Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
127,451–127,500 of 139,950
- FABRICations.
fabrications.nl
Real Estate · Netherlands
45High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
FABRICations is a specialized urban design consultancy based in the Netherlands, focusing on sustainable and innovative solutions for urban environments. Their expertise spans energy transition, climate adaptation, and healthy urbanism, positioning them as thought leaders in the real estate and urban planning sector. The website reflects a professional and modern digital presence built on the Squarespace platform, featuring project highlights and a podcast to engage their audience. Technically, the site is well-implemented with HTTPS, HSTS, and modern web technologies, ensuring good performance and security. However, the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.
Other
48High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website multilotto.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block. The page presented is a standard Cloudflare block page indicating that the user has been blocked from accessing the site due to security rules triggered by the user's actions or IP. As a result, no actual business content, metadata, or contact information is available for analysis. The technical infrastructure appears to be protected by Cloudflare, but no further details on the underlying technology stack or hosting provider can be determined from the blocked page. Security posture cannot be fully assessed due to lack of access to the real site content. Overall, the site is currently non-functional for analysis purposes, and the risk assessment is limited by this access restriction.
- BOSS. Gaming solutions
bossgs.com
Technology
30High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
BOSS. Gaming solutions is a specialized software developer focused on the online casino and gambling industry, offering turnkey and white label casino platforms along with proprietary products like the BOSS. Platform and ThunderSpin games. The company targets online casino operators and igaming businesses, positioning itself as a top-tier provider in this niche market. The website content is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience. Technically, the website employs modern web technologies including HTML5, CSS3, and JavaScript, integrated with popular analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Gravitec push notifications. While the site uses HTTPS as indicated by canonical URLs, explicit security headers and CMS details are not evident, suggesting room for improvement in technical security hardening and infrastructure transparency. From a security perspective, the site shows basic adherence to best practices with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for compliance and trust in the gambling software sector. Privacy compliance is basic, with a cookie consent banner and privacy policy present but no strong GDPR indicators. Overall, the website presents a moderate risk profile with good business credibility but opportunities to enhance security posture, privacy compliance, and transparency. Strategic improvements in security headers, incident response readiness, and detailed policy disclosures would strengthen trust and regulatory alignment.
UKRSIBBANK BNP Paribas Groupukrsibbank.com
Finance · Ukraine
61Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
UKRSIBBANK BNP Paribas Group is a major Ukrainian bank established in 1990 and part of the international BNP Paribas financial group since 2006. It offers a wide range of banking and financial services targeting private individuals, small and medium businesses, corporate and premium clients. The bank positions itself as a modern, innovative institution adapting to changing market realities and emphasizing sustainable development and social responsibility. The website reflects a professional and comprehensive digital presence with clear branding and extensive product information. Technically, the website is built on WordPress using modern JavaScript libraries such as jQuery and Swiper.js, with integration of Google Analytics, Microsoft Clarity, and Google reCAPTCHA v3 for security and analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and anti-bot measures, but lacks some security headers and explicit cookie consent mechanisms. Overall, the bank demonstrates a mature digital infrastructure and a solid security baseline appropriate for a financial institution. The domain registration data aligns well with the bank's history and legitimacy, reinforcing trustworthiness. However, improvements in privacy compliance and security header implementation are recommended to enhance user trust and regulatory adherence. Strategic recommendations include implementing a cookie consent banner, publishing incident response and vulnerability disclosure policies, enhancing accessibility compliance, and regularly auditing third-party scripts for vulnerabilities.
The lotter enterprisesthelotter.com
Internet · Belize
50Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
- SSite Not Configured | 404 Not Found
coast2coast.co.za
Other
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website coast2coast.co.za currently displays a 404 error page indicating that the domain is pointed to WP Engine hosting but is not configured for an active account. There is no accessible business content, metadata, or structured data available to analyze. The site lacks any privacy, cookie, or terms of service policies, and no contact information or forms are present. The hosting provider is identified as WP Engine from the page content. Technically, the site is minimal and does not demonstrate any modern web technologies or CMS usage. Security posture cannot be assessed due to lack of content and configuration. Overall, the site is non-functional and provides no business or security information.
Accreda Ltdaccreda.eu
Technology · Malta
51Medium
NIS2 43 · GDPR 15
NIS2 43 · GDPR 15
Accreda Ltd is a Malta and UK based technology company specializing in ERP systems, web-based solutions, and ICT consultancy services. Positioned as a leader in Malta for enterprise-level software solutions, Accreda offers a comprehensive suite of services including Microsoft Dynamics NAV/365 Business Central ERP, technical consultancy, blockchain collaboration, and technology support services. Their target audience includes businesses across various sectors such as remote gaming, manufacturing, retail, and professional services seeking integrated and customized IT solutions. The company emphasizes customer satisfaction and technical expertise, supported by their Microsoft partnership and a strong digital presence. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder, Contact Form 7, and Yoast SEO, hosted likely on WPEngine. The site demonstrates good mobile optimization, SEO practices, and uses Google reCAPTCHA for form security. Cookie consent is actively managed through a compliant banner and scripts, reflecting a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and employs Google reCAPTCHA on forms, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the business claims, showing consistent registration details and domain age appropriate for the company's history. Overall, Accreda presents a professional and trustworthy online presence with good technical and privacy compliance maturity. Strategic improvements could focus on enhancing security headers, publishing formal security policies, and expanding incident response transparency to further strengthen their security posture and trustworthiness.
DF Advocatesdfadvocates.com
Other · Malta
54Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
DF Advocates is a Maltese law firm specializing in a broad range of legal services including financial services, corporate law, gaming, aviation, yachting, shipping, citizenship, real estate, and litigation. The firm targets both international and local clients, positioning itself as a reputable and recognized player in the Maltese legal market, evidenced by rankings in Chambers and Legal 500. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress 6.7.2, utilizing common libraries such as jQuery, Slick Slider, and Google reCAPTCHA for form security. The site is mobile optimized with moderate performance and basic accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and formal vulnerability disclosure mechanisms. Overall, the security posture is good but could be improved by implementing security headers, a cookie consent mechanism, and publishing incident response contacts. The website demonstrates a high level of business credibility with clear contact information and trust indicators such as professional memberships and rankings. No WAF or blocking mechanisms were detected, allowing full content accessibility and analysis.
Bacchus company limitedbacchus.com.mt
Hospitality · Malta
53Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Other
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website vellazammitmckeon.com currently hosts minimal content, consisting solely of a React root div with no visible business or contact information. The domain appears to be parked or unused, with external scripts referencing Google Adsense and a parking-lander service. There is no evidence of an active business presence, privacy policies, or terms of service. The technical infrastructure is basic, utilizing React but lacking SEO, accessibility, and security best practices. Security posture is weak due to absence of HTTPS and security headers. Overall, the site presents a low trust profile with limited digital maturity and no compliance indicators.
Nanushka HUnanushka.hu
E-commerce · Hungary
52Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Nanushka HU operates as a Budapest-based fashion house specializing in e-commerce retail of fashion products with a focus on craftsmanship and responsible production. The website presents a professional and consistent brand image, targeting fashion consumers interested in modern and bohemian styles. The business model is primarily direct-to-consumer online sales supported by lookbooks and store information. Technically, the site is built on Shopify, leveraging modern JavaScript libraries and third-party services for analytics, advertising, and user experience enhancements. Performance and mobile optimization are good, though accessibility could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and professionally maintained, though privacy policy presence and explicit contact details could be enhanced.
- Thrive Labs Ltd
thrivelabs.io
Technology · United Kingdom
35High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Thrive Labs Ltd operates as a digital marketing solutions provider, offering a comprehensive platform that includes a premium advertising network, affiliate marketing programs, analytics, and managed services. Their market position targets businesses seeking to maximize revenue through digital marketing channels. The website reflects a professional and consistent brand image with clear messaging and accessible contact information. Technically, the site is built on Angular 7 with integration of Google Analytics and Tag Manager, indicating a modern and moderately mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is reasonable with HTTPS enforced and cookie consent implemented; however, formal security policies and incident response details are absent, representing an area for enhancement. Overall, the site is trustworthy and functional with moderate user tracking and basic privacy compliance.
BML Group Limitedbetsafe.com
Finance · Malta
70Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Betsafe is a well-established online gambling platform offering a comprehensive range of services including sportsbook, casino games, live casino, poker, and virtual sports. Operated by BML Group Limited under the Betsson Group, it holds multiple licenses including from the Malta Gaming Authority, ensuring regulatory compliance and trust. The platform targets online gamblers primarily in Europe and select international markets, providing a rich portfolio of games and betting options with a strong focus on responsible gaming. Technically, the website employs modern frameworks like Angular, utilizes AWS WAF for security, and integrates advanced analytics and marketing tools, reflecting a mature digital infrastructure. Security practices are robust with HTTPS enforcement, security headers, and ISO 27001 certification, although no public vulnerability disclosure policy was found. Overall, Betsafe demonstrates a high level of professionalism, compliance, and technical sophistication, positioning it as a trusted player in the online gambling industry.
Falcon Money Management LLPfalconmoneymanagement.com
Finance · United Kingdom
48High
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Falcon Money Management LLP is a UK-based asset management firm specializing in investment management solutions for institutional clients. Founded in 2009, the company manages assets totaling approximately US$3.8 billion. The website serves primarily as an informational portal, targeting institutional investors and stakeholders interested in the firm's services and regulatory compliance. The firm positions itself as a regulated and established player in the finance sector with a moderate market presence. Technically, the website employs a simple technology stack with jQuery loaded from a Google CDN and uses basic HTML and CSS for layout. The site lacks advanced frameworks or CMS indications and shows moderate performance and basic mobile optimization. SEO and accessibility features are minimal but present. The site includes multiple compliance documents linked as PDFs or DOCX files, indicating a focus on regulatory transparency. From a security perspective, the site lacks visible HTTPS enforcement and security headers in the provided data, which is a significant concern. The presence of a cookie consent banner and detailed privacy and cookie policies indicates awareness of privacy compliance, including GDPR. However, no incident response contacts or vulnerability disclosure mechanisms are evident. The absence of contact emails or phone numbers on the homepage reduces user trust and accessibility. Overall, the website is functional but basic, with room for improvement in security posture, technical modernization, and user engagement. Strategic recommendations include implementing HTTPS, enhancing security headers, providing clear contact information, and improving mobile and accessibility features to strengthen trust and compliance.
Asytec Dispensers Ltdthebeergiraffe.com
Manufacturing · United Kingdom
39High
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
The Beer Giraffe, operated by Asytec Dispensers Ltd, is a UK-based manufacturer specializing in tabletop beverage dispensers for beer and spirits brands. The company offers a range of customizable products designed to enhance brand visibility and customer engagement at point of sale. Positioned as a global leader in this niche, the business emphasizes bespoke design and owns its production facilities, ensuring quality control and manufacturing expertise. The website reflects a professional and modern digital presence, leveraging WordPress with SEO and performance optimization plugins, and integrates consent management via Cookiebot to comply with privacy regulations. Technically, the website employs a robust infrastructure with HTTPS, Google Tag Manager, Google Analytics, and reCAPTCHA for security and analytics. The site is mobile-optimized and provides a seamless user experience with clear navigation and rich content. Security posture is strong with encrypted connections and consent mechanisms, though explicit security headers and incident response policies are not prominently disclosed. Overall, the security and privacy compliance are well-managed, with GDPR-aligned cookie consent and a comprehensive privacy policy. The absence of exposed vulnerabilities and the alignment of WHOIS data with business claims support the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and providing direct contact details for incident response to further strengthen trust and compliance.
Other
27High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website at zdhconsulting.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. Due to this restriction, no business information, contact details, or policy documents are available for review. The lack of accessible content and metadata prevents a thorough assessment of the company's market position, services, or technical infrastructure. The website's digital maturity appears minimal given the absence of content and security features. From a security perspective, the site does not provide any visible security headers or HTTPS status, and the 403 error suggests access restrictions that may be due to server configuration or security controls. Without access to the site content, it is impossible to evaluate compliance with privacy regulations such as GDPR or to identify any incident response or vulnerability disclosure mechanisms. Overall, the risk assessment is elevated due to the lack of transparency and accessibility. Strategic recommendations include enabling proper access to the website, implementing HTTPS with robust security headers, publishing privacy and cookie policies, and providing clear business and contact information to enhance trust and compliance.
suckgame988.combusinessmeetingsmalta.com
Other · Thailand
45High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website businessmeetingsmalta.com operates as an online baccarat and casino gaming platform primarily targeting Thai users under the brand 918KAYA. It offers a variety of baccarat games, live casino experiences, and supports transactions through Thai banks and online payment systems. The platform is built on WordPress using Elementor, with a moderate level of technical sophistication and SEO optimization. However, the site lacks critical compliance documents such as privacy and cookie policies, and does not provide verifiable contact or business information. The domain registration is privacy protected and does not align with the website's content focus, which raises concerns about transparency and trustworthiness. Security configurations appear minimal with no advanced headers or incident response contacts visible.
Dexter Agencydexter.agency
E-commerce
35High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Dexter Agency is a specialized Conversion Rate Optimization (CRO) agency focused on helping 7 and 8-figure e-commerce stores increase their revenue and profitability through proven methodologies such as the Dexter Method™️. The website presents a professional and well-structured digital presence with rich content including case studies, client testimonials, and partner logos, positioning the company as a trusted CRO partner in the e-commerce sector. Technically, the site is built on WordPress using the Thrive Theme framework, enhanced with modern JavaScript libraries like jQuery and integrated marketing tools such as Klaviyo and Google Tag Manager. Performance optimizations like lazy loading and responsive design are implemented, ensuring a fast and mobile-friendly user experience. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. Privacy compliance is basic, with privacy and cookie policies available but lacking explicit consent mechanisms. Overall, the site demonstrates high business credibility and technical maturity, with room for improvement in privacy compliance and contact transparency.
C.B.H. Spamaterdeihospital.it
Healthcare · Italy
48High
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Mater Dei Hospital, managed by C.B.H. Spa, is the largest private hospital in Bari, Italy, offering a wide range of specialized medical services including cardiology, surgery, oncology, and dialysis centers. The hospital integrates with the national health service to provide comprehensive healthcare. The website is built on WordPress with a professional design, clear navigation, and mobile optimization. It includes detailed information about departments, services, and patient resources. Security measures include HTTPS, cookie consent, and CAPTCHA on forms, though additional HTTP security headers could enhance protection. The domain registration is consistent with the business profile, indicating legitimacy. Overall, the hospital maintains a strong online presence with good privacy compliance and user trust indicators.
- harumslot
vismednet.org
Other · Cambodia
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website 'harumslot' appears to be a small-scale Indonesian language content site focused on providing references and strategies for online slot games. The business model seems to revolve around content provision, possibly with affiliate marketing elements, as indicated by the external login link to a different domain. The site is hosted on Squarespace, using standard web technologies and fonts, with moderate performance and good mobile optimization. However, the site lacks comprehensive business information, contact details, and legal policies such as privacy or cookie policies, which negatively impacts its credibility and compliance posture. Security-wise, the site enforces HTTPS with HSTS, but lacks visible security policies or incident response information. Overall, the site presents low professionalism and trustworthiness, with minimal navigation and basic content quality.
- Error
mekanikapr.com
Other
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website mekanikapr.com currently serves only a Wix default error page indicating that the domain is not connected to any active website. There is no business content, contact information, or policies present. The site uses an outdated AngularJS 1.2.28 and jQuery 2.0.3 technology stack typical of Wix error pages. No security headers or SSL configuration details are evident from the HTML content. The lack of privacy, cookie, and terms of service policies, combined with no contact or business information, results in a very low trust and credibility score. Overall, the site is inactive and provides no meaningful business or security information.
- TTabitha Simmons
tabithasimmons.com
Retail
44High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Tabitha Simmons is a luxury footwear brand founded in 2009 by an award-winning stylist turned designer. The brand focuses on high-quality, couture-like footwear crafted in Italy, targeting fashion-conscious consumers seeking premium products. The website is built on WordPress using Elementor and integrates common marketing and analytics tools such as Google Analytics and Tag Manager. The site offers contact forms and social media channels for customer engagement but lacks direct contact emails or phone numbers. Security measures include HTTPS and Google reCAPTCHA on forms; however, the absence of security headers and published privacy or cookie policies indicates room for improvement in compliance and security posture. Overall, the website presents a professional retail presence with moderate technical maturity and some gaps in privacy compliance.
Betmasterbetmaster.com
Other
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Betmaster is an established online sportsbook and casino platform founded in 2014, offering a wide range of betting and gaming services including sports betting on multiple sports, casino games, live dealer experiences, and bingo. The platform targets online gamblers seeking diverse entertainment options with competitive odds and promotional offers. Technically, the website is built using modern JavaScript frameworks such as React, with performance and mobile optimization considered good. The site uses HTTPS and integrates error monitoring and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies and incident response contacts. Privacy compliance is partial with a cookie policy and consent mechanism but no explicit privacy policy found. Overall, the website presents a professional and trustworthy front with room for improvement in transparency and security disclosures.
- DAN Europe Foundation
daneurope.org
Healthcare · Malta
62Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
DAN Europe Foundation is a well-established non-profit organization specializing in diving insurance and medical assistance for divers across Europe and worldwide. Founded in 1983, it holds a strong market position as the largest diving safety association in Europe, offering a comprehensive range of services including insurance products, emergency medical support, education, and research. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to divers, dive centers, and diving professionals. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries and frameworks such as Alloy UI and Clay UI. It integrates Google Tag Manager and Iubenda for cookie consent management, ensuring compliance with GDPR and other privacy regulations. The site demonstrates good mobile optimization and moderate performance, with accessibility features that could be further enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It employs a robust cookie consent mechanism and does not expose sensitive data or vulnerable libraries. However, it lacks a publicly available security policy, incident response contact details, and vulnerability disclosure information, which are recommended for improving transparency and trust. Overall, DAN Europe’s website is trustworthy, professionally maintained, and compliant with privacy standards. The domain registration details align well with the organization's claims, reinforcing legitimacy. Strategic recommendations include publishing formal security policies, adding incident response contacts, and enhancing accessibility to further strengthen the site’s security posture and user trust.
- GSM
gsmarketing.com
Transportation · United States
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
GSM is a well-established automotive marketing company specializing in omnichannel marketing solutions aimed at increasing customer retention and acquisition for automotive dealerships. With over 30 years of industry experience, GSM positions itself as a trusted partner offering digital, direct, lifecycle, and data-driven marketing services. The company targets automotive dealerships and related businesses primarily in the United States. The website reflects a mature business with consistent branding and a professional online presence supported by HubSpot CMS and marketing automation tools. Technically, the site uses modern technologies including Google Tag Manager, Google Analytics, and various JavaScript libraries to enhance user experience and marketing effectiveness. Security posture is solid with HTTPS enforced and some security headers present, though the absence of explicit cookie consent mechanisms and published security policies indicates room for improvement in privacy compliance and transparency. Overall, GSM demonstrates a credible and professional business presence with good technical implementation and moderate privacy compliance.
- DDaaZ Limited
xyx.in
Technology · United Kingdom
41High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
DaaZ Limited operates an online domain marketplace platform, prominently featuring the sale of domain names such as Xyx.in. The company positions itself as a trusted marketplace with buyer protections including a moneyback guarantee and secure payment options via Stripe, PayPal, and wire transfers. The website targets individuals and businesses seeking to purchase or lease domain names, offering features like making offers and lease-to-own agreements. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates multiple third-party services for analytics, marketing, and customer support. Security practices include CSRF token usage and HTTPS enforcement, though explicit security headers and detailed security policies are not evident. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, functional, and trustworthy, but could improve in privacy and security transparency.
Concierge CPAs™conciergecpas.com
Finance · United States
60Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Concierge CPAs™ is a small, US-based certified public accounting firm specializing in comprehensive financial services including tax preparation, tax planning, accounting, payroll, bookkeeping, and financial advising. The firm targets law firms, consultants, and small businesses, positioning itself as a personalized concierge-style CPA service provider. The website is built on WordPress using the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and secure forms, but lacks important security headers and privacy compliance elements such as a privacy policy and cookie consent mechanism. Contact information is clearly presented with multiple channels including phone, email, physical addresses, and a contact form. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.
Cutrico Ltdcutrico.com
Energy · Malta
48High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Cutrico Ltd is a well-established company founded in 1984, specializing in the supply, installation, and maintenance of heating, ventilation, air conditioning (HVAC), and marine air conditioning equipment in Malta and Gozo. The company positions itself as a market leader in its sector, targeting residential, commercial, and industrial customers. Their website reflects a professional and consistent brand image, offering a broad range of products and services with clear navigation and responsive design. Technically, the website employs modern technologies such as Bootstrap 5, jQuery, Google reCAPTCHA, and Google Tag Manager, ensuring a good user experience and moderate performance. Security measures include HTTPS enforcement, client-side password hashing, and CAPTCHA integration, although some security headers are missing and no explicit security policy or incident response information is published. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website demonstrates a solid digital presence with room for improvement in security best practices and transparency.
Brakspearbrakspear.co.uk
Hospitality · United Kingdom
31High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Brakspear is a well-established hospitality company specializing in tenanted pubs across the United Kingdom, particularly in Oxfordshire and surrounding counties. The company offers opportunities for individuals to run their own pubs with comprehensive support, targeting aspiring pub tenants and hospitality entrepreneurs. The website reflects a strong market position with professional branding, detailed business information, and a focus on community engagement through pub walks and tenant testimonials. Technically, the site is built on WordPress using Elementor and integrates modern web technologies such as Google Maps API and FacetWP for enhanced user experience. Hosting is provided by SiteGround, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, though there is room for improvement in security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website demonstrates high professionalism and trustworthiness, with clear contact information and active social media presence.
Revshare Grouprevshare-group.com
Finance
35High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Revshare Group operates as a leading affiliate marketing company in Scandinavia, focusing on lead generation within the gaming and finance sectors. The company positions itself as a major player providing quality traffic and long-term partnerships, targeting affiliates and advertisers in these industries. The website content is professionally presented, emphasizing their market presence and service offerings, although it lacks detailed business and contact information. Technically, the website is built on WordPress, utilizing standard libraries such as jQuery and custom fonts. The site is mobile optimized and accessible, with moderate performance. However, SEO optimization is basic, and no advanced frameworks or hosting details are evident. The absence of analytics and tracking scripts suggests minimal user tracking. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement. The WHOIS data is privacy protected and the domain is recently registered, which may affect trust and credibility. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and business transparency to enhance trust and regulatory adherence.
Doneo Co. Ltddoneo.com.mt
Retail · Malta
47High
NIS2 5 · GDPR 20
NIS2 5 · GDPR 20
Doneo Co. Ltd is a Malta-based company specializing in audio and video products, offering a wide range of consumer and professional AV equipment through both retail and e-commerce channels. The company positions itself as an official distributor for premium brands and provides custom installation services, targeting both individual consumers and business clients. The website reflects a mature digital presence with comprehensive product categorization and active marketing efforts. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and integrating key analytics and advertising tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and reCAPTCHA integration, though explicit security and incident response policies are not publicly detailed. Overall, the site demonstrates a strong professional and trustworthy online presence with good compliance to privacy regulations.
Inchcape Shipping Servicesiss-shipping.com
Transportation · United Kingdom
57Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Inchcape Shipping Services is a globally recognized provider of port agency, marine services, and digital solutions, operating in over 60 countries with a network of 260 offices and coverage of more than 2200 ports worldwide. The company positions itself as a strategic partner to maritime clients, offering end-to-end solutions to improve operational efficiency and reduce costs. Their website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to industry professionals and stakeholders. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools such as Google Analytics, HubSpot, Cookiebot, and Microsoft Clarity, ensuring robust data collection and user engagement tracking with GDPR-compliant consent mechanisms. Security-wise, Inchcape demonstrates strong practices including HTTPS enforcement, ISO27001 certification, and integration with Cloudflare services, although explicit security headers could be more visible. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and accessible platform. Overall, the website and business exhibit high professionalism, trustworthiness, and compliance, supporting Inchcape's market leadership in the maritime services sector.
Commerg Ltd.commerg.com
Energy · Malta
46High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Commerg Ltd. operates as a specialized broker and trading platform for Guarantees of Origin and other energy attribute certificates across Europe. The company positions itself as a neutral and transparent intermediary, helping businesses source renewable energy certificates at competitive prices through a fixed-fee brokerage model. Their online trading platform facilitates direct market access, real-time data, and instant trades, targeting companies committed to renewable energy sourcing. The website reflects a professional and consistent brand image, supported by structured data and comprehensive privacy compliance managed via Iubenda. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized with good SEO practices and accessibility at a basic level. Security posture is strong with HTTPS, security headers, and form protections, although no explicit security or incident response policies are published. Overall, the site demonstrates a mature digital presence with strong privacy compliance and business credibility. The domain registration aligns with the business claims, enhancing trustworthiness. There are no detected blocking mechanisms or critical vulnerabilities, indicating a stable and secure platform. Strategic recommendations include publishing dedicated security and incident response policies, enhancing accessibility features, and maintaining regular security audits to sustain trust and compliance.
Oceanus Marine Ltd.oceanus-marine.com
Transportation · Malta
48High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Oceanus Marine Ltd. is a Malta-based marine consultancy firm specializing in a broad range of maritime services including dry-docking, ship repair, yacht and ship surveys, vessel superintendence, project management, and conversions. The company targets yacht owners, ship owners, and fleet managers, positioning itself as a professional and experienced service provider with over 28 years of international experience. The website reflects a well-structured business with clear service offerings and a professional digital presence. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA on forms, but lack explicit security headers and published security policies. Privacy compliance is partial, with a cookie policy and consent mechanism present but no privacy policy page found. Overall, the website is trustworthy and professional, though it could improve in privacy and security transparency.
Phoenix Payments Ltdpaytah.com
Finance · Malta
51Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Paytah, operated by Phoenix Payments Ltd, is a financial services company specializing in payment solutions and IBAN accounts, primarily targeting businesses and individuals requiring international payment capabilities. The company has a regulatory history in Malta but has surrendered its MFSA license effective January 2022, ceasing payment service activities. The website presents a professional and consistent brand image with clear business information and contact details, although phone contact is not provided. Technically, the website is built on WordPress using the Avada theme and incorporates multiple third-party marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, and others. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks several important security headers such as CSP and HSTS. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file is present. The extensive use of third-party tracking scripts indicates a high level of user tracking. Overall, the website is legitimate and professionally maintained but could improve its security posture and privacy compliance. Strategic recommendations include implementing stronger security headers, publishing security and incident response policies, and enhancing transparency around data protection practices.
SOC LLCsoc-usa.com
Government · United States
55Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
SOC LLC is a well-established provider of mission-critical services primarily supporting the U.S. Government and defense sectors. Their offerings include security solutions, operations and maintenance, cleared staffing, and architecture and engineering services. The company is positioned as a trusted partner with decades of experience and recognized industry standing, including a Top 100 Defense Company rating. The website reflects a professional and consistent brand image targeting government agencies and contractors requiring high-security and operational support. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as jQuery, Tiny Slider, and Typekit fonts. It integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Facebook Pixel, with a cookie consent mechanism and Google Consent Mode implemented to support privacy compliance. The site is mobile optimized with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust and transparency. Overall, the website and domain WHOIS data indicate a legitimate, mature business with a strong market presence and good digital maturity. The security posture is solid but could benefit from additional transparency and formal vulnerability disclosure mechanisms. The privacy compliance is good, with clear policies and consent mechanisms in place.
Energy · Malta
33High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Value Added Oilfield Services (VAOS) Ltd is a medium-sized company specializing in bespoke engineering and maintenance services for the oil, gas, and petrochemical industries. With a multicultural workforce and multiple international offices, VAOS positions itself as a dynamic and innovative service provider delivering quality projects on time and budget. The website reflects a professional business with clear service offerings and contact information, targeting clients in the energy sector primarily in Malta and surrounding regions. Technically, the website employs a traditional tech stack including jQuery, Bootstrap, and Google Analytics, but uses outdated JavaScript libraries which may pose security risks. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. The presence of a cookie consent banner and privacy policy indicates some attention to privacy compliance, though GDPR compliance is not fully evident. From a security perspective, the site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and uses outdated libraries, which lowers its security posture. No explicit security policies or incident response contacts are provided. The WHOIS data aligns well with the website content, supporting legitimacy. Overall, the site scores as a good website with room for improvement in security and privacy compliance. Strategic recommendations include upgrading JavaScript libraries, implementing security headers, enhancing privacy compliance documentation, and establishing a formal security policy and incident response process to strengthen trust and reduce risk.
Michael Wright / LeMakoolemakoo.com
Other · Malta
51Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
lemakoo.com is a professionally presented artist portfolio website for Michael Wright, known as LeMakoo, specializing in oil paintings with a focus on Maltese and Australian themes. The site effectively showcases the artist's biography, galleries, commissions, and testimonials, targeting art collectors and enthusiasts. Hosted on WordPress.com with modern Gutenberg blocks and Jetpack plugins, the technical infrastructure is solid, offering good mobile optimization and SEO. Security posture is strong with HTTPS and nonce-protected forms, though lacking explicit security headers and published security policies. Privacy compliance is basic, with no cookie consent mechanism or detailed privacy policy. Overall, the site is trustworthy and functional but could improve in privacy and security transparency.
UNSW Sydneyunsw.edu.au
Education · Australia
54Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
UNSW Sydney is a prestigious Australian university with a strong global ranking and a comprehensive offering of educational programs and research initiatives. The website reflects a mature digital presence with advanced content management and marketing technologies, including Adobe Experience Manager and OneTrust for privacy compliance. The site is well-structured, mobile-optimized, and provides clear navigation and rich content tailored to prospective students, researchers, and alumni. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are implemented effectively, supporting GDPR compliance. Overall, the website demonstrates high professionalism and trustworthiness, aligned with the university's reputation.
Recoop Ltd.recoop.com.mt
Other · Malta
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Recoop Ltd. is a Malta-based cooperative specializing in the conservation and restoration of artworks and historic buildings. The company offers a range of professional services including biological disinfestation treatment, condition surveys, restoration treatments, consultancy, laser cleaning, monitoring, and scientific research. Their market position is that of a niche specialist serving both local and international clients in the cultural heritage sector. The website is professionally designed using WordPress and the Avada theme, with integration of modern technologies such as jQuery and Mailchimp for marketing. Social media presence is well established across major platforms. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.
ICScoloricscolor.com
Technology · United States
52Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
ICScolor is a specialized technology company focused on digital color proofing solutions, serving printing professionals and OEMs with products like Remote Director, ProofCheck, and PressCheck. The company positions itself as a world leader in digital proofing, leveraging decades of expertise in color graphics reproduction. Their business model centers on providing B2B software and hardware solutions that streamline color approval workflows and enhance digital color accuracy. Technically, the website is built on a modern WordPress platform with a robust tech stack including WPBakery, Google Analytics, and GDPR compliance plugins, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility with clear contact information and consistent branding. No critical security or compliance issues were detected, making the site trustworthy and professional.
Zampa Partnerszampadebattista.com
Finance · Malta
53Medium
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Zampa Partners is a Malta-based professional services firm established in 2014, specializing in accounting, advisory, audit, tax, ESG, governance, risk and compliance, internal audit, technology and cyber assurance, and VAT services. The firm positions itself as a trusted advisor supporting client growth with strategic solutions and expert advice. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site leverages modern web technologies including Webflow CMS, jQuery, Keen Slider, Google Tag Manager, and various analytics and tracking tools, all delivered over HTTPS with good security practices. Privacy compliance is well addressed with explicit privacy and cookie policies and consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity appropriate for its market segment.
- GGRTU.eu - GRTU Startpagina
grtu.eu
Other
38High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
GRTU.eu is a Dutch language startpagina website that functions as a curated link directory offering categorized external links across various topics such as technology, baby products, pets, finance, and more. The site targets Dutch-speaking users seeking a centralized resource for useful links. The business model is primarily informational, aggregating links to partner and external sites without direct e-commerce or transactional services. The market position is niche and local, with a small scale operation indicated by the limited content and lack of extensive business information. Technically, the website uses Alpine.js for front-end interactivity and has a responsive design suitable for mobile devices. However, there is no evidence of a CMS or advanced frameworks, and performance is moderate. SEO and accessibility features are basic, with minimal meta tags and no structured data or Open Graph tags detected. The site lacks HTTPS information in the provided data, which is a critical security concern. From a security perspective, the site does not display privacy, cookie, or terms of service policies, nor does it provide contact information for security incidents or data protection officers. No security headers or vulnerability disclosures are present. The absence of HTTPS and security headers significantly lowers the security posture. No analytics or tracking scripts were detected, indicating minimal user tracking but also a lack of privacy compliance mechanisms. Overall, the website presents a moderate risk profile due to missing security best practices and compliance documentation. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies with consent mechanisms, enhancing security headers, and providing clear contact information for security and privacy concerns. These steps will improve trustworthiness, compliance, and security posture.
Marketeugf.de
Other
47High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
The website 'Market' operates as a domain marketplace, offering domain names to individuals or businesses looking to start a brand. It is built using GoDaddy Website Builder and hosted on GoDaddy infrastructure. The site is relatively basic in design and content, focusing primarily on domain sales without extensive business or security information. Technically, the site uses modern web fonts and includes Google reCAPTCHA for spam protection on its contact form, but lacks advanced security headers and explicit HTTPS enforcement details. Privacy and compliance documentation such as privacy policy, cookie policy, and terms of service are absent, which limits its compliance posture. Overall, the site presents a minimal but functional domain sales platform with room for improvement in security, privacy, and business credibility.
Other
47High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website copportunities.net is currently a parked domain registered through Gandi.net, with no active business content or services presented. The site displays a minimal placeholder page indicating the domain registration status and provides links to Gandi.net for domain management and WHOIS lookup. There is no evidence of an operational business, no contact information, and no privacy or cookie policies, indicating the site is not currently used for commercial or informational purposes. Technically, the site uses basic HTML, CSS, and a small JavaScript snippet for redirecting users to domain search on Gandi.net. A Content-Security-Policy header is present, which is a positive security measure, but no other advanced technologies, CMS, or analytics tools are detected. The site appears to be hosted by Gandi.net, consistent with the domain registration service. From a security perspective, the site lacks HTTPS information in the provided data, but the presence of a CSP header is a good practice. There are no forms or data collection points, reducing attack surface, but also no privacy or security policies. The lack of business information and policies means compliance with GDPR or other regulations cannot be assessed. Overall, the security posture is minimal but adequate for a parked domain. Given the lack of active content, business information, or security policies, the site scores low on content quality, business credibility, and privacy compliance. The domain is privacy protected, which is typical for parked domains. Strategic recommendations include establishing HTTPS, adding privacy and cookie policies if the site becomes active, and providing clear business and contact information to improve trust and compliance.
Quik Gaming Ltd.quikgaming.com
Technology · Malta
53Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Quik Gaming Ltd. is a Malta-based innovative game development company specializing in live casino and lotto-style games. The company positions itself as a creator of unique, original gaming experiences, targeting online casino operators and players. Their market presence is supported by multiple gaming licenses from reputable authorities including the Malta Gaming Authority, UK Gambling Commission, and Gaming Board of Bahamas. The website reflects a professional and consistent brand image with clear business and contact information, supporting their credibility in the gaming industry. Technically, the site is built on WordPress with modern plugins and integrations such as Google Analytics and reCAPTCHA, indicating a mature digital infrastructure. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and a solid security posture, with no critical vulnerabilities detected.
- Eemoney.com.mt | Cybersquatting
emoney.com.mt
Technology
42High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website emoney.com.mt is currently a parked domain managed by CloudNS, serving as a placeholder page educating visitors about cybersquatting. It does not represent an active business or service but rather informs about domain name abuse and provides links to CloudNS DNS services. The technical infrastructure is minimal, relying on basic HTML and CSS, hosted by CloudNS. There is no evidence of HTTPS enforcement or advanced security measures. The security posture is weak due to lack of SSL, security headers, and privacy policies. No contact or business information is provided, limiting trust and credibility. Overall, the site functions as a parked domain with educational content but lacks business or security maturity.
EMD Maltaemd.com.mt
Finance · Malta
39High
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
EMD Malta is a well-established multidisciplinary legal and advisory firm based in Malta, offering a broad range of services including legal advice, tax consultancy, corporate services, residency and citizenship programs, and trust services. The firm positions itself as a top-tier Malta law firm with a strong international practice and niche expertise in areas such as iGaming, financial services, and blockchain regulation. The website is built on WordPress with a modern tech stack including popular plugins and frameworks, providing a professional and content-rich user experience optimized for desktop and mobile. Security posture is good with HTTPS enabled and use of reCAPTCHA, though some security headers are missing and plugin versions may require updates. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site reflects a credible and professional business with strong trust indicators and partner affiliations.
Topaz Hoteltopaz.com.mt
Hospitality · Malta
48High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Topaz Hotel is a medium-sized, 3-star hospitality business located in Malta, offering accommodation, dining, and leisure services primarily targeting tourists visiting St. Paul’s Bay and surrounding areas. The website is built on WordPress with a modern tech stack including SEO and multilingual support, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the website is professional and credible but could improve in privacy and security transparency.
Siegfriedsiegfried.ch
Healthcare · Switzerland
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Siegfried AG is a well-established contract development and manufacturing organization (CDMO) specializing in pharmaceutical ingredients and finished products. With a history spanning 150 years and a global footprint of 13 production sites, the company holds a strong market position in the healthcare manufacturing sector. Their services cover drug substances, drug products including various dosage forms, and advanced technologies, targeting pharmaceutical companies and healthcare stakeholders worldwide. The website reflects a professional and comprehensive digital presence, supporting investor relations, career opportunities, and sustainability initiatives. Technically, the website is built on WordPress with modern integrations such as HubSpot for marketing and analytics, Vimeo for video content, and CookieYes for cookie consent management. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses secure external scripts but lacks some advanced security headers and explicit security policies or incident response contacts. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain registration data aligns well with the company's identity and history, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.