Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,601–11,650 of 14,261
Cosmiccosmicstatus.com
Technology
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Cosmic operates a technology platform focused on content and media management, providing API and web dashboard services to developers and businesses. The website analyzed is a status page hosted on Atlassian Statuspage, offering real-time uptime and incident reporting for Cosmic's services. The platform is stable with no recent incidents reported, and it supports user subscriptions for updates via email and Slack, secured by Google reCAPTCHA Enterprise. The website demonstrates good technical maturity with modern technologies, mobile optimization, and secure form handling. However, the lack of accessible WHOIS data limits domain registration verification, and no explicit security or incident response policies are published on this page. Privacy and cookie policies are linked to Atlassian's comprehensive legal pages, indicating compliance with GDPR and related regulations.
- Alaska Airlines, Inc.
alaskaair.jobs
Transportation · United States
80Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Alaska Airlines, Inc. operates a comprehensive career website for its airline group including Alaska Airlines, Horizon Air, and Hawaiian Airlines. The site provides detailed job listings, company values, and employee development programs targeting job seekers interested in aviation careers. The platform is built on modern web technologies such as Nuxt.js and Tailwind CSS, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforced and secure form practices, though explicit security headers and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a professional and trustworthy brand presence aligned with a large enterprise airline business.
- Alaska Airlines, Inc.
alaskacargo.com
Transportation · United States
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Alaska Air Cargo operates as a major air cargo service provider primarily serving Alaska and extending across the US, Canada, and Mexico with over 100 destinations. The company offers a range of services including shipment booking, tracking, pet travel, and specialized freight options. The website reflects a well-established business with strong branding aligned to its parent company, Alaska Airlines. Technically, the site uses modern frameworks such as Bootstrap and Alpine.js, integrates Google reCAPTCHA for form security, and employs Microsoft Application Insights for telemetry, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and external linkages. Overall, the site is reliable, secure, and user-friendly, serving a large transportation sector audience effectively.
Bazaarvoicegranify.com
Technology · United States
88Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Bazaarvoice is a leading enterprise technology company specializing in AI-powered contextual commerce solutions that enhance e-commerce personalization and conversion rates. Their platform leverages extensive behavioral data and machine learning to deliver tailored shopping experiences for both known and anonymous shoppers. The company positions itself as a market leader with a comprehensive suite of services including managed personalization campaigns and user-generated content integration. Technically, the website is built on WordPress with modern marketing and analytics tools such as Marketo, Google Tag Manager, and New Relic, ensuring robust performance and monitoring. Security posture is strong with HTTPS, security headers, and secure form handling, although explicit incident response and vulnerability disclosure information is not publicly available. Overall, the site demonstrates high professionalism, excellent content quality, and good privacy compliance, making it a trustworthy platform for enterprise clients.
Partnerizepepperjam.com
Technology
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Partnerize is an enterprise-level technology company specializing in AI-powered affiliate and partnership automation software. Their platform enables businesses to efficiently manage, track, and compensate online sales partners, affiliates, and influencers. The company positions itself as a key player in the affiliate marketing technology space, targeting businesses seeking to optimize partnership revenue streams. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating marketing and analytics tools such as HubSpot and Cookiebot for consent management. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in security headers and explicit policy disclosures. Overall, the site demonstrates a mature digital infrastructure suitable for enterprise clients, with room for enhanced privacy and security transparency.
LeadDynoleaddyno.com
Technology
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
LeadDyno is a SaaS company specializing in affiliate marketing software designed to help businesses launch, manage, and grow their affiliate programs. The platform supports unlimited clicks, conversions, and commission plans, targeting industries such as SaaS, health & wellness, and fashion & lifestyle brands. The website demonstrates a strong market position with over 2,000 brands using their services and partnerships with major platforms like Stripe, Shopify, HubSpot, and BigCommerce. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and HubSpot scripts, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs standard security headers, but lacks publicly available security policies or incident response information, which could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly impacts the trustworthiness assessment. Overall, the website is professional, well-designed, and content-rich, with good privacy and cookie compliance mechanisms in place.
- Mattel
mattel.com
Retail
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Mattel is a globally recognized enterprise specializing in the manufacturing and retail of toys and entertainment products, including iconic brands such as Barbie, Hot Wheels, and Fisher Price. The website analyzed is the corporate 'About' page, providing an overview of the company's mission to empower childhood wonder and potential. The site targets parents, children, and toy consumers, positioning Mattel as a leader in the retail toy industry. The business model focuses on product manufacturing, brand licensing, and entertainment content creation. Technically, the website employs modern web technologies including React and Next.js frameworks, with content management facilitated by Builder.io and e-commerce elements linked to Shopify. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be enhanced. Google Tag Manager and UsableNet are used for analytics and accessibility enhancements respectively. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML content. However, no explicit security headers were detected in the provided content, and no privacy or cookie policies were found, indicating areas for compliance improvement. No forms or direct contact information were identified, limiting data collection risks but also reducing transparency. Overall, the website reflects a professional and trustworthy corporate presence consistent with Mattel's brand reputation. The absence of WHOIS data for the subdomain is typical and does not detract from legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing a vulnerability disclosure policy to enhance security posture and regulatory compliance.
Lexiphorialexiphoria.com
Technology · India
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Lexiphoria is a newly established technology company founded in 2024, specializing in creating simplified and localized video content for product demos, training, and marketing, enhanced by advanced AI-driven tools. The company targets India's diverse audience, positioning itself as a niche player in the Indianization digital content market. The website reflects a professional and consistent brand image with a clear focus on its core services. Technically, the site is built on WordPress using the Avada theme and optimized with NitroPack, indicating a modern and performant infrastructure. Security posture is solid with HTTPS and domain registration protections, though it lacks DNSSEC and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages. Contact is primarily via a contact form, with no direct emails or phone numbers disclosed. Overall, the website is safe, professional, and trustworthy, suitable for general audiences.
- AAmstar
amstardmc.com
Transportation · Mexico
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Amstar operates as a regional travel service provider specializing in excursions, tours, and airport transportation primarily in Mexico and other Caribbean destinations. The company offers a range of services including private VIP itineraries and airport shuttles, targeting travelers seeking convenient and curated travel experiences. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages modern JavaScript libraries, Google Tag Manager, Microsoft Application Insights for analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. However, the domain WHOIS data is missing, which raises some concerns about registration transparency. Overall, the site presents a trustworthy and professional front for its business operations.
Amrita Aromatherapyamrita.net
Retail · United States
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Amrita Aromatherapy operates a professional e-commerce website specializing in organic essential oils and therapeutic aromatherapy products. The company targets wellness consumers seeking natural and organic personal care solutions. The website is built on the BigCommerce platform, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Bing Ads, and Klaviyo, indicating a mature digital marketing strategy. The site is well-structured, mobile-optimized, and provides comprehensive product categories and educational content, enhancing user engagement and trust. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the site presents a trustworthy and professional front for its niche market, with room for improvement in transparency around security and domain registration.
AMIClubwearamiclubwear.com
Retail · United States
76Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
AMIClubwear is a well-established e-commerce retailer specializing in women's sexy clubwear and party dresses, targeting a mature female audience interested in fashionable and celebrity-inspired club clothing. The company operates primarily through its Shopify-based online platform, leveraging a variety of third-party marketing, analytics, and customer engagement tools to enhance user experience and drive sales. The website demonstrates consistent branding and professional content quality, supported by a long domain history dating back to 2007, which reinforces its market credibility. Technically, the website is built on the Shopify platform with integrations including Google Analytics, Facebook Pixel, Judge.me for reviews, and loyalty programs such as Bon Loyalty. The site shows good mobile optimization and SEO practices, although performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced and domain-level protections in place, but lacks advanced HTTP security headers and published security policies or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. However, no explicit security policy or vulnerability disclosure is found, which could be improved. The content is adult-oriented fashion (sexy clubwear and lingerie), suitable for mature audiences but not explicit adult content. No WAF or blocking mechanisms were detected, allowing full content access. Overall, AMIClubwear presents a credible and professional online retail presence with solid technical infrastructure and privacy compliance, but could enhance its security posture and transparency around incident response and vulnerability disclosures to further strengthen trust and resilience.
American Girlamericangirl.com
Retail · United States
85Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
American Girl is a well-established brand specializing in 18-inch dolls, clothing, playsets, and accessories, targeting children and families. The website serves as a primary e-commerce platform supported by physical retail locations across major US cities. It operates under the parent company Mattel, a global leader in the toy industry. The site offers a membership rewards program and comprehensive customer services including gift wrapping and shipping options. Technically, the website is built on Shopify, leveraging modern marketing and analytics tools such as Klaviyo, Optimizely, and Google Tag Manager, ensuring a robust digital presence with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and secure payment integrations, although explicit vulnerability disclosure and incident response policies are not publicly visible. Privacy compliance is well addressed with clear privacy and cookie policies, reflecting GDPR considerations. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, though WHOIS data is not publicly available, likely due to privacy protection.
- Ameliorate
ameliorate.com
E-commerce · United Kingdom
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ameliorate is a UK-based e-commerce skincare brand specializing in products designed to treat Keratosis Pilaris and rough skin conditions. The website presents a professional and user-friendly interface with a clear focus on its niche market. It offers a range of body skincare products and targets consumers seeking solutions for dry and bumpy skin. The company maintains an active social media presence and provides various customer incentives such as discounts for students, NHS workers, and keyworkers. Technically, the site is built using modern web technologies including the Astro framework, Google Tag Manager, and OneTrust for cookie consent, ensuring a good level of performance, mobile optimization, and SEO compliance. Security is well addressed with HTTPS, strong security headers, and invisible reCAPTCHA integration. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. The site lacks explicit security policies and incident response information, and no verified company contact emails or phone numbers are publicly available, which could impact trustworthiness. Overall, the website is functional and secure but would benefit from enhanced transparency and business credibility disclosures.
Amariamari.com
Hospitality · Thailand
76Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Amari Hotels & Resorts is a hospitality company operating multiple hotels and resorts primarily in Thailand and across Asia. The website offers direct booking capabilities, a loyalty rewards program, and multilingual support, positioning itself as a regional hospitality brand focused on delivering culturally rich and personalized guest experiences. The technical infrastructure leverages modern web technologies including Bootstrap, jQuery, and various analytics and marketing tools, indicating a mature digital presence. Security posture is good with HTTPS enforced and some security headers present, though additional headers and explicit security policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registration data for the domain www.amari.com raises concerns about domain legitimacy and reduces overall trustworthiness. No direct contact emails or phone numbers were found in the provided content, which may impact business credibility. Overall, the website is professional, user-friendly, and safe for general audiences, but domain registration verification and enhanced contact transparency are recommended.
Al's Sporting Goodsals.com
Retail · United States
81Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Al's Sporting Goods operates as a well-established retail company specializing in outdoor sports gear and apparel, serving customers both online and through multiple physical store locations primarily in the USA. The company targets outdoor enthusiasts and general consumers seeking quality sporting goods with a business model focused on e-commerce complemented by brick-and-mortar stores. Their market position is that of a regional leader with a long history dating back to 1921, offering a broad range of products and customer services including free shipping and satisfaction guarantees. Technically, the website employs a modern technology stack including HTMX, VTEX commerce platform, and various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Microsoft Clarity. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a smooth user experience with secure HTTPS connections and script nonce usage to enhance security. From a security perspective, the site shows strong HTTPS enforcement and good security best practices, including secure login mechanisms and privacy compliance. However, the absence of explicit security policies, incident response information, and vulnerability disclosure programs indicates areas for improvement. The lack of WHOIS domain registration data is a notable concern, reducing trustworthiness and requiring further investigation. Overall, the website is professional, trustworthy, and well-optimized for its business purpose, but the missing domain registration details and limited security policy transparency suggest moderate risk. Strategic improvements in security documentation and domain registration transparency would enhance trust and compliance.
Alpaca Directalpacadirect.com
Retail · United States
78Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Alpaca Direct is a specialized e-commerce retailer offering premium alpaca fiber products including socks, yarns, apparel, and gifts. The company targets knitting and crochet enthusiasts and apparel shoppers primarily in the US market. The website is built on the Shopify platform using the Turbo theme, integrating multiple third-party marketing and analytics tools to enhance customer engagement and sales. The technical infrastructure is modern and well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS enforced and secure payment options, though explicit security headers and privacy policies are lacking. The absence of WHOIS registration data is a notable anomaly that slightly reduces trust but does not detract from the professional presentation and functionality of the site. Overall, Alpaca Direct presents as a credible small retail business with room for improvement in privacy compliance and security transparency.
Custom Shirts - Design Custom T-Shirts Online | 45% OFFalliedshirts.com
E-commerce
81Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website alliedshirts.com is an e-commerce platform specializing in custom t-shirt printing services targeted at teams, businesses, schools, and event organizers. It offers design services for bulk orders and promotes free shipping and competitive pricing. The site uses a modern technology stack including nopCommerce, jQuery, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics 4, Facebook Pixel, Hotjar, and Visual Website Optimizer. Despite a professional and user-friendly design, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site appears functional and business-oriented but requires improvements in transparency and security documentation to enhance trustworthiness.
Alexandre Birmanalexandrebirman.com
E-commerce · United States
76Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Alexandre Birman operates a mature and professionally designed e-commerce website specializing in luxury footwear, including sandals, heels, and boots. The site targets consumers interested in high-end fashion and operates primarily in the United States market. The business model is direct-to-consumer retail via an official online store, leveraging Shopify as its platform. The website demonstrates strong branding consistency and high-quality content presentation, reflecting its market position as a luxury brand.
Air Filters Deliveredairfiltersdelivered.com
Retail · United States
84Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Air Filters Delivered is a small e-commerce retailer specializing in HVAC and furnace air filters, targeting residential customers in the United States. The company operates primarily through a Shopify-based online storefront, offering discounted air filters with home delivery and subscription options. Their market position is that of a niche discount retailer focused on convenience and affordability for homeowners needing HVAC maintenance supplies. Technically, the website leverages a modern Shopify infrastructure with integrations for marketing, analytics, and customer engagement tools such as Klaviyo, Yotpo, Hotjar, and Facebook Pixel. The site is mobile-optimized and employs standard e-commerce best practices, though some accessibility and security header enhancements could be made. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility compliance.
Transportation
77Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.aircanada.com is currently inaccessible due to server or web application firewall blocking, as evidenced by the 'Access Denied' error page and reference to Akamai Edge security services. This prevents any meaningful extraction of website content, metadata, or business information. The WHOIS lookup failed to return any registrar or registrant data, which is unusual for a major commercial domain and suggests privacy protection or registry data restrictions. Due to the lack of accessible content and WHOIS data, the security posture and compliance status cannot be accurately assessed. The domain is widely known as the official site of Air Canada, a major airline in the transportation sector, but this analysis is limited by the blocking mechanisms in place.
AeroBandaeroband.net
E-commerce
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
AeroBand operates an e-commerce website specializing in smart electronic musical instruments, including innovative products like the PocketDrum electronic drum set and digital smart guitars with MIDI capabilities. The company targets musicians and electronic music enthusiasts seeking portable and versatile musical instruments. The website is built on the Shopify platform, leveraging its CDN and standard web technologies, and integrates tracking tools such as Microsoft Clarity and Facebook Pixel for analytics and marketing purposes. Despite a professional presentation and good content quality, the absence of WHOIS registration data raises questions about domain legitimacy or recent registration status. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies, which are important for compliance and user trust. Overall, the site is functional and safe for general audiences but would benefit from enhanced transparency and security practices.
- ActivatedYou
activatedyou.com
Healthcare · United States
81Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
ActivatedYou is a health and wellness company specializing in e-commerce sales of dietary supplements designed to promote overall wellness and restore the body's natural healthy state. The company has an established online presence with a website built on WordPress and WooCommerce, targeting health-conscious consumers. Their market position is that of a niche wellness supplement provider with branded products and educational content. Technically, the website uses modern technologies including NitroPack for performance optimization and integrates marketing tools such as Klaviyo and Visual Website Optimizer. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy transparency.
4Seating4seating.com
Retail · United States
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
4Seating is a well-established e-commerce retailer specializing in home theater seating, multimedia sofas, sectionals, and custom home theater decor. The company has been operating since 2002, offering a wide range of premium quality products with a focus on customer satisfaction, affordability, and fast shipping. Their market position is solid within the niche of home theater furniture, supported by exclusive product lines and bulk purchasing advantages. The website targets homeowners, media room designers, and commercial theater operators seeking quality home theater solutions. Technically, the website is built on Magento CMS with integrations including Algolia for search, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and DNSSEC is not enabled. Privacy compliance is basic with accessible privacy and cookie policies, but no explicit GDPR compliance statements or data protection officer contacts. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. The website does not contain any adult or explicit content and is safe for general audiences.
FetishPapa.comfetishpapa.com
Media
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
FetishPapa.com is an adult entertainment website specializing in free fetish pornographic videos. It offers a platform for users to stream fetish content, upload videos, and engage with a community forum. The site targets an adult audience with explicit content and enforces age restrictions through RTA compliance. Technically, the website employs modern web technologies including React and jQuery, and uses CDN services for content delivery. While the site is functional and visually consistent, it lacks publicly available WHOIS registration data, privacy policies, and terms of service pages, which impacts its business credibility and privacy compliance. Security measures such as HTTPS are in place, but additional security headers and policies are absent, suggesting room for improvement in security posture. Overall, the site operates in a niche adult media market but would benefit from enhanced transparency and compliance documentation.
Publitaspublitas.com
Technology
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Publitas is a technology company offering an AI-enabled digital publication platform designed to help businesses create, distribute, and optimize digital publications. The platform targets enterprises and small businesses, providing services such as digital catalogs, interactive media, and advanced data analytics. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and third-party marketing and analytics tools. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and branding appear trustworthy. Overall, the site demonstrates a strong business and technical foundation with room for improvement in transparency and security disclosures.
Thronethrone.com
Technology
84Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Throne is a well-established technology platform founded in 1998 that provides a privacy-first gifting solution tailored for content creators. The platform enables creators to curate wishlists and receive gifts from fans without exposing personal information, positioning itself as a leading gifting platform with over 750,000 creators globally. The website demonstrates good branding consistency and trust signals, including integration with Trustpilot and Product Hunt, enhancing its market credibility. Technically, the website leverages modern web technologies such as Webflow CMS, Google Tag Manager, and OneTrust for cookie consent, hosted on Vercel infrastructure ensuring fast performance and good mobile optimization. The technical implementation is robust with HTTPS enforced and clientTransferProhibited domain status, although DNSSEC is not enabled. The site includes multiple tracking and advertising scripts primarily from Google and Trustpilot, indicating moderate user tracking. From a security perspective, the site benefits from strong SSL configuration and basic security best practices but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent and long-standing, supporting the legitimacy of the business. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service on the landing page. Overall, Throne presents a professional, secure, and privacy-conscious platform with room for improvement in transparency around privacy policies, terms of service, and security disclosures. Strategic enhancements in these areas would further strengthen user trust and compliance posture.
Fanslyfansly.com
Media
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fansly is an established adult content subscription platform founded in 2014, offering creators the ability to monetize content through subscriptions, livestreaming, and personal messaging. The platform targets an adults-only audience and positions itself competitively within the adult media subscription market. The website employs modern web technologies including Angular and integrates analytics and marketing tools such as Amplitude and Google Tag Manager. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site enforces HTTPS and includes an age verification gate to restrict access to adult content. However, explicit contact emails and phone numbers are not publicly listed, with contact primarily via forms and help center links. Legal pages such as Privacy Policy and Terms of Service are present and comprehensive, supporting compliance with regulations including GDPR. Security posture is generally good with HTTPS and domain transfer protections, but lacks published security policies, incident response details, and vulnerability disclosure mechanisms. Cookie consent mechanisms are not evident, indicating room for privacy compliance improvement.
King Johnnie Casino | $6,000 Bonus & 200 Free Spinskingjohnnie.me
Other
78Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
King Johnnie Casino is an online gambling platform offering a variety of casino games including pokies, blackjack, and roulette, with promotional bonuses such as a $6,000 welcome bonus and 200 free spins. The website targets adult users interested in online casino gaming. The platform uses modern web technologies including Angular framework, Google Tag Manager, and LiveChat for customer interaction, indicating a moderate level of digital maturity. However, the absence of publicly available WHOIS data and privacy policies suggests limited transparency. Security posture is moderate with no explicit security headers detected and unknown SSL configuration. The site does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the site presents a professional gambling service but lacks some critical compliance and security disclosures.
Casino UScasinous.com
Other
77Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Casino US operates as an online guide and affiliate platform specializing in US-based online casinos, offering reviews, bonus information, and game guides targeted at American players interested in real money gambling. The website positions itself as a trusted resource in the US online gambling market, founded in 2016, and provides a range of casino-related content including mobile casino recommendations and various casino game categories. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Ahrefs Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and explicit security policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the website content and social media presence suggest a legitimate business. Privacy and cookie policies are not detected, which is a compliance gap. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.
Casino Sophuscasinosophus.com
Other
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Casino Sophus operates as an affiliate and review platform specializing in online casinos targeting the USA market. The website provides curated lists and reviews of over 50 reliable online casinos, focusing on educational content about gambling laws, responsible gaming, and casino guides. The site positions itself as a trusted resource for players seeking reputable online gambling sites in the USA. Technically, the website is built on WordPress using Bootstrap and jQuery, with SEO optimization via Yoast and user behavior tracking through Microsoft Clarity and Google Analytics. The site is accessible, mobile-optimized, and presents professional content with consistent branding. Security-wise, the site enforces HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency to enhance trust and security posture.
Kiwi Casinoskiwicasinos.io
Other · New Zealand
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Kiwi Casinos is an online affiliate platform specializing in providing comprehensive reviews, guides, and bonus information for online casinos targeting New Zealand players. The website positions itself as a niche market player focusing on the New Zealand gambling audience, offering valuable content such as casino ratings and game guides. The business model primarily revolves around affiliate marketing, generating revenue through referrals to online casinos. Technically, the site is built on WordPress with Bootstrap and FontAwesome, delivering a responsive and moderately performant user experience. Security measures include HTTPS enforcement and standard security headers, reflecting a good security posture for an affiliate site. Privacy and cookie policies are present and indicate GDPR compliance, although direct company contact details are limited to a contact form. The domain WHOIS data is privacy protected, which is common in this sector but reduces transparency. Overall, the site is professional and trustworthy within its niche but could improve business credibility by providing more direct contact information.
- Macmillan Learning
macmillanihe.com
Education · United States
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Macmillan Learning is a prominent educational publisher and digital learning solutions provider targeting higher education instructors and students in the United States. The website offers a comprehensive portfolio of digital tools, textbooks, and instructor resources designed to enhance learning outcomes and engagement. The company maintains a strong market position as part of the Macmillan Publishers group, with a focus on innovative educational technology platforms such as Achieve and iClicker. Technically, the website employs modern web technologies including Google Tag Manager, Amplitude, Marketo, and OneTrust for analytics, marketing, and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly documented. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and consistent branding support its legitimacy. Overall, the site demonstrates a high level of digital maturity and business credibility, with moderate user tracking balanced by privacy compliance. Strategic recommendations include enhancing security header implementation, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security culture.
Newsweeknewsweek.com
Media
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Newsweek is a prominent international news media organization providing in-depth news, analysis, and opinion on politics, business, technology, and culture. The website demonstrates a mature digital presence with a professional design, comprehensive content, and strong branding consistency. The business model is primarily advertising and subscription-based, targeting a general audience interested in current affairs and analysis. Technically, the site leverages modern JavaScript libraries, CDNs, and analytics tools, with Drupal as the CMS platform. Mobile optimization and SEO practices are well implemented, ensuring good user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and secure cookie practices, although there is room for improvement in publishing vulnerability disclosure and incident response information. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and professionally managed, though the absence of WHOIS data limits domain registration transparency.
Kitconvertkit.com
Technology
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Kit.com is a well-established SaaS platform focused on providing an email-first operating system tailored for creators, enabling them to manage subscribers, sell products, automate messaging, and receive recommendations. The platform targets creators and entrepreneurs seeking to build sustainable and profitable businesses. The website demonstrates a high level of digital maturity with modern technologies such as Next.js, Cloudflare DNS, and extensive use of analytics and marketing tools. The site is professionally designed, mobile-optimized, and provides a seamless user experience. Security posture is strong with HTTPS enforced, domain locking, and use of Cloudflare DNS, although DNSSEC is not enabled. However, the absence of explicit privacy and cookie policies, as well as incident response information, indicates areas for compliance improvement. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.
Education · United States
80Low
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
The University System of New Hampshire (USNH) is the largest provider of postsecondary education in New Hampshire, encompassing five institutions and serving approximately 27,000 students annually. The system offers a broad range of academic programs including liberal arts, professional degrees, and graduate studies, with a strong commitment to community outreach and research impacting various sectors such as air quality and economic development. The website reflects a well-established educational institution with a clear mission and comprehensive services.
World Anti-Bullying Forumworldantibullyingforum.com
Non-profit · Norway
81Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The World Anti-Bullying Forum (WABF) is a small non-profit organization focused on organizing international forums and conferences to address bullying globally. The website serves as a platform for sharing resources, event information, and fostering collaboration among researchers, practitioners, and policymakers. The organization is based in Norway and has been active since 2018, with a consistent domain registration and professional online presence. Technically, the website is built on WordPress, leveraging modern performance and privacy tools such as WP Rocket and Complianz for GDPR compliance. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and DNSSEC could enhance protection. No critical vulnerabilities or suspicious patterns were detected. Overall, the website reflects a trustworthy and credible non-profit entity with a clear mission and professional digital infrastructure.
Mental Health Innovationsgiveusashout.org
Healthcare · United Kingdom
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
GiveUsAShout.org is the official website for Shout, the UK's first and only 24/7 free, confidential mental health text service. Operated by the non-profit Mental Health Innovations, the platform provides crisis support via text messaging, alongside online resources and community engagement opportunities such as fundraising and volunteering. The website is professionally designed with clear navigation, strong branding consistency, and a focus on accessibility and user experience. It targets individuals in the UK seeking immediate mental health support or wishing to contribute to the cause. The business model relies on donations and volunteer support, positioning Shout as a leading mental health crisis intervention service in the UK. Technically, the website leverages modern web technologies including SVG graphics, JavaScript, and a CDN hosted on DigitalOcean, with DNS managed via Cloudflare. The site is mobile-optimized, fast-loading, and SEO-friendly. While no major CMS or frameworks are explicitly detected, the custom implementation appears robust and well-maintained. Security posture is good with HTTPS enforced and domain status protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The WHOIS data indicates privacy protection for the domain registration, which is justified given the non-profit nature. The domain age aligns with the organization's founding date, supporting legitimacy. No incident response or vulnerability disclosure policies are publicly available, representing an area for improvement. Overall, the site demonstrates a mature security and privacy posture suitable for its sensitive mental health support services. The overall risk assessment is low, with recommendations to enhance DNS security, publish security policies, and implement additional HTTP security headers to further strengthen defenses. The website effectively balances user privacy, accessibility, and trustworthiness, making it a reliable resource for mental health crisis support in the UK.
The Christian Science Monitorcsmonitor.com
Media · United States
77Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The Christian Science Monitor is a reputable international news organization owned by The First Church of Christ, Scientist, with a long history dating back to 1908. It provides award-winning, values-driven journalism aimed at independent thinkers seeking thoughtful and solution-oriented news coverage. The website supports a subscription-based business model with free and paid content, including digital editions, podcasts, and newsletters. Technically, the site uses modern web technologies such as Adobe DTM for analytics, OneTrust for cookie consent, and Bootstrap for responsive design, running on an E-Z Publish CMS platform. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy disclosures and some security headers. WHOIS data is unavailable, which reduces transparency but does not detract from the site's legitimacy given its established brand and ownership disclosure. Overall, the site demonstrates a strong security posture, good privacy compliance, and high business credibility.
Time4Learningtime4learning.com
Education
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Time4Learning operates as an established online homeschooling curriculum provider offering PreK-12 educational content with parent-friendly tools. The website is built on the Shopify platform, leveraging modern e-commerce and marketing technologies such as Google Tag Manager, Facebook Pixel, and Klaviyo for analytics and customer engagement. The site demonstrates good technical maturity with fast performance, mobile optimization, and proper SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site presents a professional and trustworthy online presence suitable for its educational market segment.
Aspen Instituteaspeninstitute.org
Non-profit · United States
77Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
The Aspen Institute is a well-established non-profit organization focused on leadership development, policy dialogue, and educational initiatives aimed at addressing major societal challenges. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeted at policymakers, leaders, and the public interested in social change. The organization leverages modern web technologies including WordPress CMS, Google Tag Manager, and various analytics and tracking tools to monitor and optimize user engagement. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence indicators. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. Overall, the website demonstrates a high level of professionalism and trustworthiness with no detected vulnerabilities or suspicious indicators. The domain WHOIS data is privacy protected, which is typical for non-profit entities and does not detract from the site's legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure program to enhance transparency and security posture.
University of New Hampshireunh.edu
Education · United States
78Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The University of New Hampshire (UNH) is a large, well-established public university focused on providing high-quality education, research, and community engagement primarily in New Hampshire, USA. The website reflects a strong market position as a top-tier research institution with recognized rankings and a comprehensive range of academic and research services. The target audience includes prospective and current students, faculty, researchers, alumni, and the local community. Technically, the site is built on Drupal 10 with modern web technologies and integrates multiple analytics and advertising tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though some security headers could be improved and a formal security policy or incident response contact is absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, supporting the university's brand and mission effectively.
fuckedgay.xxxfucked2gay.pro
Other
77Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
FuckedGay.XXX is an adult entertainment website specializing in free streaming of gay pornographic videos. The site offers a broad library of explicit content categorized for user convenience and updated regularly. It targets an adult audience seeking gay adult content and operates as a niche player in the adult media streaming market. Technically, the site employs modern web technologies including lazy loading and JavaScript libraries to enhance user experience and performance. However, it lacks visible security headers and comprehensive privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data and registrant information reduces the domain's trustworthiness and raises concerns about transparency. Overall, while the site is functional and content-rich, it requires improvements in security posture, privacy compliance, and business credibility to enhance its risk profile and user confidence.
fuckedgay.xxxfuckedgay1cn.com
Media
77Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
FuckedGay.XXX is an adult entertainment website specializing in free streaming of gay pornographic videos. The site offers a wide range of explicit content categorized by themes and tags, targeting an adult audience interested in gay adult content. The business model appears to be based on free access to video content, likely monetized through advertising or affiliate marketing, although no explicit monetization details are provided. The website is positioned as a niche player within the adult media industry, focusing on raw and hardcore gay porn clips updated regularly. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and jQuery, with lazy loading implemented for images to optimize performance. The site is mobile-optimized and provides a functional user experience with clear navigation and search capabilities. However, there is no evidence of a CMS or advanced frameworks, and hosting details are not disclosed. Performance is moderate, with some room for improvement in accessibility and SEO optimization. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or terms of service policies, indicating limited compliance with privacy regulations such as GDPR. No contact or incident response information is available, and WHOIS data is completely absent, likely due to privacy protection. While HTTPS is presumably enabled (given the URL), the SSL configuration and security posture cannot be fully assessed. The absence of transparency and compliance documentation poses risks to user trust and regulatory adherence. Overall, the site is accessible and functional but exhibits weaknesses in privacy compliance, security best practices, and business transparency. Strategic improvements in these areas would enhance trustworthiness and regulatory alignment.
Media
77Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
FuckedGay.XXX is an adult entertainment website specializing in free streaming of gay pornographic videos. The site offers a large categorized library of explicit content targeting an adult audience worldwide, with multiple language options to cater to international users. The business model is based on providing free access to adult videos, likely monetized through advertising and possibly affiliate marketing. Technically, the site uses modern web technologies including lazy loading and structured data to enhance user experience and SEO. Security posture is moderate with HTTPS enforced and some security headers present, but lacks comprehensive privacy and cookie policies, as well as contact information for incident response. The absence of WHOIS data reduces transparency but is common in adult content domains. Overall, the site is functional and professionally designed but could improve privacy compliance and security disclosures.
Gay Porn, Free Gay Porn Videos - BoyFriendTv.comboyfriendtv.com
Media
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
BoyFriendTv.com is an adult entertainment website specializing in free gay porn videos, offering a large collection of user-uploaded and professionally produced content. The platform includes features such as video playlists, verified model programs, community forums, and live sex cams, targeting an adults-only audience. The site uses modern web technologies including React and HLS.js for video streaming and interactive features. While the site enforces HTTPS and includes a cookie consent mechanism, it lacks visible privacy policies, terms of service, and contact information, which impacts its compliance and trustworthiness. The WHOIS data is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site provides a functional and content-rich experience but could improve in security and privacy disclosures.
- CCedexis
ptcfc.com
Technology
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Cedexis is a technology company now integrated as part of Citrix, focusing on enhancing employee experience to increase productivity and engagement. The website serves primarily as an announcement and redirect to Citrix's main site, indicating a strategic consolidation under the Citrix brand. The minimal content and lack of detailed business information suggest the site is maintained mainly for legacy or branding purposes rather than direct customer engagement. Technically, the site is simple, using basic HTML and CSS with no advanced frameworks or CMS detected. There is no evidence of analytics, tracking, or complex scripting, reflecting a low digital maturity level. Security posture is minimal with no visible security headers or policies, and the WHOIS data is unavailable or indicates the domain is not currently registered, which raises concerns about domain legitimacy. Overall, the site is safe but lacks comprehensive security and privacy compliance features.
Name.com, Inc.xlivesex.com
Media
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
xLiveSex.com is an established adult entertainment platform specializing in free live sex webcams and porn chat, affiliated with the well-known xHamster brand. The website offers a broad range of live webcam shows featuring girls, couples, men, and trans models, with interactive features such as toy integration and private shows. The platform targets an adults-only audience and maintains compliance with relevant legal standards including 18 U.S.C. 2257 record-keeping and RTA ratings. Technically, the site employs modern web technologies including React, Redux, and Bootstrap, supported by Cloudflare DNS and CDN services, and integrates analytics and error tracking tools like Amplitude and Sentry. The site is well optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement and content security policies, though DNSSEC is not enabled and no explicit security or incident response policies are published. Contact information is limited to a press email address, with no public phone numbers or physical addresses disclosed. Overall, the site is trustworthy and professionally maintained, serving a large user base in the adult media sector.
Lovenselovense.com
E-commerce
80Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Lovense operates a sophisticated e-commerce platform specializing in adult sex toys, focusing on Bluetooth and app-controlled devices that enhance long-distance intimacy and solo pleasure. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting an adult audience globally. The business model centers on direct online sales of innovative adult products, supported by a comprehensive product catalog and user account features for device control. Technically, the site employs a modern tech stack including jQuery, Swiper.js, and various analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and CSRF tokens implemented, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, Lovense presents a credible and professional online presence in the adult e-commerce sector.
Stripchatbigbreasts4u.com
Media
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Stripchat is a well-established adult live cam streaming platform founded in 2006, offering a wide range of interactive adult entertainment services including live shows, private sessions, and interactive toys. The platform targets an adult audience globally and maintains a strong market position with a large model base and comprehensive service offerings. Technically, the website employs modern web technologies such as React and Redux, integrates multiple analytics and marketing tools, and is hosted with reputable providers ensuring good performance and mobile optimization. Security-wise, the site enforces HTTPS, implements a robust Content Security Policy, and uses monitoring tools like Sentry, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with moderate to high trustworthiness in the adult entertainment sector.
Shemale Porn, Free Tranny Porn Videos - aShemaleTube.comashemaletube.com
Media
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
aShemaleTube.com is an adult entertainment website specializing in transgender and shemale pornography videos. It offers free streaming content, user-upload capabilities, and community features such as forums and chat. The site targets an adults-only audience and emphasizes age verification and parental control advisories. Technically, the site uses modern JavaScript libraries including jQuery and partial React components, with video streaming supported by HLS.js. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and structured data. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is limited, with no clear privacy policy or terms of service found in the analyzed content, though a cookie consent banner is present. WHOIS data is unavailable, reducing trustworthiness and raising concerns about domain registration transparency.