services. The website is well-structured, professionally designed, and provides comprehensive information about services, team, and client references. Technically, the site is built on Joomla CMS with modern frameworks and libraries, including Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.
- JJUDO SK Praha Sever
skps.cz
Other · Czech Republic
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
JUDO SK Praha Sever is a local sports club focused on promoting and teaching judo in Prague. The website serves as a community portal providing information about training programs and events, targeting judo enthusiasts in the region. The site is professionally designed with clear navigation and mobile responsiveness, reflecting a small but active community organization. However, the absence of WHOIS registration data and lack of privacy or cookie policies indicate gaps in transparency and compliance. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS, resulting in moderate performance and limited technical sophistication. Security posture is weak due to missing HTTPS verification and security headers, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional and trustworthy for its intended audience but requires improvements in security and compliance to enhance credibility and protect user data.
Provident Promotionsprovidentpro.com
Other · United States
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Provident Promotions is a small, regionally focused creative agency based in Hastings, Nebraska, specializing in digital media marketing services including website design, logo creation, photography, video production, and SEO. The company targets local businesses and non-profits seeking professional marketing tools to build and grow their brands. Their website demonstrates a good level of technical maturity, leveraging WordPress CMS with modern plugins and libraries to deliver a responsive and SEO-optimized user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, which could impact trustworthiness despite the professional presentation and client testimonials. Overall, the website is well-designed and functional but would benefit from enhanced privacy compliance and clearer domain legitimacy.
islatraceyour.events
Other · United Kingdom
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
TRACE by isla is a specialized SaaS platform focused on providing credible, real-time carbon measurement and reduction insights for the event industry. The platform targets event planners, business owners, and sustainability officers, offering tools to measure carbon footprints across live, hybrid, and digital events. TRACE positions itself as a niche leader in event sustainability, supported by strong branding, client testimonials, and case studies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Hotjar. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and uses reCAPTCHA Enterprise for form protection but lacks some recommended security headers and a formal security policy. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the domain WHOIS data is privacy-protected but consistent with the business's UK-based identity. The website demonstrates a high level of professionalism and trustworthiness with no critical security issues detected.
- Two Stories - Brand Consultancy & Design Studio
twostories.studio
Other · United Kingdom
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Two Stories is an independent brand consultancy and design studio based in the North West of England. They provide a range of services including brand consultancy, design, digital web development, and brand communications. The company positions itself as a purpose-led, award-winning agency focused on creating meaningful and memorable brands that connect with audiences. Their website is professionally designed, mobile-optimized, and includes comprehensive content about their services, portfolio, team, and client testimonials. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Analytics integration, ensuring good SEO and analytics capabilities. Security posture is strong with HTTPS enforced and a cookie consent mechanism in place, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website reflects a credible and professional business with a strong digital presence.
Union Internationale de Pentathlon Moderne (UIPM)uipmworld.org
Other
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Union Internationale de Pentathlon Moderne (UIPM) website serves as the official digital presence of the international governing body for Modern Pentathlon and related multisport disciplines. It provides comprehensive information on events, athlete rankings, education programs, and governance. The site targets athletes, national federations, and fans globally, positioning itself as a key authority in the sport. Technically, the website is built on Drupal 7 with a mature tech stack including jQuery, Google Analytics, and Matomo for analytics, and is well-optimized for mobile and SEO. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers could be improved. The WHOIS data is incomplete, which slightly impacts domain trustworthiness, but the website content and structure indicate a legitimate and professional organization. Overall, the site demonstrates a high level of digital maturity and business credibility.
Městská část Praha 6praha6.cz
Government · Czech Republic
74Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Městská část Praha 6 operates as the official municipal government website for the Prague 6 district in the Czech Republic. It provides residents and visitors with comprehensive information including news, events, traffic restrictions, public services, and official documents. The website is well-positioned as a trusted local government resource with a clear focus on community engagement and transparency. The site targets local citizens, public officials, and visitors seeking district-related information and services. Technically, the website employs modern web technologies such as Nuxt.js for server-side rendering, jQuery, Axios, and Litepicker for UI components, alongside Google Analytics and Tag Manager for tracking. The site is hosted by a reputable registrar and shows good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response contacts are not published, and some recommended security headers are missing. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture but with room for improvement. Overall, the website demonstrates a solid balance of content quality, technical implementation, and privacy compliance, supporting its role as a credible government portal. Strategic enhancements in security headers and transparency policies would further strengthen its trustworthiness and resilience.
Growgrow.me
Technology
59Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Grow is a technology-driven platform focused on enabling readers to curate and save content from their favorite creators for free. The platform emphasizes ease of use with a single login for content bookmarking and subscription, targeting content consumers who value efficient content management. Affiliated with Mediavine, Grow benefits from established market presence and resources. Technically, the website is built on WordPress with modern JavaScript libraries and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and consent-based tracking, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, privacy-conscious, and trustworthy, with no signs of malicious activity or content safety concerns.
Noibunoibu.com
E-commerce
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Noibu is a SaaS platform specializing in ecommerce monitoring and experience analytics, designed to help ecommerce teams identify hidden friction points and conversion blockers that impact revenue. The company positions itself as a key player in ecommerce analytics, offering services such as issue detection, session capture, performance monitoring, and page analysis. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools including HubSpot, Google Tag Manager, and Termly for cookie consent. However, the absence of WHOIS registration data and lack of explicit privacy and security policy pages slightly diminish the overall trustworthiness. Security posture is solid with HTTPS and cookie consent but could be improved with additional security headers and published incident response information.
Shell Privatshellservice.dk
Energy · Denmark
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Shellservice.dk is a professionally maintained website representing Shell Privat's services in Denmark, focusing on fuel supply, electric vehicle charging, and car wash services. The site targets private vehicle owners seeking high-quality energy and transportation services. The business is well positioned in the Danish market with a clear brand presence and consistent messaging. Technically, the site is built on WordPress with modern SEO and marketing tools, including Google Tag Manager and Cookiebot for consent management. Security posture is good with HTTPS and bot protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the analyzed content. Overall, the site is trustworthy, professional, and safe for general audiences.
hockeydata GmbHhockeydata.net
Technology · Austria
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
hockeydata GmbH is a specialized Austrian company providing software solutions and professional services focused on sports statistics, association management, and live graphics for sports broadcasts. The company holds a leading position in Austria's sports software market, serving clubs, leagues, broadcasters, and fans with tailored products and services. Their offerings include sport statistics software, multimedia display systems, and operational support for sports events and TV productions. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder, jQuery, and Google APIs. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is unavailable or indicates the domain may not be registered under the queried name, which raises concerns about domain legitimacy. However, the website content and business presence suggest an operational and credible entity. No signs of WAF or content blocking were detected, allowing full content analysis. Overall, hockeydata GmbH presents a trustworthy and professional online presence with room for improvement in privacy compliance and security policy transparency. Verification of domain registration is recommended to strengthen trust and legitimacy.
- Leonardo Demartino
demartino.ar
Technology · Argentina
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Leonardo Demartino's website serves as a professional portfolio highlighting his expertise as a lead developer in software, game development, and multimedia applications. The site showcases a variety of projects across multiple platforms including iOS, Android, Steam, and consoles, positioning him as a niche player in the indie game and multimedia software market. The business model is primarily personal branding and project promotion, targeting developers, gamers, and potential collaborators. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and Google Fonts, ensuring good mobile optimization and user experience. The site is well-structured with clear navigation and professional content presentation. However, no CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. No forms or analytics scripts reduce the attack surface and tracking footprint, but the absence of incident response or vulnerability disclosure information indicates room for improvement in security maturity. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user confidence.
- Le Marathon Vert
lemarathonvert.org
Other · France
63Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Le Marathon Vert is an established regional marathon event organizer based in Rennes, Brittany, France. The website serves as the official portal for marathon-related information including race details, registration links, results, and sustainability initiatives. The organization targets runners and sports enthusiasts, providing a comprehensive digital presence with social media integration and volunteer coordination. The business model centers on event management and community engagement with a focus on environmental responsibility. Technically, the website employs a custom CMS and integrates modern tracking and analytics tools such as Google Analytics and Google Tag Manager with IP anonymization. Cookie consent is managed via tarteaucitron.js, reflecting a commitment to privacy compliance, although no explicit privacy policy page was found. The site is mobile-optimized and offers good navigation and content quality, though some security best practices like security headers and vulnerability disclosure policies are absent. From a security perspective, the site uses HTTPS and anonymizes user IPs in analytics, but lacks visible security headers and formal incident response contacts. WHOIS data is unavailable or protected, which is common for event sites, and does not raise immediate concerns. Overall, the site demonstrates a moderate to good security posture with room for improvement in transparency and policy disclosures. The overall risk is low, with recommendations to enhance security headers, publish privacy and terms policies, and establish vulnerability disclosure mechanisms to strengthen trust and compliance. The website is professional, trustworthy, and well-positioned within its niche, serving its audience effectively.
- UUPS
ups.com
Transportation · United States
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
UPS is a globally recognized leader in shipping and logistics, providing comprehensive package tracking, shipping, billing, and supply chain solutions. The website reflects UPS's enterprise-level operations with a focus on business and individual customers seeking reliable global shipping services. The site is well-branded, professionally designed, and optimized for performance and accessibility. Technically, it leverages modern web technologies including Adobe Experience Manager, Akamai CDN, and advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data suggests privacy protection, which is justified for a major global brand. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
INTRASY s.r.o.intrasy.com
Transportation · Slovakia
66Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
INTRASY s.r.o. is a Slovak-based company specializing in telematics solutions, including GPS vehicle monitoring, telematics hardware distribution, and API integrations for fleet management. The company targets businesses with vehicle fleets, logistics providers, and transport services, offering both hardware and software solutions to optimize fleet operations. Established in 2020, INTRASY positions itself as a trusted regional provider with a consistent brand and a clear focus on transportation technology. The website reflects a professional and user-friendly design with comprehensive service descriptions and active customer engagement channels.
INTRASY s.r.o.intrasy.sk
Transportation · Slovakia
66Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
INTRASY s.r.o. operates a professional website focused on vehicle telematics and fleet management solutions, primarily serving businesses in Slovakia. The company offers GPS monitoring, API integrations, and telematics hardware sales, positioning itself as a trusted regional provider with partnerships including Bolt, UPS, and SPS. The website is built on WordPress with WooCommerce, providing e-commerce capabilities and a content-rich blog to engage its target audience. Technically, the site employs modern web technologies, is mobile-optimized, and uses Cloudflare DNS with DNSSEC for enhanced security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates good business credibility and technical maturity with room for improvement in formal security documentation and accessibility. The domain registration is consistent and legitimate, supporting the company's trustworthiness.
- Skybound
skybound.com
Media
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Skybound is a well-established entertainment company specializing in comics, games, TV, movies, and merchandise. The website showcases popular intellectual properties such as The Walking Dead and Invincible, targeting fans and consumers of entertainment media. The business model includes content creation, licensing, and direct merchandise sales. Technically, the site uses modern frameworks like SvelteKit and integrates advanced analytics and marketing tools such as Google Tag Manager, Amplitude, and Braze. The website is well-designed, mobile-optimized, and provides a professional user experience. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is credible and trustworthy but would benefit from enhanced privacy disclosures and security best practices.
LUXURY111napegames.com
Other · Indonesia
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
LUXURY111 operates an online gambling platform specializing in slot demo games, particularly featuring Pragmatic Play slots with high payout potential. The website targets a mature audience interested in online slot gaming, primarily in Indonesia, as indicated by the contact phone number and language. The business model revolves around providing free slot demos and possibly promoting gambling services. The market position is unclear due to limited business information and lack of transparency. Technically, the site is hosted on Bluehost with Cloudflare DNS, uses multiple analytics and tracking services including Google Tag Manager and Datadog, and is built on the Envato Market platform. The site shows basic mobile optimization and SEO but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is poor with no visible privacy or cookie policies. Business credibility is low due to domain-content mismatch and minimal contact information. Overall, the site presents moderate risk with recommendations to improve transparency, security headers, and privacy compliance.
OpenPandora GmbHdragonbox.de
Retail · Germany
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
DragonBox Shop, operated by OpenPandora GmbH, is a specialized e-commerce retailer based in Germany focusing on retro gaming products, accessories, and mini-PCs. The company targets retro gaming enthusiasts and technology hobbyists, offering a curated selection of products including game controllers, adapters, and repair services. The website demonstrates a consistent brand presence with clear business information and trust signals such as Trusted Shops certification and GDPR-compliant privacy and cookie policies. Technically, the site is built on the PrestaShop 1.7 platform, leveraging modern web technologies including jQuery, Matomo Analytics, and layered sliders for enhanced user experience. The site is mobile-optimized and provides good SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with a well-structured navigation system supporting a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contact details. Security headers are not fully evident, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, DragonBox Shop presents a trustworthy and professional online presence with a solid privacy compliance posture and a niche market focus. Strategic enhancements in security policies and technical security headers would further strengthen its security posture and customer trust.
- The Video Game Fans
cotegamers.com
E-commerce · France
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Video Game Fans operates a specialized e-commerce platform focused on retro gaming books, magazines, and games. Founded in 2014 and based in France, the company targets video game enthusiasts and collectors with a curated catalog. The website is built on PrestaShop, integrating modern payment options such as Amazon Pay and PayPal, and shipping services like Mondial Relay and Boxtal Connect. Multi-language support enhances accessibility for international customers. Technically, the site is moderately performant and mobile-optimized, though there is room for improvement in security headers and SEO. Security posture is solid with HTTPS and bot protection via Google reCAPTCHA, but explicit security policies and vulnerability disclosures are absent. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and stable operation.
DefleMaskdeflemask.com
Technology
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
DefleMask is a specialized software company offering a cross-platform chiptune music tracker that supports multiple retro gaming systems. The product is targeted at musicians, game developers, and enthusiasts of retro game music, providing real-time soundchip emulation and multi-format export capabilities. The company maintains an active community and distributes the app across major platforms including Windows, macOS, Linux, iOS, Android, and Raspberry Pi. The website is professionally designed using WordPress and Elementor, with good content quality and user experience. However, the absence of privacy and cookie policies, as well as missing WHOIS data, slightly detracts from overall trust. Security posture is moderate with HTTPS enabled but lacking explicit security headers and policies.