Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,170001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,951–10,000 of 99,068
Other
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website mysecurecloudhost.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content. The domain is registered since 2018 with a reputable registrar and uses Cloudflare nameservers, indicating some level of infrastructure maturity. However, the lack of accessible content, metadata, or contact information severely limits the ability to assess the business operations, services, or compliance posture. The technical infrastructure appears to leverage Cloudflare for DNS and possibly security, but no further details are available due to content blocking. Security posture cannot be fully evaluated, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site is currently not usable for end users or evaluators, and strategic recommendations focus on resolving access issues and publishing essential compliance and contact information.
Trinititriniti.eu
Other · Estonia
58Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Triniti is a leading Pan-Baltic law firm providing comprehensive legal advisory services across Estonia, Latvia, and Lithuania. With a team of over 90 professionals, the firm targets corporate clients and businesses seeking expert legal counsel in areas such as corporate law, intellectual property, sustainability, and venture capital. The website reflects a strong market position with professional branding and multilingual support, catering to a diverse regional audience. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.
TomoOnetomoone.com
Technology
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
TomoOne operates a modern, free-to-play virtual pet game platform that integrates mini-games, NFT collections, and a merchandise marketplace. The business targets casual gamers and NFT enthusiasts, leveraging blockchain technology and digital collectibles to enhance user engagement and monetization. The website is built on a contemporary React/Next.js framework, ensuring a responsive and SEO-friendly user experience. Hosting and DNS services utilize reputable providers such as GoDaddy and Cloudflare, contributing to reliable uptime and performance. Security posture is adequate with HTTPS enforced and domain registration protections in place; however, improvements such as enabling DNSSEC and implementing security headers are recommended. Privacy compliance is partial, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the site presents a professional and trustworthy front with moderate risk exposure and opportunities for enhanced security and privacy practices.
Qorbi World an Estonia Companyqorbiworld.com
Technology · Estonia
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Qorbi World is a small Estonia-based technology company specializing in a free-to-play multi-game esports ecosystem that integrates blockchain technology and NFTs. Their platform offers unique gaming experiences with crypto rewards using the $QORBI token, exclusive NFT assets such as Qorbs, pets, and skins, and a marketplace for trading these assets. The company targets gamers interested in esports and blockchain gaming, positioning itself as a niche player in the emerging Web3 gaming market. The website is professionally designed with consistent branding and good content quality, supporting their business model and market positioning. Technically, the website leverages modern web technologies including React, Cloudflare hosting, and multiple analytics and marketing tools such as Google Analytics, FullStory, and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain protection flags set, but lacks DNSSEC and important security headers. Privacy compliance is basic, with privacy and terms policies available but no cookie consent mechanism or explicit GDPR compliance indicators. Security-wise, the site shows moderate maturity but could enhance its defenses by enabling DNSSEC, adding security headers, and publishing incident response contacts. No critical vulnerabilities or phishing indicators were detected. Overall, the risk level is moderate with recommendations to improve security and privacy transparency. Strategically, Qorbi World should focus on strengthening its security posture, enhancing privacy compliance especially cookie consent, and improving transparency around contact and incident response. These steps will build greater trust with users and regulators, supporting sustainable growth in the competitive blockchain gaming sector.
- JJump.trade
jump.trade
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Jump.trade is a prominent Web3 gaming ecosystem positioned as Asia's largest platform offering a comprehensive gaming experience including games, digital collectibles, and an extensive NFT marketplace. The platform targets Web3 gamers and NFT enthusiasts, providing services such as game rentals, tournaments, and NFT trading. Technically, the website leverages modern frameworks like Next.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses standard tracking scripts but lacks explicit security headers and incident response information, indicating room for improvement in security posture. Overall, the platform presents moderate risk with good business credibility but would benefit from enhanced privacy compliance and transparency.
- HyperGenGamingLabs
empireofsight.com
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Empire of SEI is an online 2D MMORPG gaming platform operated by HyperGenGamingLabs, targeting gamers interested in immersive multiplayer role-playing experiences. The website offers game client downloads, player rankings, and community engagement through social media and chat platforms. The business model focuses on community building and game distribution within a niche MMORPG market segment. Technically, the site is built on modern web technologies including Next.js and React, providing a responsive and visually appealing user experience. However, performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the active social presence and content quality suggest a legitimate operation. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
- World Challenge Game
worldchallengegame.com
Technology · Spain
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
World Challenge Game is an innovative company offering a hybrid board game integrated with a mobile app and Artificial Intelligence, targeting both traditional board game players and digital gamers worldwide. Their business model includes physical game sales, a free mobile app, NFT avatar collections, and upcoming merchandise with royalty incentives. The company has established partnerships and a registered trademark with EUIPO, supporting its international ambitions. Technically, the website uses modern frameworks like Next.js and React, hosted on AWS infrastructure, with good mobile optimization and basic SEO. Security posture is solid with HTTPS and security headers, though DNSSEC is not enabled and privacy policies are missing, indicating areas for compliance improvement. Overall, the website is professional and trustworthy, with moderate user tracking and advertising practices. Strategic recommendations include adding privacy and terms policies, enabling DNSSEC, and enhancing accessibility and SEO.
Khuga Labskhuga.io
Technology · Iceland
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Khuga Labs operates a digital gaming ecosystem called the Khugaverse, integrating multiplayer brawler games, NFT collections, and a community gamification platform. The company targets gamers and NFT enthusiasts with a niche offering that blends gaming and blockchain technology. The website showcases rich multimedia content and links to Steam for game access, indicating a modern digital presence. Technically, the site uses modern JavaScript frameworks and Cloudflare DNS but lacks DNSSEC and security headers, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing key policies and contact information. Overall, the site is professional and engaging but would benefit from enhanced privacy compliance and security transparency.
Bazaar NFT Marketplacebazaarnft.com
Technology
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bazaar NFT Marketplace is a newly launched digital platform specializing in NFT discovery, creation, and claiming on the Oasys blockchain. Powered by the RaribleX platform, it targets NFT collectors and creators interested in multi-chain digital assets. The marketplace offers a curated experience with collections and exploration features tailored to the Oasys ecosystem. Technically, the site leverages modern JavaScript frameworks such as React and integrates Google Tag Manager for analytics. The domain is recently registered and consistent with the business launch timeline. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and security headers. Privacy and terms policies are clearly provided, supporting GDPR compliance. However, no direct contact or incident response information is published, which could be improved to enhance trust. Overall, the platform presents a professional and functional NFT marketplace with room for security and transparency enhancements.
- FFuture Ocean
futureocean.org
Education · Germany
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Future Ocean is a well-established marine science research network affiliated with Kiel University and several prominent research institutions in Germany. The website serves as an educational and outreach platform providing information on marine research, exhibitions, citizen science, and academic programs. The target audience includes researchers, students, educators, and the general public interested in ocean sustainability. Technically, the website uses standard web technologies with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and long-term presence of the organization.
GFZ Helmholtz-Zentrum für Geoforschunggfz-potsdam.de
Government · Germany
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
GFZ Helmholtz-Zentrum für Geoforschung is Germany's national center for solid earth research, focusing on geoscientific studies of the Earth's geosphere and related systems. The website serves a broad audience including researchers, students, policymakers, and the public, providing scientific publications, research data, and educational resources. It operates under the Helmholtz Association umbrella, indicating a strong institutional backing and national significance. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. It uses HTTPS with good SSL configuration and respects user privacy through cookie consent mechanisms. Security posture is solid with no detected vulnerabilities or exposed sensitive data, though explicit security policies and incident response contacts are not published. Privacy compliance is strong, with GDPR-aligned policies and consent banners. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is a trustworthy, professional platform for geoscientific research dissemination, with recommendations to enhance security transparency and incident response readiness.
Forschungszentrum Jülich GmbHfz-juelich.de
Energy · Germany
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Forschungszentrum Jülich GmbH is a prominent German research institution specializing in digital transformation, climate protection, energy transition, and sustainable bioeconomy. It operates as a large-scale public research center and is a founding member of the Helmholtz Association, positioning itself as a leader in scientific innovation and high-performance computing in Europe. The website reflects a professional and comprehensive digital presence, targeting researchers, industry partners, students, and the general public interested in advanced scientific research and technology transfer. Technically, the site leverages modern frameworks such as React and Plone CMS, with a focus on accessibility, mobile optimization, and SEO best practices. Security posture is strong with HTTPS enforcement, security headers, and privacy-conscious analytics via Matomo. However, explicit incident response and vulnerability disclosure information are not prominently available, representing an area for improvement. Overall, the site is trustworthy, well-branded, and aligned with the organization's mission and sector.
Forschungsinstitut für Nachhaltigkeit (RIFS)rifs-potsdam.de
Energy · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Forschungsinstitut für Nachhaltigkeit (RIFS) is a medium-sized research institute affiliated with the GFZ Helmholtz Zentrum Potsdam, focusing on sustainability and societal transformation research. The website is professionally designed using Drupal 10 and incorporates modern web technologies such as Bootstrap 5, Matomo analytics, and lazy loading for performance optimization. It offers comprehensive content including news, dossiers, and research results targeted at academics, policymakers, and sustainability stakeholders. Privacy and cookie policies are well implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website presents a trustworthy and authoritative digital presence for the institute.
Energy · Germany
73Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsches Klimarechenzentrum GmbH (DKRZ) operates as a national service center providing high-performance computing and data management infrastructure to support climate research in Germany. The website reflects a well-established organization focused on delivering computational resources, data storage, and expert services to the scientific community engaged in climate modeling and simulations. Their market position is strong within the German and international climate research ecosystem, emphasizing collaboration and advanced technological support. Technically, the website is built on the Plone CMS platform, leveraging Bootstrap for responsive design and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, clear navigation, and professional content presentation. However, some improvements could be made in accessibility and the implementation of security headers. From a security perspective, the site enforces HTTPS and uses script integrity attributes, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and serves its target audience effectively. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.
- UUniversität Hamburg
uni-hamburg.de
Education · Germany
65Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Universität Hamburg is a large, well-established public university in Germany, serving over 42,000 students and recognized as one of the leading research and education institutions in Northern Germany. The website reflects a comprehensive academic institution offering a wide range of study programs, research initiatives, and community engagement services. It targets students, researchers, faculty, and administrative staff, providing extensive information on academic offerings, research projects, career services, and events. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and multimedia content such as videos and image carousels. It uses analytics tools like eTracker and error monitoring via BetterWeb, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no explicit cookie consent mechanism was detected. Contact information is primarily via a feedback form, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain and hosting are consistent with a reputable academic institution, with no signs of suspicious activity.
Media · Slovakia
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Woman.sk is a Slovak online magazine targeting women, offering content on lifestyle, fashion, health, and relationships. The website uses WordPress CMS with Yoast SEO plugin and integrates Google Fonts and lazy loading scripts to optimize performance. The site implements a cookie consent mechanism indicating awareness of privacy regulations. However, explicit privacy policy and terms of service pages were not found in the provided content, which may impact compliance and user trust. Security posture is moderate with HTTPS enabled but lacks security headers and detailed security policies. No WAF or blocking mechanisms were detected, and the content is safe for general audiences without adult or explicit material. Overall, the website presents a professional and consistent brand image with good technical implementation but could improve in privacy and security transparency.
Talk Online Panel GmbHtalkonlinepanel.com
Other · Germany
66Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Talk Online Panel GmbH operates a reputable online survey platform targeting European users, primarily in Germany, offering paid participation in market research surveys with rewards redeemable for cash or vouchers. The company is well-established since 2014, with a strong market presence and over 1.3 million members. The website is built on Drupal 10, employs modern analytics and marketing tools, and demonstrates good technical and privacy compliance maturity. Security posture is solid with HTTPS and client transfer protection, though DNSSEC and some security headers could be improved. Overall, the platform presents a trustworthy and professional service with clear privacy and cookie policies, supported by recognized certifications and trust seals.
- Zväz obchodu SR
biznis.sk
Retail · Slovakia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Zväz obchodu SR is a Slovak trade association focused on representing retail and commerce interests within Slovakia. The website serves as a portal for news, legislative updates, member information, and event calendars relevant to the retail sector. It maintains partnerships with various media and industry-related organizations, reinforcing its position as a key player in the Slovak retail trade ecosystem. The domain is well-established since 2003, indicating a mature presence in the market. Technically, the website uses a custom or unknown CMS platform with common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The hosting is likely provided by Websupport, inferred from the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No privacy or cookie policies are present, and no consent mechanisms are detected, which is a compliance gap. From a security perspective, the site benefits from DNSSEC and HTTPS (inferred), but lacks visible HTTP security headers such as CSP or HSTS. There are no exposed sensitive data or obvious vulnerabilities in the HTML content, but the absence of security policies and incident response contacts suggests room for improvement. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and regulatory adherence.
- WWebout
webout.me
Technology
61Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Webout is a technology company specializing in personalized and interactive video marketing solutions designed to convert passive viewers into active customers. Their platform enables brands to create real-time personalized video campaigns that enhance engagement and conversion rates. The company demonstrates a strong market position with multiple client case studies, awards, and a consistent brand presence. Technically, the website is built on modern frameworks such as Next.js and React, integrating advanced tracking and consent management tools like Cookiebot and Smartlook. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, Webout presents a professional, trustworthy, and technically mature digital presence.
GROWYO consulting s.r.o.growyo.cz
Other · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Growyo consulting s.r.o. is a Czech-based marketing consultancy specializing in sustainable brand development and AI-enhanced marketing strategies. The company offers a full spectrum of marketing services including strategy, creative design, campaign activation, and AI-powered content production. Their market position is niche, focusing on long-term sustainability and innovative marketing solutions. The website is built on WordPress with Elementor, showing a modern and professional digital presence. Security posture is good with HTTPS and cookie consent implemented, but lacks some security headers and formal privacy and terms policies. WHOIS data is unavailable, which slightly impacts trust but the website content and contact information are consistent and professional. Overall, the site demonstrates a mature digital infrastructure with room for improvement in compliance and security transparency.
Weisevolt | Fotovoltaika na klíčweisevolt.cz
Other
65Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website www.weisevolt.cz appears to be a small business site hosted on the Wix platform. The content is minimal and primarily technical, with no visible business descriptions, contact information, or policies. The site uses standard Wix scripts and polyfills, indicating a modern but basic technical infrastructure. Security posture is moderate due to HTTPS usage but lacks security headers and privacy compliance features. The absence of WHOIS data and registrant information reduces trust and legitimacy. Overall, the site is accessible and safe but lacks critical business and compliance information, limiting its credibility and user trust.
WeldingPro Group s.r.o.weldingpro.cz
Manufacturing · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
WeldingPro Group s.r.o. is a Czech-based medium-sized company specializing in industrial assembly services including welding, electromontage, plumbing, ventilation, steel structure assembly, and piping works. The company operates domestically and internationally within the EU, emphasizing quality, reliability, and certified expertise. Their website reflects a professional and well-structured digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, including Google Tag Manager and reCAPTCHA for security and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though some HTTP security headers and explicit security policies are absent. The domain registration is consistent with the business profile, indicating legitimacy and stability. Overall, the website is trustworthy, user-friendly, and compliant with GDPR requirements.
Errortomja.cz
Other
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The domain tomja.cz is currently not connected to an active website and displays a Wix error page indicating the domain is not linked to any Wix site. The domain was registered recently in February 2023 through REG-WEDOS and uses Wix name servers, consistent with a new domain awaiting setup. There is no business or contact information available on the site, and no privacy, cookie, or terms of service policies are present. The technical infrastructure is based on Wix hosting with AngularJS and jQuery libraries loaded for the error page functionality. Security posture is minimal with no visible HTTPS or security headers in the provided data. Overall, the website is non-functional and lacks any business or compliance content.
Energy · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Tomáš Kuchař - TKSOLAR is a small Czech Republic-based company specializing in comprehensive home energy services including photovoltaic system installations, water heating, heat pumps, wallbox installations, and complete electrical installations. The website presents a professional and clear business description targeting residential customers seeking energy solutions. The technical infrastructure is based on WordPress with the Divi theme and SEO plugins, indicating moderate digital maturity. The website is accessible without WAF or security challenges, but lacks important compliance documents such as privacy and cookie policies. Security posture is moderate with no detected security headers and unknown SSL configuration. The absence of WHOIS data reduces domain legitimacy confidence. Overall, the website is functional and professional but requires improvements in security and compliance to enhance trust and reduce risk.
PROFISUN Energy s.r.o.profisun.cz
Energy · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
PROFISUN Energy s.r.o. is a Czech-based company specializing in photovoltaic energy solutions for residential and commercial clients. Founded in 2022, the company offers a range of products including photovoltaic systems, wind turbines, and hot water heating solutions, along with subsidy processing services. Their unique selling proposition includes a proprietary control module developed in collaboration with a technical university and a partnership with Benekov Esco, a reputable solar panel manufacturer. The website reflects a professional and modern digital presence built on WordPress with Elementor, featuring clear contact channels and GDPR compliance. Security posture is adequate with HTTPS and consent mechanisms, though some security headers could be improved. Overall, the company presents a trustworthy and credible profile in the renewable energy sector within the Czech market.
Vortexvortex.cz
Media · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Vortex.cz is a Czech media website specializing in video game news, reviews, podcasts, and community discussions. It targets Czech-speaking gamers and gaming enthusiasts, offering a variety of content including articles, videos, and game databases. The site operates primarily on an advertising-supported model and maintains an active presence with multiple authors and social media channels. Technically, the site is built on WordPress and uses modern web technologies such as jQuery, Google Analytics, Microsoft Clarity, and OneSignal for push notifications. It employs HTTPS and Google reCAPTCHA to enhance security. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in trust and security posture. Privacy policy and terms of service are either missing or not prominently linked, which may affect compliance. Overall, the site provides a good user experience with safe content and moderate tracking practices.
VENTA spol. s r.o.venta.cz
Energy · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
VENTA spol. s r.o. is a Czech Republic based company established in 1991 specializing in sales, installation, and turnkey solutions for home energy systems including heating, plumbing, solar, and ventilation. The company operates both physical retail locations and multiple e-commerce platforms, positioning itself as a trusted provider with a broad product portfolio and certified installation services. The website reflects a mature business with consistent branding and a focus on customer service including 3D design and subsidy assistance. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, with Google reCAPTCHA v3 integrated for form security. While the site is mobile optimized and well-structured, it lacks some advanced security headers and explicit incident response policies. The domain registration data aligns well with the business claims, indicating legitimacy and long-term operation. Overall, the website is professional, secure, and compliant with basic privacy regulations, though there is room for improvement in security policies and transparency.
- VÚB, a.s., pobočka Praha
vub.cz
Finance · Czech Republic
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
VÚB, a.s., pobočka Praha is a banking institution offering a broad range of financial services including corporate financing, structured and export financing, factoring, electronic banking, and payment services. The website positions the bank as a strategic partner for businesses, emphasizing modern identification solutions compliant with AML regulations. It is affiliated with the Intesa Sanpaolo group, indicating a strong market presence in the Czech and Slovak banking sectors. The website is professionally designed with consistent branding and clear navigation, targeting business clients and retail customers. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Microsoft Clarity, and various tracking services. It is mobile optimized with good SEO and basic accessibility features. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. However, no explicit security policy or incident response contacts are published. From a security perspective, the site shows good practices such as encrypted connections and consent management but could improve by adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces the ability to fully verify domain legitimacy, but the affiliation with Intesa Sanpaolo and professional presentation support trustworthiness. Overall, the site is a secure, professional banking portal with moderate tracking and marketing integration, suitable for its audience. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.
Beskyd House s.r.o.wolfenergy.cz
Energy · Czech Republic
50Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Wolf Energy, operated by Beskyd House s.r.o., is a Czech-based company specializing in energy-saving solutions including photovoltaic systems, heat pumps, and energy consulting. The company targets residential and commercial customers seeking energy independence and sustainability. Their business model encompasses tailored design, installation, administrative support for subsidies, and ongoing service. The website reflects a professional and consistent brand with clear contact information and community partnerships, notably with iKomunita. Technically, the site is built on WordPress with modern libraries and optimized images, offering good performance and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and formal policies. Overall, the domain registration aligns with the company's founding date and location, supporting legitimacy.
Acetexacetex.cz
Energy · Czech Republic
72Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Acetex is a Czech Republic based company specializing in the installation and servicing of photovoltaic systems and heat pumps for residential, commercial, and municipal clients. Established in 2020, it has positioned itself as a leading supplier in the renewable energy sector within the Czech market, boasting over 8,000 installations and recognized certifications and insurance coverage. The company offers a comprehensive range of products including photovoltaic power plants, heat pumps, gas boilers, and related energy solutions, complemented by consulting services for subsidies and professional maintenance. Technically, the website employs modern web technologies and multiple analytics and tracking tools, with a clear cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though explicit security policies and headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, though it lacks explicit privacy and terms of service documentation. The domain registration data aligns well with the business claims, supporting legitimacy.
- BBenekov
benekov.cz
Energy · Czech Republic
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Benekov is a Czech company specializing in manufacturing and selling high-quality automatic solid fuel boilers and renewable energy solutions, including hybrid pellet boilers and photovoltaic systems. Established in 1949, it holds a strong market position in the Czech energy sector, offering comprehensive services such as installation, servicing, and partner training. The website is professionally designed, providing detailed product information, customer references, and multiple contact channels, targeting domestic customers and businesses interested in energy-efficient heating technologies. Technically, the website employs a modern JavaScript stack including jQuery, bxSlider, Lightbox, and Google Maps API, ensuring a good user experience with mobile optimization and SEO best practices. However, some security headers are missing, and no explicit security policy or incident response information is found, indicating room for improvement in security posture. The site uses HTTPS and has cookie consent mechanisms, reflecting good privacy compliance. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional appearance and detailed company information on the site. This discrepancy lowers the overall trust score and suggests the need for verification of domain ownership. Overall, Benekov's website is a solid representation of a medium-sized energy sector company with good content quality and technical implementation but requires enhanced security measures and domain registration transparency to improve trust and compliance.
Sunmill | Fotovoltaické elektrárnysunmill.cz
Energy · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sunmill s.r.o. is a Czech-based company specializing in turnkey photovoltaic and heat pump solutions for residential buildings, companies, and households. Established in 2022, the company has completed over 1300 installations and offers comprehensive services including design, installation, financing, and maintenance. Their market position is that of a medium-sized local energy solutions provider focused on renewable energy technologies. The website is built on WordPress using the Kadence theme and blocks, featuring modern design elements, embedded video content, and structured data for SEO and business information. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security headers and privacy policies. Marketing automation is implemented via Leady tracking scripts. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security policy transparency are recommended.
Kombiverkehr Deutsche Gesellschaft für kombinierten Güterverkehr mbH & Co. KGeinfach-intermodal.de
Transportation · Germany
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kombiverkehr Deutsche Gesellschaft für kombinierten Güterverkehr mbH & Co. KG operates a professional blog website 'Einfach intermodal' focused on intermodal freight transport in Germany. The site provides industry news, project updates, and insights targeted at logistics professionals and transport stakeholders. The company is positioned as a significant player in the German intermodal transport sector, offering digital services such as customer portals and data platforms. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and user experience enhancements. Hosting is provided by Hetzner, a reputable German hosting provider. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, compliant with GDPR, and trustworthy, serving as a credible information source for its target audience.
- 881 alarm s.r.o.
81alarm.cz
Technology · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
81 alarm s.r.o. operates a professional website focused on providing comprehensive security solutions using the AJAX alarm system. The company targets residential and commercial customers in the Czech Republic, offering sales, installation, and ongoing support services. The website reflects a strong market position with clear service offerings and regional contact points. Technically, the site employs modern web technologies including Cloudflare DNS and Google Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS enabled, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with a GDPR policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's business credibility.
- 81 klima a.s.
81energy.cz
Energy · Czech Republic
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
81 klima a.s. operates the website www.81energy.cz, offering photovoltaic solar power solutions primarily targeting residential and commercial customers in the Czech Republic. The company provides sales, installation, financing, and subsidy assistance services for solar energy systems, positioning itself as a professional and trusted regional player with multiple branches and strong customer reviews. The website content is well-structured, professionally designed, and optimized for mobile devices, providing clear navigation and comprehensive information about products and services. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Plausible Analytics. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, enhancing user privacy and transparency. The website uses HTTPS with good SSL configuration, though explicit security headers could be improved. From a security perspective, the site demonstrates good practices including secure forms and no visible vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy page, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and certifications support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and header implementation would further strengthen its security posture and user trust.
- 881 klima a.s.
81heat.cz
Energy · Czech Republic
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
81 klima a.s., operating under the brand 81heat.cz, is a Czech Republic-based company specializing in energy-efficient heating solutions, including solar water heating and air-to-water heat pumps. The company targets homeowners seeking to reduce energy costs and leverage government subsidies such as the Nová zelená úsporám program. With multiple regional offices and strong customer reviews, 81heat.cz positions itself as a trusted local provider with comprehensive installation, maintenance, and customer support services. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Plausible Analytics, combined with a responsive and well-structured design optimized for mobile devices. The site enforces HTTPS and provides a detailed cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital presence. From a security perspective, while HTTPS is properly implemented and no sensitive data is exposed, the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. The lack of publicly available WHOIS data due to privacy protection is common for this business type and does not detract from the site's legitimacy, supported by consistent branding and transparent contact information. Overall, 81heat.cz demonstrates a solid business and technical foundation with good privacy compliance and user trust indicators. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture and customer confidence.
8181.cz
Energy · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
81.cz is a Czech-based company specializing in energy-related services including air conditioning, heat pumps, photovoltaic power plants, electronic security systems, and real estate rental. The company operates multiple branches across major Czech cities such as Prague, Brno, Ostrava, Hradec Králové, and Plzeň, supported by strong customer reviews on Google and Firmy.cz. Their business model leverages EU-funded projects to promote sustainable energy solutions, positioning them as a reputable regional player in the energy and real estate sectors. Technically, the website employs modern web technologies including Google Tag Manager, Google reCAPTCHA, Google Maps API, and popular JavaScript libraries like jQuery and Parsley.js. The site is mobile-optimized with good design quality and user experience. However, it lacks explicit privacy and cookie policies, and no security headers are detected, which are areas for improvement. The site uses HTTPS with a presumably strong SSL configuration, enhancing security. From a security perspective, the site shows good practices such as HTTPS enforcement and bot protection via reCAPTCHA, but lacks comprehensive security headers and incident response information. The absence of WHOIS data reduces domain trust slightly, but the presence of verified customer reviews and EU project disclosures supports legitimacy. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and transparency around incident response would enhance their security and compliance standing.
Česká spořitelnaceska-sporitelna.cz
Finance · Czech Republic
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Česká spořitelna is a leading Czech bank offering a comprehensive range of personal and business financial services including accounts, loans, mortgages, savings, investments, and insurance. The website reflects a mature digital presence with a professional design, clear navigation, and extensive content tailored to Czech customers. The technical infrastructure leverages modern web technologies such as Google Tag Manager, Evergage, and a proprietary GEM framework, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, which is justified for a financial institution. Overall, the site demonstrates high legitimacy and trustworthiness.
ELSA GROUP s.r.o.elsaslovakia.sk
Retail · Slovakia
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
ELSA GROUP s.r.o. operates a professional e-commerce website specializing in towing devices and roof racks, primarily serving the Slovak and Czech markets. Established since 1995, the company offers a wide range of automotive accessories with a strong emphasis on quality and direct manufacturer sourcing. The website features a comprehensive product catalog, clear navigation, and multiple trusted brand partnerships, positioning it as a reputable player in its niche. Technically, the site uses a custom e-commerce CMS (BSSHOP) with modern tracking and marketing tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates a mature digital presence with high business credibility and trustworthiness.
Pure Silver Creativeclienttasks.com
Technology
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CIARA is a technology portal system used by Pure Silver Creative, providing a login interface for clients or users to access various internal modules and services. The website is built on WordPress with a modern tech stack including Vue.js and several JavaScript libraries, indicating a moderate level of digital maturity. The portal focuses on user authentication and access management, with no public-facing business content or marketing information on the login page. Security posture is adequate with HTTPS enforced and secure form handling, but lacks visible security headers and privacy compliance documentation. Overall, the site appears functional for its intended purpose but would benefit from enhanced security headers and privacy policies to improve trust and compliance.
Pure Silver Creativepuresilvercreative.com
Other · United States
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Pure Silver Creative is a Tampa-based digital marketing agency established in 2013, offering a broad range of tailored online marketing services including SEO, content marketing, data dashboards, reputation management, and website design. The company positions itself as a full-service marketing partner for businesses seeking to enhance their digital presence and marketing effectiveness. The website reflects a professional and consistent brand image with strong client testimonials and social media engagement. Technically, the site is built on WordPress using modern plugins and frameworks, hosted on AWS infrastructure, and incorporates standard marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers and vulnerability disclosure mechanisms are missing. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site demonstrates a mature digital presence with room for security and privacy improvements.
Plesk Obsidian 18.0.73eliteinsights.net
Technology
70Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The website eliteinsights.net/login_up.php serves as a login portal for Plesk Obsidian 18.0.73, a widely used web hosting control panel software. It targets web hosting providers, server administrators, and developers who manage hosting environments. The site primarily facilitates access to server management tools rather than providing extensive business or marketing content. The domain registration is consistent and stable, supporting the legitimacy of the service. Technically, the site uses modern JavaScript libraries including Prototype.js and RequireJS, and is built on the Plesk UI framework. It is hosted behind Cloudflare DNS, indicating some level of infrastructure robustness. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and comprehensive content quality. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements but lacks visible HTTP security headers such as CSP or HSTS. SSL configuration details are not available from the provided data, and no explicit anti-CSRF tokens are visible in forms, though a meta forgery protection token exists. The absence of a privacy policy and contact information reduces transparency and compliance confidence. Overall, the site is functional and legitimate for its purpose but would benefit from enhanced security headers, explicit privacy documentation, and improved transparency to increase trust and compliance. The AI overall score reflects a basic but operational site with room for security and privacy improvements.
- EElite Insights
eliteinsights.io
Media · United States
50Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Elite Insights is a specialized software provider offering a comprehensive Best Of platform designed to help media companies increase revenue, generate leads, and engage their communities through nomination and voting programs. The company targets media groups and broadcasters, positioning itself as a leading solution provider in this niche. Founded in 2020, Elite Insights operates primarily in the US market and offers both self-managed and fully managed solutions. The website reflects a professional and consistent brand image with clear service offerings and client logos to establish trust. Technically, the website is built on WordPress using the X Theme Pro framework, leveraging modern web technologies including Google Tag Manager and Google Analytics for marketing and analytics purposes. Hosting and DNS services are provided via GoDaddy and Cloudflare respectively, with HTTPS enforced ensuring secure communications. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. From a security perspective, the website employs HTTPS and domain registration protections but lacks DNSSEC and important security headers, which are recommended to enhance security posture. No explicit security policies or incident response information are published, and no cookie consent mechanism is present, indicating partial privacy compliance. The domain registration is privacy protected but consistent with the business claims, supporting legitimacy. Overall, Elite Insights presents a trustworthy and professional online presence with room for improvement in security hardening and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to strengthen trust and compliance.
FSR magazinefsrmagazine.com
Media
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
FSR magazine is a media publication focused on providing news and insights related to the full service restaurant industry. The website targets professionals and stakeholders within this niche sector, offering industry news, supplier directories, and market analysis. The business model centers on media content delivery, likely monetized through advertising and partnerships. The site demonstrates a consistent brand presence and good content quality, positioning it as a specialized media outlet within its market segment. Technically, the website is built on WordPress with modern SEO tools such as Yoast SEO Premium and integrates Google Tag Manager and reCAPTCHA for enhanced user experience and security. The site uses common web technologies including jQuery and FontAwesome, and employs Google Ad Manager and AdRoll for advertising and retargeting. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. However, the absence of privacy and cookie policies, as well as missing contact information, represent compliance and trust gaps. The WHOIS data is unavailable, which reduces domain trustworthiness, though the website content and technical setup appear professional. Overall, the site is functional and professional but would benefit from improved privacy compliance, clearer contact information, and enhanced security disclosures to strengthen trust and regulatory adherence.
Other · Iceland
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website quickkoala.io currently presents minimal accessible content, returning an API error message indicating a missing resource. The domain is registered with privacy protection through a service based in Iceland, with a creation date in 2019, suggesting a small or early-stage business. However, the lack of visible business information, contact details, or policies on the website limits the ability to assess the company's market position or services. Technically, the site appears to be hosted on Amazon AWS infrastructure based on DNS records, but no modern web technologies, frameworks, or CMS platforms are detectable from the provided data. Security posture cannot be fully evaluated due to missing security headers and SSL configuration details. Overall, the website's minimal content and lack of compliance documentation present a low trust profile and high risk for users seeking reliable information or services.
Other · Iceland
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at cdn3l.ink is currently non-functional, serving an XML error message indicating a missing index.html file. No business content, metadata, or contact information is available, making it impossible to assess the company's market position or services. The domain is registered through a privacy protection service based in Iceland and hosted on Amazon AWS DNS infrastructure. The lack of accessible content and absence of security headers or policies indicates a very low digital maturity and security posture. Without accessible content, no meaningful privacy or compliance evaluation can be performed. The overall risk is elevated due to the absence of any visible business or security information, which may indicate an inactive or placeholder domain.
- UnitedHealthcare
uhcprovider.com
Healthcare · United States
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
UnitedHealthcare operates www.uhcprovider.com as a dedicated resource portal for healthcare providers and professionals, offering access to health plans, administrative guides, digital tools, and specialty resources. The site targets healthcare professionals and providers, supporting their interactions with UnitedHealthcare's insurance products and services. The website is part of a large enterprise healthcare insurance provider, UnitedHealth Group, and reflects a mature digital presence with consistent branding and professional content. Technically, the site leverages Adobe Experience Manager CMS, Adobe Analytics, and Optum's digital components, indicating a modern and scalable infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though cookie consent mechanisms could be improved for privacy compliance. WHOIS data is unavailable, which is unusual but does not detract from the site's legitimacy given the strong corporate branding and content. Overall, the site is a trustworthy, well-maintained resource for healthcare providers.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at https://member.werally.com/now/ is currently inaccessible due to an AWS WAF security challenge page that blocks direct access to content. This prevents any meaningful extraction of business, contact, or policy information. The domain is a subdomain of werally.com, and WHOIS queries for this subdomain return no registration data, indicating it is managed under the main domain without separate registration. The technical infrastructure includes AWS WAF protection, but no other visible technologies or CMS platforms are detected. The lack of accessible content and metadata results in a low overall website quality and trustworthiness score. Security posture is limited to the presence of AWS WAF, but no SSL or security headers can be confirmed. Privacy and compliance policies are absent from the accessible content, and no contact or business information is available.
BlueGhost.cz s.r.o.blueghost.cz
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
BlueGhost.cz s.r.o. is a Czech-based software development company specializing in end-to-end digital services including web applications, e-commerce platforms, corporate websites, and digital strategy consulting. With over 21 years of experience and a team of 30+ specialists, they serve ambitious companies, startups, and public organizations. The company holds a Google Partner certification and showcases a strong portfolio of clients and awards, positioning itself as a reputable player in the Central European technology market. Technically, the website employs a modern technology stack including React, PHP frameworks (Symfony, Laravel), Kubernetes, and cloud platforms such as AWS, Azure, and Google Cloud. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is strong with HTTPS enforcement, security headers, and a detailed cookie consent mechanism, although explicit privacy policy and terms of service documents are not found, which is a compliance gap. WHOIS data is unavailable, limiting domain legitimacy verification, but the overall business credibility and digital maturity are high. Recommendations include publishing clear privacy and security policies and improving transparency around incident response.
AnalytikaWebu.czanalytikawebu.cz
Technology · Czech Republic
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
AnalytikaWebu.cz is a Czech-based privacy-focused web analytics platform founded in 2021. It offers realtime visitor tracking without storing IP addresses, sessions, or cookies, ensuring compliance with GDPR, CCPA, and PECR regulations. The service targets website owners seeking privacy-compliant analytics solutions and positions itself as a privacy-first alternative to traditional analytics providers. The platform provides features such as behavior analysis, acquisition channel tracking, geographic insights, custom event tracking, and data export capabilities. Technically, the website is built with modern web technologies including JavaScript, Google Tag Manager, and likely Laravel backend, hosted on Czech infrastructure with WEDOS as registrar and exon.io nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is strong with HTTPS enforced and CSRF protection, though formal security policies and incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and privacy compliance, making it a credible service in the web analytics market.