Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
126,901–126,950 of 139,950
- GGoDaddy, LLC
insei.com
Technology · United States
46High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
The domain insei.com is currently a parked domain managed by GoDaddy, LLC, a major domain registrar and parking service provider. The website does not host any active business content or services and primarily serves as a placeholder to offer the domain for sale. The target audience is domain investors or buyers interested in acquiring the domain. The page includes minimal branding consistent with GoDaddy's domain parking service and a Trustpilot widget to indicate some trust signals. From a technical perspective, the site uses basic JavaScript and CSS with third-party scripts for cookie consent management (TrustArc) and customer reviews (Trustpilot). The hosting is provided by GoDaddy, and the page loads quickly with basic mobile optimization. However, there is no evidence of HTTPS usage or advanced security headers, which limits the security posture of the site. Security evaluation reveals a lack of explicit security policies, incident response contacts, or certifications. Cookie consent mechanisms are present, but privacy policy details are minimal and not fully GDPR compliant. No forms or data collection fields are present, reducing risk exposure. The domain registration is consistent with GoDaddy ownership, indicating legitimacy. Overall, the site scores low on content quality and business credibility due to its parked status and minimal content. Security posture is basic with room for improvement, especially in HTTPS implementation and security headers. Privacy compliance is basic with cookie consent but limited policy detail. Strategic recommendations include enabling HTTPS, enhancing privacy disclosures, and providing clearer business and security information to improve trust and compliance.
Atlas Language Schoolatlaslanguageschool.com
Education · Ireland
51Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Atlas Language School is a reputable English language education provider with multiple campuses in Dublin, Malta, Liverpool, and Clare. The school offers a wide range of courses including general and intensive English, exam preparation, teacher training, junior summer programmes, and high school placements. The website reflects a strong market position with multiple accreditations and a focus on delivering quality education and cultural experiences. Technically, the website is built on WordPress using the Avada theme, enhanced with modern libraries such as jQuery, Swiper.js, and Owl Carousel, and optimized for performance with NitroPack. Security measures include HTTPS enforcement and reCAPTCHA integration on forms, indicating a good security posture. Privacy and cookie policies are present and comply with GDPR requirements, supported by visible consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital infrastructure.
Huish Outdoors, LLCbaresports.com
Retail · United States
51Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
BARE Sports is a well-established company specializing in the design and sale of wetsuits, drysuits, and scuba accessories, targeting scuba divers and water sports enthusiasts globally. The company has a strong market position with over 50 years of experience and operates an e-commerce platform built on WordPress and WooCommerce. The website demonstrates good digital maturity with modern technologies, responsive design, and integrated marketing and analytics tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a medium-sized retail business.
Attard & Co Ltd.attardco.com
Retail · Malta
59Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Attard & Co Ltd. is a well-established family-owned business based in Malta, founded in 1921. The company operates primarily in importing and distributing quality products, organized into three main business groups: Imaging, Industrial, and Foodstuffs. Their market position is that of a medium-sized, diversified business with a strong local presence and a focus on customer satisfaction and team development. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress 6.8 using modern plugins such as Yoast SEO, Contact Form 7, and Google Tag Manager. It employs Cookiebot for cookie consent management and Google reCAPTCHA for form security. The site is mobile optimized and uses a contemporary theme (Salient) with good SEO practices. Performance is moderate, with room for improvement in accessibility. From a security perspective, the site uses HTTPS and has implemented reCAPTCHA and cookie consent mechanisms, indicating a good baseline security posture. However, it lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or WAF blocks were detected, but improvements in security headers and transparency are recommended. Overall, the website presents a trustworthy and professional digital presence for Attard & Co Ltd., with a moderate risk profile. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving accessibility compliance to strengthen trust and compliance posture.
Real Estate · Switzerland
46High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website represents a small architectural firm named 'atelier d'architecture stéphane klingele' based in Sion, Switzerland, serving the Valais region. The firm offers architectural services including new constructions, renovations, transformations, and consulting with a focus on environmental and energy respect. The website is built using Infomaniak Site Creator and employs modern web technologies such as jQuery, Bootstrap, and FontAwesome. The site is accessible, mobile-optimized, and provides clear contact information, but lacks comprehensive privacy and security policies. Security posture is moderate with no visible security headers or incident response details, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is functional but could improve in privacy compliance and security best practices.
MJP Interactive Ltdsuperbet.ro
Other · Romania
50Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Superbet.ro is a well-established online gambling and sports betting platform operating primarily in Romania. It offers a variety of betting services including sports betting, casino games, and physical betting agency access. The company is licensed and regulated, with clear legal and compliance documentation visible on the website. The platform targets Romanian-speaking users interested in online gambling and sports betting, supported by mobile applications and extensive sponsorships of sports leagues and teams. Technically, the website uses modern JavaScript frameworks (Vue.js), integrates with major advertising and analytics platforms (Google Tag Manager, Bing Ads), and employs a reputable CDN (Fastly) for content delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a strong security posture, good privacy compliance, and credible business information, making it a trustworthy platform in its sector.
- GGo Mobile Marketing L.L.C.
go-mobile-marketing.com
Technology
30High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Go Mobile Marketing L.L.C. is a small local digital marketing agency specializing in online advertising, web design, SEO, PPC, ecommerce, and social marketing services primarily targeting businesses in the Chicago area. The website presents a professional portfolio and client references, indicating a focus on personalized service and quality design. Technically, the site uses legacy JavaScript libraries such as jQuery 1.7.2 and includes Google Analytics for tracking, but lacks modern security features such as HTTPS and security headers. The absence of HTTPS is a critical security gap that exposes users to potential data interception risks. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is limited to a multi-step form without explicit email or phone contacts. Overall, the site is functional and moderately optimized but requires significant security and privacy improvements to meet modern standards.
Other
41High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website at gewinc.com is currently inaccessible, displaying only a minimal placeholder message in Chinese indicating the site cannot be opened. There is no meaningful content, metadata, or business information available to analyze. The technical infrastructure appears minimal with no detected scripts, forms, or security headers. The site lacks HTTPS, privacy policies, contact information, and any compliance indicators. The WHOIS data is privacy protected, further limiting trust and verification. Overall, the website's digital maturity is very low, and it presents significant risks from a security and compliance perspective.
Homemate.dkhomemate.dk
Retail · Denmark
41High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Homemate.dk is a Danish food service company specializing in ready-to-eat and ready-to-heat meals, catering, and takeaway services. The company operates multiple regional subdomains to serve different localities, positioning itself as a convenient and quality-focused meal provider for busy consumers. The website is built on WordPress with modern design elements and integrates key marketing and analytics tools such as Cookiebot for consent management, Google Tag Manager, and Hotjar for user behavior analysis. Social media presence on Facebook and Instagram supports brand engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating good accessibility and trustworthiness. Overall, Homemate.dk presents a professional and user-friendly digital presence aligned with its business goals.
- NNordnet
nordnet.fr
Telecommunications · France
44High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Nordnet is a French telecommunications provider specializing in very high-speed internet access via fiber, satellite, 4G, and ADSL technologies. The company also offers mobile plans, TV services, cybersecurity solutions including antivirus software, and domain name registration services. The website targets both residential and professional customers in France, providing a comprehensive suite of digital connectivity and security products. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR regulations. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Didomi for consent management, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.
City Procity-pro.info
Education · France
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
City Pro is a well-established French professional training network founded in 2005, specializing in over 200 courses across logistics, transport, construction, and workplace safety sectors. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, it leverages a modern WordPress-based infrastructure with advanced plugins and integrations such as WooCommerce, Elementor, Algolia Search, and multiple analytics platforms including Google Analytics and Matomo. Security practices are good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The site demonstrates compliance with GDPR and provides clear privacy and cookie policies. Overall, City Pro presents a credible, professional, and trustworthy online presence.
- SSite not found
cool.mt
Other
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website at cool.mt is currently inaccessible and serves a standard 404 'Site not found' error page hosted on the Netlify platform. There is no meaningful content, metadata, or business information available, indicating that the site is either not deployed or misconfigured. The technical infrastructure appears minimal with no detected scripts, libraries, or advanced technologies. Security posture cannot be properly assessed due to lack of HTTPS information and absence of security headers or policies. Overall, the site lacks basic compliance and trust indicators, resulting in a very low risk score and poor digital maturity.
IDT Corpidt.net
Telecommunications · United States
54Medium
NIS2 10 · GDPR 45
NIS2 10 · GDPR 45
IDT Corporation is a well-established company specializing in innovative communications and payment services, operating multiple flagship brands such as BOSS Revolution and net2phone. The company has a strong market position as a leader in both retail and wholesale international voice and data services, as well as fintech solutions including money transfer and payment processing. Their target audience includes both consumers and businesses seeking affordable and reliable international communication and payment services. The website reflects a mature, large-scale enterprise with a history dating back to 1990. Technically, the website is built on WordPress with modern technologies including Google Analytics, Google Tag Manager, jQuery, and SEO optimizations via Yoast. The site is mobile-optimized, accessible, and performs moderately well. It integrates various external domains related to its subsidiaries and partners, ensuring a cohesive digital ecosystem. From a security perspective, the site uses HTTPS with good SSL configuration and includes some security best practices. However, there is room for improvement in implementing additional security headers like Content-Security-Policy and providing explicit incident response contacts or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR, with clear privacy and terms of service policies. The absence of a cookie consent mechanism is a minor gap. The domain registration data aligns well with the company's public information, supporting its legitimacy. Strategic recommendations include enhancing security headers, adding a security.txt file, and implementing cookie consent to further strengthen compliance and trust.
PCextreme B.V.gutzz.com
Technology · Netherlands
46High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website gutzz.com is a minimal placeholder page indicating that the domain is registered for a customer of PCextreme B.V., a Dutch company specializing in domain registration and hosting services. The site provides no direct business content or services but directs visitors to the official PCextreme website for more information. The technical infrastructure is basic, relying on standard HTML and CSS with no advanced frameworks or CMS detected. Mobile optimization and accessibility are minimal but functional. Security posture is weak due to lack of HTTPS enforcement and absence of security headers or policies. No privacy or cookie policies are present, and no contact or incident response information is provided, limiting compliance and trust. Overall, the site serves as a domain parking or holding page rather than an active business site.
BML Group Limitedbetsson.com
Other · Malta
70Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Betsson is a well-established online gaming and betting operator with over 60 years of experience, offering a comprehensive portfolio including casino, live casino, sportsbook, poker, and virtual sports. The company operates under multiple regulated jurisdictions, primarily licensed by the Malta Gaming Authority, and maintains a strong market position with a large, diverse customer base. Their platform is designed for both desktop and mobile users, emphasizing user experience and responsible gaming. Technically, Betsson employs modern web technologies such as Angular, TypeScript, and integrates advanced analytics and marketing tools like Google Tag Manager and Optimizely. Security is robust with HTTPS enforcement, security headers, and AWS WAF for threat detection. Privacy compliance is strong, with clear policies and GDPR adherence. Overall, Betsson demonstrates a mature digital infrastructure and a strong commitment to security and compliance.
LogNet Bloglognet-systems.com
Technology · Israel
51Medium
NIS2 13 · GDPR 25
NIS2 13 · GDPR 25
LogNet Systems is an established software vendor since 2001, specializing in innovative solutions for the travel, utility, and telecom sectors. Their offerings include cloud-based platforms such as WebGuru for travel agencies, Smart Agent as a digital assistant, and MaxBill for comprehensive customer and billing management. The company targets travel agencies and tourism companies, providing them with tailored software solutions to enhance their operations. Technically, the website is built on the Wix platform utilizing React 16.14 and various Wix apps and widgets, indicating a modern and modular infrastructure. The site employs AVIF image formats and includes accessibility features via the ENABLE toolbar, though mobile optimization is basic and the site is not fully responsive. From a security perspective, the site enforces HTTPS and includes some security hardening scripts, but lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional and trustworthy image with clear contact information and consistent branding. However, improvements in privacy compliance, mobile responsiveness, and explicit security documentation are recommended to enhance trust and compliance.
OKRouteokroute.com
Telecommunications · Malta
58Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
OKRoute is a telecommunications company specializing in SMS API solutions, including SMS marketing, two-factor authentication (2FA), and OTP delivery via WhatsApp and HTTPS API. The company targets businesses seeking reliable and scalable messaging services to enhance customer engagement and secure communications. With over 200 customers worldwide and more than 100 partners, OKRoute positions itself as a trusted provider in the global messaging market. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and scripts, ensuring good performance and user experience. Security measures include HTTPS enforcement and anti-spam protections, though explicit security policies and incident response contacts are absent. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates a solid security posture and business credibility, with room for improvement in transparency and compliance documentation.
- SSite is not available
axconstruct.com
Other
38High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The domain axconstruct.com currently hosts no active website content and instead displays a placeholder error page served by WP Engine indicating that the domain is not mapped to any active site. There is no business information, contact details, or policies available on the site. The hosting provider is WP Engine, but the site lacks HTTPS enforcement and any visible security or privacy compliance features. The technical infrastructure is minimal, with no scripts or tracking technologies detected. Overall, the site is inactive and does not provide any meaningful business or security information.
CZ Environmental Solutionsgotradonvt.com
Energy · United States
32High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
CZ Environmental Solutions operates as a specialized radon mitigation service provider based in Vermont, focusing on radon testing, mitigation system installation, and addressing radon in water issues. The company positions itself as Vermont's premier radon specialist, targeting homeowners concerned about radon exposure and lung cancer risks. Their website reflects a small business model with a clear local market focus and professional branding. Technically, the website is built on WordPress using Oxygen Builder and integrates modern web technologies including Google Fonts, Google Analytics, and AOS for animations. The site is mobile optimized with good SEO practices and moderate performance. However, hosting details are not explicitly disclosed. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. Nonetheless, it lacks important security headers and does not publish security or incident response policies. Privacy compliance is limited, with no cookie consent mechanism or GDPR indicators, which could pose compliance risks. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy and security practices to improve trust and regulatory compliance. Strategic improvements in these areas would strengthen the company's digital maturity and customer confidence.
Trees for lifetreesforlife.org.uk
Environmental services · United kingdom
48High
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Other
36High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website 'a-designlab.com' serves as a minimal landing page for a design-focused business or studio named 'A Design Lab'. The site primarily showcases visual content with links to social media platforms such as Instagram and Behance, indicating a focus on portfolio presentation and client engagement through these channels. The business model appears to be service-oriented, targeting potential clients interested in design services, but lacks detailed textual content or comprehensive business information. From a technical perspective, the site is built on WordPress and utilizes common web technologies including jQuery, Tailwind CSS, and FontAwesome. The presence of the Coming Soon plugin suggests the site may be under development or intentionally minimal. Mobile optimization and accessibility are basic, and SEO features are minimal. No advanced frameworks or hosting details were identified. Security posture is limited; the site uses HTTPS but lacks security headers and does not provide privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement capabilities. The absence of contact information and security policies reduces trust and compliance with privacy regulations such as GDPR. Overall, the website presents a low-risk profile due to minimal data collection but suffers from poor content quality, limited business credibility, and weak security practices. Strategic improvements in privacy compliance, security headers, and richer business content would enhance trust and professionalism.
- 5508 Resource Limit Is Reached
dtilmeld.dk
Other · Denmark
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website dtilmeld.dk is currently inaccessible and displays a 508 Resource Limit Is Reached error page, indicating that the hosting environment has exceeded its allocated PHP thread or resource limits. Due to this, no meaningful content, metadata, or business information is available for analysis. The site lacks any visible privacy, cookie, or terms of service policies, and no contact information or social media links are present. The hosting provider appears to be simply.com, but no further technical details are accessible. The absence of HTTPS and security headers further weakens the security posture. Overall, the website is non-functional at this time, severely limiting any assessment of its business or security maturity.
Areto Net Limitedaretonet.com
Technology · Malta
30High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
AretoNet is a Malta-based technology company specializing in CRM, Business Intelligence, and Player Engagement platforms tailored for the iGaming industry. Their flagship product suite includes a CRM & Player Engagement platform and an AI-powered Insights Hub that leverages natural language processing to provide deep analytics and segmentation capabilities. The company targets iGaming operators and suppliers across Europe and the US, offering both direct solutions and white-label options. The website reflects a professional and consistent brand presence with clear service descriptions and client testimonials. Technically, the website employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA for form security. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and security headers. Performance is moderate, and the site is fully accessible without WAF or blocking mechanisms. From a security perspective, the site uses HTTPS and includes reCAPTCHA on forms, but it lacks published privacy and cookie policies, security headers, and incident response information. The contact form relies on client-side validation only, which may expose it to risks. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, AretoNet presents a credible and professional business with a solid technical foundation but should improve privacy compliance and security best practices to enhance trust and regulatory adherence.
Horst Brandstätter Groupplaymobil.fr
Retail · France
56Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
PLAYMOBIL® France operates as the official e-commerce platform for the Playmobil brand in France, offering a wide range of toys and related products targeting children and families. The website is well-branded, consistent with the parent company Horst Brandstätter Group, and provides comprehensive product information, promotions, and customer engagement features such as newsletters and wishlists. The platform leverages modern e-commerce technologies including Salesforce Commerce Cloud, Amplience for media management, and OneTrust for privacy compliance. Security measures such as CSRF tokens and HTTPS are implemented, and the site includes a robust cookie consent mechanism aligned with GDPR requirements. While explicit security policies and incident response contacts are not found, the overall security posture is strong with no critical vulnerabilities detected. The website demonstrates a high level of professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible retail platform.
- Storage Systems Ltd
storagesystems.ie
Manufacturing · Ireland
66Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Storage Systems Ltd is a leading supplier of warehouse and commercial storage solutions in Ireland, offering a wide range of products including racking, shelving, mezzanine floors, and automated storage solutions. The company targets businesses and organizations requiring efficient storage systems, positioning itself as Ireland's top racking and shelving units supplier. The website demonstrates a solid technical infrastructure built on WordPress with modern SEO and accessibility practices, including structured data and mobile optimization. Security posture is strong with HTTPS, cookie consent management, and no visible vulnerabilities. Overall, the site reflects a professional and trustworthy business presence with comprehensive contact information and social media engagement.
- DICEUS
darguzeppadebono.org
Technology · United States
40High
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
DICEUS is a well-established custom software development company founded in 2011, specializing in delivering bespoke software solutions across multiple industries including banking, insurance, fintech, healthcare, logistics, and retail. The company offers a comprehensive range of services such as web and mobile app development, data migration, system integration, IT staff augmentation, and consulting. With a global presence and multiple offices, DICEUS positions itself as a reliable technology partner for enterprises seeking tailored software solutions. The website reflects a mature digital infrastructure with modern technologies and responsive design, supporting a positive user experience and professional branding. Technically, the website leverages a broad technology stack including popular programming languages, frameworks, and cloud platforms. It is built on WordPress CMS and integrates various analytics and marketing tools. The site demonstrates good performance and accessibility, though there is room for improvement in security headers and explicit incident response policies. Privacy policies are present and GDPR compliance is indicated, but cookie consent mechanisms are not implemented. Security posture is solid with HTTPS enabled and secure form handling, but lacks some advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, DICEUS presents a professional, credible, and technically competent online presence suitable for its target B2B audience. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response information to further strengthen trust and compliance.
Sunrise GmbHsunrise.ch
Telecommunications · Switzerland
71Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Sunrise GmbH is a leading Swiss telecommunications provider offering a comprehensive range of services including mobile 5G subscriptions, high-speed internet up to 10 Gbit/s, TV and entertainment packages, and device sales featuring major brands like Apple and Samsung. The company targets both retail and business customers within Switzerland, emphasizing bundled offers and loyalty programs such as Sunrise Moments. The website reflects a mature digital presence with modern technologies, strong SEO, and comprehensive content tailored to its audience. Technically, the site is built on React and Next.js frameworks, leveraging a variety of third-party analytics and marketing tools including Google Tag Manager, OneTrust for consent management, TikTok and Facebook pixels, and Amazon Ads. Hosting is via Amazon CloudFront CDN, ensuring fast performance and global availability. The site is mobile-optimized and accessible, with structured data enhancing search engine visibility. From a security perspective, the website employs HTTPS with strong SSL configuration and several security headers, though it could benefit from additional headers like Content Security Policy and X-XSS-Protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies and active consent mechanisms. Overall, Sunrise GmbH demonstrates a strong security posture, excellent business credibility, and a well-implemented technical infrastructure. The site is professional, trustworthy, and compliant with relevant regulations, making it a reliable platform for customers and partners.
Mace Groupmacegroup.com
Real Estate · United Kingdom
46High
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
Mace Group is a global enterprise specializing in delivery consultancy and construction expertise, offering services such as consultancy, construction management, and project delivery. The company positions itself as a leader blending global experience with local knowledge to deliver iconic projects and sustainable communities. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting clients in the construction and real estate sectors. Technically, the website employs modern technologies including HubSpot for forms, OneTrust for cookie consent, Google Tag Manager, and Microsoft Application Insights for analytics and telemetry. The site is mobile-optimized and accessible, with good SEO practices and performance considered moderate. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no exposed sensitive data detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, representing areas for improvement. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, the website is trustworthy, professional, and compliant with privacy regulations, suitable for an enterprise-level construction consultancy. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure channels, and enhancing direct contact options to improve trust and security posture.
- NNetX Betting Limited
pferdewetten.de
Other · Malta
54Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
pferdewetten.de is an established online horse race betting platform operated by NetX Betting Limited, a Malta-based company licensed by the Malta Gaming Authority (MGA). The website targets primarily German-speaking horse racing enthusiasts and bettors, offering comprehensive race calendars, live streams, and betting options. The platform is regulated under German gambling authorities, ensuring compliance with local laws and player protection standards. The business model focuses on providing a secure and user-friendly betting experience with additional features such as bonuses and support services. Technically, the website employs modern web technologies including React and SVG graphics, delivering a responsive and visually appealing user interface. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Performance is moderate with good mobile optimization and basic accessibility features. SEO and metadata are present but could be enhanced further. From a security perspective, the site uses HTTPS and implements no-cache headers to protect data integrity. Certifications such as MGA licensing and TUV ISO mark reinforce trustworthiness. However, explicit security headers like Content-Security-Policy are not evident, and no dedicated security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. Overall, pferdewetten.de presents a trustworthy and professional betting platform with strong regulatory backing and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and SEO could further enhance its posture and user trust.
Nigerdocknigerdock.com
Energy · Nigeria
64Medium
NIS2 0 · GDPR 45
NIS2 0 · GDPR 45
Nigerdock is a prominent African trade and logistics company operating a free zone and port facilities primarily at Snake Island, Lagos, Nigeria. The company provides integrated services including port terminals, logistics, marine services, and free zone operations, positioning itself as a key enabler of global trade with Africa. The website reflects a mature digital presence built on WordPress with Elementor, featuring multilingual support via Weglot and integration with Google Analytics for performance tracking. Security posture is strong with HTTPS enforced and standard security headers present, complemented by a GDPR-compliant cookie consent mechanism and comprehensive privacy policy. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the site demonstrates good content quality, professional design, and clear navigation, supporting a high level of trustworthiness and business credibility.
DataArtdataart.com
Technology · United States
67Medium
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
DataArt is a global software engineering and consulting company specializing in AI, data analytics, cloud, and custom software engineering services. The company has a strong market position supported by partnerships with major technology providers such as Microsoft, AWS, Google Cloud, Snowflake, Databricks, and Salesforce. Their website reflects a mature digital presence with comprehensive service offerings and global office locations. Technically, the website uses modern frameworks like React and integrates multiple analytics and marketing tools, demonstrating digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a large enterprise business model.
Cosmetica Laboratories Inc.cosmeticalabs.com
Manufacturing · Canada
42High
NIS2 0 · GDPR 45
NIS2 0 · GDPR 45
Cosmetica Laboratories Inc. is a Canadian-based custom cosmetic development and manufacturing company specializing in creating innovative and award-winning beauty products for iconic brands worldwide. The company positions itself as a trend-trailblazer with a strong focus on mindful innovation, operational excellence, and sustainability. Their business model is primarily B2B, serving beauty brands seeking custom product development and manufacturing services. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and marketing analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is hosted on Cloudways, indicating a managed hosting environment. The website demonstrates good SEO practices, mobile optimization, and a professional design, although accessibility features could be further enhanced. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers like Content-Security-Policy and does not publicly disclose a security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and vulnerability disclosure practices are recommended. Overall, the website reflects a mature and professional digital presence with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility to further strengthen trust and compliance.
- LLondon Metropolitan University
londonmet.ac.uk
Education · United Kingdom
58Medium
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
London Metropolitan University is a large higher education institution based in the United Kingdom, offering a wide range of undergraduate, postgraduate, research, and professional courses. The university is recognized for its teaching quality, student experience, and commitment to sustainability. The website reflects a mature digital presence with comprehensive content targeting prospective and current students, staff, and partners. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, hosted likely on a UK Azure CDN. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-optimized for user experience and accessibility.
Deco manufacturing ltd.decomanufacturing.net
Arts and crafts · Malta
40High
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
FCS Asset Management Limitedfcs-am.com
Finance · Malta
39High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
FCS Asset Management Limited is a Malta-based, fully regulated independent UCITS Management Company providing a comprehensive range of fund and asset management services. The company operates with regulatory authorization from the Malta Financial Services Authority and serves a clientele primarily composed of financial institutions and family offices across Europe. Their service offerings include fund management, fund administration, financial advisory, and platform services, positioning them as a key player in the European asset management sector. The website reflects a professional and consistent brand image with clear regulatory and compliance disclosures. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, ensuring a responsive and visually appealing user experience. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility and security header implementation. No blocking or WAF mechanisms interfere with content accessibility. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is clear and consistent, enhancing business credibility. Overall, the website presents a trustworthy and professional digital presence with a solid foundation in security and compliance, though enhancements in privacy consent and security policies would further strengthen its posture.
- Maltese italian chamber of commerce
italiamalta.net
International trade and development · Brazil
29High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Other · Vietnam
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website mypaddly.com operates as an affiliate marketing platform focused on promoting online betting sites that offer free betting credits to new members in Vietnam for the year 2025. It provides curated lists, reviews, and guides to help bettors find trusted betting platforms. The site targets Vietnamese-speaking users interested in gambling promotions and related news. Technically, the site is built on WordPress with common plugins and uses modern web technologies including jQuery, FontAwesome, and Google Analytics for tracking. The design is consistent and mobile-optimized, offering a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks visible security headers and published security or privacy policies, which are areas for improvement. No contact emails or phone numbers are provided, limiting direct communication channels. The domain is relatively new, registered in 2023 with privacy protection, which is typical for affiliate sites but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.
- SSecurity Verification
avtreliability.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website avtreliability.com currently serves only as a security verification gateway, employing Google Invisible reCAPTCHA to prevent automated access. No actual business content, contact information, or policies are accessible due to this security challenge, indicating the site is either under protection by a Web Application Firewall (WAF) or is in a restricted state. The lack of visible content prevents meaningful analysis of the company's business model, services, or market positioning. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA v3 for bot mitigation, but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and compliance documentation such as privacy policies or cookie consent mechanisms are absent, and no contact or social media information is available. Overall, the site appears to be in a locked-down state, limiting trust and usability.
E-commerce
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Winmasters.com is an online sports betting and casino platform targeting English-speaking users. The website offers sports betting and casino games, positioning itself within the e-commerce gambling sector. The business model revolves around online gambling services, catering primarily to sports bettors and casino players. However, explicit company information, including legal name, contact details, and business history, is not present in the analyzed content, limiting full business profiling. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Cookiebot for analytics and cookie consent management. Hosting appears to leverage Amazon S3 for some resources. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or detailed hosting provider information was detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating some GDPR compliance efforts. However, no explicit privacy policy, terms of service, security policies, or incident response contacts are found. Security headers are not visible in the provided data, and no vulnerability disclosures or security.txt files are present. The absence of contact information and trust indicators reduces the overall security posture and business credibility. Overall, the site is functional but basic in content and compliance. Strategic improvements in transparency, security policies, and user trust elements are recommended to enhance credibility and compliance.
Clever Housewifecleverhousewife.com
Media · United States
53Medium
NIS2 0 · GDPR 45
NIS2 0 · GDPR 45
Clever Housewife is a lifestyle and recipe blog focused on providing recipes, travel stories, and lifestyle content primarily targeting home cooks and families. The site operates on a WordPress platform with a well-established presence, leveraging affiliate marketing and advertising networks for monetization. The business maintains a consistent brand identity and offers a privacy policy and cookie consent mechanism, indicating attention to user privacy and compliance. Technically, the site uses modern WordPress plugins and frameworks, including Yoast SEO and MonsterInsights for analytics, ensuring good SEO and performance. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is trustworthy and professionally maintained, with room for enhanced security policies and contact transparency.
Scottish National Blood Transfusion Servicescotblood.co.uk
Healthcare · United Kingdom
51Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
The Scottish National Blood Transfusion Service operates the website scotblood.co.uk as the primary platform for blood donation services across Scotland. The site provides comprehensive information about blood, plasma, and platelet donation, current blood stock levels, and donor registration. It targets potential and existing blood donors within Scotland, positioning itself as a trusted, official healthcare service affiliated with the NHS. The website demonstrates a high level of professionalism, with clear navigation, responsive design, and rich content tailored to its audience. From a technical perspective, the site employs modern web technologies including Google Tag Manager, Google Maps API, and responsive CSS frameworks. It uses HTTPS with good SSL configuration and includes privacy-conscious analytics with IP anonymization. The cookie consent mechanism is robust, allowing users to opt-in for analytics cookies, reflecting good privacy compliance. Accessibility and SEO practices are well implemented, contributing to a positive user experience. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the site could improve by adding explicit security headers and publishing a vulnerability disclosure policy or security.txt file. Incident response contact details are not explicitly provided, which could be enhanced to improve security readiness. Overall, the website is trustworthy, well-maintained, and aligned with its public health mission. Strategic recommendations include enhancing security transparency, formalizing vulnerability disclosure, and publishing incident response contacts to further strengthen trust and compliance.
Wyzerwyzer.ai
Computer software
66Medium
NIS2 5 · GDPR 70
NIS2 5 · GDPR 70
Elsie Groupelsiegroup.com
Energy · Switzerland
53Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Elsie Group is a specialized energy sector company providing turnkey technical assistance and services focused on high voltage (HV) and medium voltage (MV) switchgear, power stations, and platforms. Their expertise spans construction, commissioning, operation, supervision, testing, management, and training, with a strong emphasis on personnel secondment that incorporates social, legal, and tax considerations. The company positions itself as a customer-centered service provider with a commitment to health and safety, serving clients internationally with a network of reputable partners such as Siemens, Schneider Electric, and EDF. Technically, the website is built on WordPress with a mature technology stack including Revolution Slider and jQuery. The site is mobile-optimized, well-structured, and incorporates modern web practices such as cookie consent management and Google Analytics tracking. Performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the business claims, indicating legitimacy. Overall, Elsie Group’s digital presence reflects a professional and trustworthy energy services company with room for improvement in security best practices and transparency around incident response. The risk profile is low, with recommendations to enhance security headers and update platform components regularly.
Other
30High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website pabloalabau.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content and no metadata or business information. This indicates that the site is either restricted by server permissions or under maintenance, preventing any meaningful content or service delivery. Due to the lack of accessible content, no information about the company's business model, services, or market positioning can be determined. The technical infrastructure appears minimal or misconfigured, with no detectable technologies, scripts, or security headers. The security posture is weak, as the site does not provide HTTPS confirmation or security best practices, and the access restriction itself may indicate misconfiguration or intentional blocking. Overall, the site presents a high risk of unavailability and lacks transparency, which negatively impacts trust and credibility.
- Khyrat Alsharq Holding Company
kasco.com.sa
Other · Saudi Arabia
31High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Khyrat Alsharq Holding Company operates as a diversified holding company in Saudi Arabia with subsidiaries in education, health care, energy, food supply, and training sectors. The website titled 'KASCO' presents the company as a regional player emphasizing integration, quality, leadership, and trust. The digital presence includes social media links and multimedia content but lacks modern security and privacy features. Technically, the site uses older JavaScript libraries and deprecated Flash content, indicating a need for modernization. Security posture is weak due to absence of HTTPS enforcement and security headers, and no privacy or cookie policies are present, exposing compliance risks. Overall, the site is functional but requires significant improvements in security, privacy, and technical modernization to meet current standards.
MarketPlaymarketplay-web.com
E-commerce
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
MarketPlay is a small-sized full-service online marketing and advertising agency established around 2020. The company specializes in affiliate marketing, search engine marketing, and e-commerce solutions, aiming to help businesses grow by maximizing online exposure and ROI. The website is built on WordPress using Elementor and OceanWP theme, featuring professional design and good SEO practices. Security measures include HTTPS and Google reCAPTCHA on forms, but lack security headers and explicit privacy or cookie policies. Contact is provided only through a web form without direct email or phone contacts. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and security best practices.
CompetitionLabscompetitionlabs.com
Technology · Malta
51Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
CompetitionLabs is a Malta-based technology company specializing in real-time gamification platforms designed to boost user engagement, particularly in the e-gaming sector. Their platform offers a comprehensive suite of gamification tools including tournaments, challenges, jackpots, dynamic segmentation, and personalized user journeys. The company positions itself as an industry leader in gamification transformation with a B2B SaaS business model targeting businesses seeking to enhance player engagement through gamified experiences. Technically, the website is built on WordPress using Visual Composer and integrates modern JavaScript libraries and tracking tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some advanced security headers are missing. The platform emphasizes GDPR compliance with a clear cookie consent mechanism and comprehensive privacy policies. From a security perspective, the site uses HTTPS and anonymizes data to comply with privacy regulations. However, explicit security policies and incident response contacts are not published, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details align well with the business claims, supporting the legitimacy of the company. Overall, CompetitionLabs presents a professional and trustworthy online presence with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and incident response readiness would further enhance their security posture and trustworthiness.
Erasmus MCerasmusmc.nl
Healthcare · Netherlands
63Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Erasmus MC is a leading academic medical center based in the Netherlands, providing specialist patient care, scientific research, and medical education. The website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, and researchers. It features multiple specialized institutes and offers extensive navigation and resources in Dutch, with some English content for research. The technical infrastructure uses modern JavaScript libraries and asynchronous loading for performance optimization. Security posture is strong with HTTPS and basic security headers, though there is room for improvement in explicit security policies and headers. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates high professionalism and trustworthiness, supporting Erasmus MC's market position as a top healthcare institution.
Sullivan Maritimesullivanmaritime.com
Transportation · Malta
58Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Sullivan Maritime is a well-established maritime services company based in Malta, operating since 1996. The company specializes in cargo handling, maritime agency services, and car transport, targeting businesses and consumers connected to the shipping industry. Their website reflects a professional and consistent brand presence with clear service offerings and customer testimonials, positioning them as a trusted local maritime service provider with international connections. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, with Google reCAPTCHA implemented for form security. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security-wise, the site enforces HTTPS and uses reCAPTCHA but lacks important security headers and published security policies, which could be improved to enhance trust and compliance. Overall, the domain registration details align well with the business claims, supporting the legitimacy of the company.
All digital (formerly telecentre europe)telecentre-europe.org
Civic & social organization · Belgium
33High
NIS2 43 · GDPR 43
NIS2 43 · GDPR 43