Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
22,551–22,600 of 99,068
Other
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain adj.st is registered since 2016 with ST Registry and uses NS1 name servers. However, the website content is inaccessible, returning a minimal HTML page with the message 'Url not found'. No metadata, scripts, or business information is available to analyze. This lack of content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site appears to lack HTTPS and security headers, indicating poor security posture. The domain is privacy protected under GDPR, which is common but reduces transparency. Overall, the site is not currently operational or publicly accessible, limiting any further analysis.
Non-profit · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Zoologische Gesellschaft für Arten und Populationsschutz e.V. (ZGAP) is a well-established German non-profit organization dedicated to the conservation of lesser-known and highly endangered animal species. With a history dating back to 1982, ZGAP operates numerous conservation projects across more than 50 countries, focusing on species protection, research, and public awareness. Their website serves as an information hub for members, donors, and the general public, offering project details, membership options, donation opportunities, and event information. The organization maintains a strong social media presence and complies with GDPR through comprehensive privacy and cookie policies.
Non-profit · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH) is a well-established German non-profit organization founded in 1981, dedicated to the conservation of old and endangered livestock breeds. With over 2100 members from diverse backgrounds including agriculture, biology, and veterinary medicine, the organization provides educational resources, workshops, publications, and conservation projects. Their website reflects a professional and consistent brand presence, offering clear navigation and multiple channels for engagement and donations. Technically, the site is built on Joomla CMS with standard web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and an explicit security policy. Overall, the domain and website content align well, indicating a trustworthy and credible online presence.
- DDeutsche Tierpark-Gesellschaft e.V.
deutsche-tierparkgesellschaft.de
Non-profit · Germany
63Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Deutsche Tierpark-Gesellschaft e.V. is a German non-profit organization dedicated to supporting and promoting zoological parks and animal parks. The website serves as an informational and engagement platform for zoo visitors, members, and supporters. It offers event information, organizational details, and resources related to zoological parks. The organization operates within a niche non-profit sector with a clear focus on animal parks in Germany. Technically, the website is built on WordPress, utilizing modern web technologies including JavaScript, PHP, and integrations with Google services such as Google Fonts, Google Maps, and YouTube embeds. The site employs a professional cookie consent mechanism compliant with GDPR, and uses plugins like Real Cookie Banner Pro and Formidable Forms to manage privacy and user interactions. Hosting is provided by rzone.de, with appropriate SSL and security headers in place, indicating a good level of technical maturity. From a security perspective, the website enforces HTTPS, implements security headers, and maintains privacy compliance with a clear cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response information, which could enhance trust and preparedness. Overall, the security posture is solid but could benefit from formalized policies and incident response contacts. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the non-profit organization. Strategic recommendations include adding explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party integrations to mitigate potential risks. These steps will strengthen compliance, security posture, and user trust over time.
- WSW Wuppertaler Stadtwerke GmbH
wsw-online.de
Energy · Germany
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
WSW Wuppertaler Stadtwerke GmbH is a regional utility company based in Germany, providing reliable energy supply and innovative mobility solutions primarily to private customers, businesses, and young people. The company holds a strong market position in the Wuppertal region, offering electricity, gas, district heating, public transport services, and e-mobility solutions. Their digital presence is built on the TYPO3 CMS platform, integrating modern technologies such as Google Tag Manager, Usercentrics for consent management, and Mouseflow for analytics, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and compliant with GDPR, supporting a high level of trust and user experience.
Gemeinschaft der Zooförderer e.V.zoofoerderer.de
Non-profit · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Gemeinschaft der Zooförderer e.V. is a German non-profit association dedicated to supporting zoos and zoo friends through organizing events, publishing reports, and promoting animal conservation. The website serves as a community hub for members and interested parties, providing information on meetings, projects, and the 'Zootier des Jahres' initiative. Technically, the site is built on WordPress with a modern theme and uses HTTPS, ensuring a secure browsing experience. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of explicit contact information and terms of service pages slightly reduces business transparency. Overall, the site is well-structured, content-rich, and trustworthy for its target audience.
Education · Germany
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Verband deutschsprachiger Zoopädagogen (VZP) is a German-speaking non-profit association dedicated to zoo pedagogy, fostering education and interest in biodiversity and conservation through zoos. The website serves as a platform for news, events, and information exchange among zoo educators. Technically, the site is built on the Jimdo Creator CMS, hosted on Jimdo's infrastructure, and employs modern web technologies including jQuery and Swiftype for search functionality. The site is mobile-optimized and provides a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. Overall, the website is professional, content-rich, and trustworthy, serving a niche educational community effectively.
Stadt Wuppertalwuppertal.de
Government · Germany
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.wuppertal.de serves as the official digital presence of the city government of Wuppertal, Germany. It provides comprehensive information and services related to citizen services, culture, education, economy, tourism, politics, and administration. The site targets residents, tourists, businesses, and cultural enthusiasts, positioning itself as a central hub for municipal information and interaction. The business model is that of a public sector entity delivering government services and information digitally. Technically, the website is built on the Sitepark CMS platform, leveraging modern web technologies including responsive design, SVG icons, and privacy-focused analytics via Matomo. Hosting and DNS are managed through Cloudflare, ensuring performance and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs DNSSEC, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and minimal user tracking. However, explicit security policies and incident response contacts are not prominently available, which could be improved. Overall, the website reflects a mature digital infrastructure appropriate for a large municipal government entity. It balances user experience, privacy, and security effectively, supporting its role as a trusted source of official information and services.
- Frogs & Friends e.V.
frogs-friends.org
Non-profit · Germany
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Frogs & Friends e.V. is a German non-profit organization dedicated to amphibian conservation and public awareness through innovative media and interactive content. The website serves as an educational platform offering rich multimedia resources, project videos, exhibitions, and opportunities for citizen participation. The organization targets a general audience interested in environmental conservation and amphibians. Technically, the website employs AngularJS, integrates YouTube APIs, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content quality, though accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response policies. WHOIS data is unavailable due to privacy protection, which is typical for non-profits. Overall, the site is trustworthy, professional, and safe for general audiences.
- Clickonometrics
clickonometrics.pl
Technology · Poland
54Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Clickonometrics operates as an advertising technology platform specializing in ad server solutions and campaign management tools for publishers, advertisers, and ad networks. Founded in 2016 and based in Poland, the company offers services including RTB, SSP, DSP, and various advertising pricing models such as CPC, CPA, CPS, and CPM. The website presents a professional and consistent brand image targeting a niche market within the online advertising ecosystem. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized and structured with clear navigation, though accessibility features are basic. Hosting and domain registration are managed through OVH sas, a reputable provider, with domain status flags enhancing domain security. However, no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and has domain-level protections but lacks visible security headers and explicit incident response or security policies. Privacy compliance is minimal, with a basic privacy policy located on a separate opt-out page and no cookie consent mechanism despite the use of tracking scripts. Contact information is not provided on the landing page, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and more transparent business contact information to strengthen trust and regulatory adherence.
- SSovendus
sovendus.com
E-commerce · Germany
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Sovendus operates as a leading European e-commerce marketing network specializing in voucher distribution, checkout benefits, conversion optimization, and newsletter marketing. The company targets online shops and e-commerce businesses aiming to increase sales, customer acquisition, and customer retention through performance-based marketing solutions. The website demonstrates a mature digital presence with multi-language support, professional design, and comprehensive service descriptions. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries such as Swiper.js and jQuery. It employs SEO best practices and cookie consent mechanisms, indicating compliance with GDPR. Hosting appears to be in Germany with certifications like ISO 27001 and BSI Grundschutz, enhancing trust in data security. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No vulnerabilities or exposed sensitive data were detected. WHOIS data for the subdomain is unavailable but this is typical and not suspicious. Overall, the site is professional, secure, and compliant. Strategic recommendations include enhancing security headers, maintaining regular audits of third-party scripts, and improving direct contact information visibility to strengthen trust and compliance.
- WwebePartners
webetech.pl
Other · Poland
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website webetech.pl currently serves as a minimal placeholder page with a centered logo linking externally to webepartners.pl. There is no substantive content describing the business, its services, or contact details. The domain is registered with OVH SAS since 2020 and secured with DNSSEC, indicating a legitimate registration. However, the lack of privacy policies, cookie consent mechanisms, and contact information limits the site's compliance and trustworthiness. Technically, the site is very basic with no detected scripts, analytics, or modern frameworks, and it lacks SEO and accessibility features. Security posture is moderate due to DNSSEC and HTTPS usage but lacks security headers and incident response information. Overall, the site appears to be a small business or startup with limited digital maturity and minimal online presence.
- WwebePartners
webep1.com
Other
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'webePartners' at webep1.com is minimalistic, serving primarily as a landing page linking to webepartners.pl. The lack of substantive content, contact information, and policies suggests it is either a placeholder or a redirect site rather than a fully developed business website. The domain is well-aged, registered since 2009 with OVH sas, indicating legitimacy in domain registration but not reflected in website maturity. Technically, the site lacks modern features, security headers, and accessibility optimizations, which limits its digital maturity. Security posture cannot be fully assessed due to missing HTTPS confirmation and security headers. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Overall, the site presents a low-risk profile but also low trust and professionalism, requiring significant improvements for business credibility and security.
E-commerce · Poland
73Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
Ceneo.pl is a leading Polish price comparison and product review platform specializing in consumer electronics, home appliances, and various retail categories. The website offers users the ability to find products, compare prices across multiple online shops, and read reviews to make informed purchasing decisions. It targets Polish consumers and operates as a large-scale e-commerce service provider in Poland. Technically, the site employs modern JavaScript frameworks such as RequireJS and Preact, integrates with Google Analytics and Microsoft Application Insights for tracking and performance monitoring, and uses Google Tag Manager for marketing and analytics management. The site is well-structured with good SEO practices and mobile optimization. Security-wise, the site enforces HTTPS and uses anti-forgery tokens and CAPTCHA v3 for form protection, though explicit security headers are not evident in the HTML content. Privacy and cookie policies are not clearly found in the provided content, indicating room for improvement in compliance transparency. WHOIS data for the domain is not publicly available, which is typical for commercial Polish domains but limits direct verification of registrant details. Overall, Ceneo.pl presents a professional, trustworthy, and technically mature e-commerce platform with moderate privacy compliance and good security posture.
Other
64Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The domain buybox.click is registered since 2015 with a reputable registrar, Key-Systems, LLC, and is set to expire in late 2026. However, the website itself is inaccessible, returning a 404 error with no meaningful content or metadata. There are no privacy, cookie, or terms of service policies present, nor any contact or business information visible. The lack of content and absence of security headers or HTTPS details indicate a very low digital maturity and poor technical infrastructure. Security posture cannot be properly assessed due to the absence of accessible content and configuration data. Overall, the site presents a high risk from a business credibility and security perspective, primarily due to its non-functionality and lack of transparency.
Groupement National Interprofessionnel des Semences et plantsgnis-pedagogie.org
Education · France
50Medium
NIS2 — · GDPR 50
NIS2 — · GDPR 50
SEMAE Pédagogie is an educational platform dedicated to providing comprehensive pedagogical resources about seeds, plants, and their uses, primarily targeting teachers and students in the agricultural and seed sectors in France. The website is professionally designed, featuring detailed dossiers, media libraries, and interactive activities such as competitions and educational kits. It serves as a key resource for the French seed industry, supported by the Groupement National Interprofessionnel des Semences et plants, positioning itself as a trusted educational authority in this niche. Technically, the website is built on WordPress with Bootstrap and integrates various modern web technologies including Google Maps API, Font Awesome, and social sharing tools like AddToAny. The site is mobile-optimized and exhibits good SEO practices. Cookie consent is managed via Tarteaucitron, ensuring GDPR compliance. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is incomplete and malformed, which limits domain trust verification; however, the website’s professional presentation and official affiliations mitigate concerns about legitimacy. Overall, SEMAE Pédagogie presents a secure, professional, and content-rich platform with strong educational value. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance further.
BNI Osmose & Comeetsuo.com
Technology · France
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Meetsuo is a French technology company founded in 2023 that offers a SaaS platform designed to enhance the efficiency and quality of professional business meetings. Their solution targets professional networking groups and meeting organizers, providing tools such as attendance tracking, badge generation, QR code stands, photo directories, PowerPoint generation, satisfaction surveys, guest tracking, and payment management. The company positions itself as a niche provider with clear subscription pricing and positive customer testimonials, indicating a growing presence in its market segment. Technically, the website is built on a modern stack including Bootstrap, jQuery, and various UI libraries, hosted by OVH with DNS managed via Cloudflare. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and Google reCAPTCHA is used on the contact form, but DNSSEC is not enabled and no explicit security headers are detected, representing areas for improvement. Privacy compliance is basic with a privacy policy present but lacking explicit GDPR details. Overall, the website is trustworthy and functional but could benefit from enhanced security and privacy practices.
- Garden SPA s. r. o.
gardenspa.sk
Retail · Slovakia
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Garden SPA s.r.o. operates a professional e-commerce website specializing in garden furniture, whirlpools, saunas, wooden flooring, and related accessories primarily targeting Slovak consumers and businesses. The company maintains a showroom in Bratislava and offers a broad product catalog with a focus on quality and design. The website is built on the PrestaShop platform, utilizing common web technologies such as jQuery and Google Tag Manager, and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS enforced and no visible critical vulnerabilities, though some improvements are possible in updating libraries and adding security headers. Overall, the site presents a trustworthy and professional retail presence with clear contact information and partner affiliations.
- Penzion Švihák lázeňský - Ubytování v Jeseníkách - Velké Losiny
ubytovani-losiny.cz
Hospitality · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.ubytovani-losiny.cz represents a family-run pension located in the Jeseníky region of the Czech Republic, offering accommodation services with amenities such as a heated saltwater pool, sauna, and breakfast buffet. The business targets families, couples, individuals, and groups seeking comfortable lodging in a spa town environment. The site is well-structured with clear navigation and detailed service descriptions, supporting a positive user experience. Technically, the site employs modern frontend technologies including Bootstrap 4, jQuery, and Slick Carousel, and integrates Google Analytics and reCaptcha for tracking and security. However, the absence of visible security headers and privacy/cookie policies indicates room for improvement in security and compliance. The WHOIS data is unavailable, which limits domain legitimacy verification and slightly impacts trustworthiness. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.
Pulsor Agencypulsor.agency
Technology
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Pulsor Agency is a specialized digital agency focused on creating world-class, data-driven landing pages tailored for unique projects. The website presents a professional and modern design, emphasizing high perceived value and client testimonials to establish credibility. The agency targets businesses or individuals seeking premium landing page solutions, positioning itself as a premium service provider in the technology sector. Technically, the site leverages Webflow CMS, GSAP animations, and Swiper.js for interactive content, hosted likely on Webflow's infrastructure, delivering fast performance and good mobile optimization. Security posture is moderate; HTTPS is implied but no explicit security headers were detected, and no privacy or cookie policies are present, which is a compliance gap. The WHOIS data is unavailable or malformed, limiting domain trust analysis and reducing overall legitimacy score. Tracking is implemented via Humblytics, but no consent mechanism is evident. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.
What to do today - Eventlandeventland.eu
Other
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Eventland.eu is a European event discovery platform that provides users with up-to-date information on concerts, festivals, parties, sporting events, and other activities across multiple European cities. The website is built on WordPress and leverages modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. SEO optimization is evident through the use of the Yoast SEO plugin and comprehensive meta tags. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though the absence of explicit privacy policies and terms of service indicates room for improvement in compliance and transparency. No blocking or WAF mechanisms were detected, allowing full content accessibility.
Ivibetpalacgorzanow.pl
Other
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Ivibet Kasyno is an online gambling platform targeting Polish-speaking users, offering a wide range of casino games and sports betting services. The website claims to operate since 2019 and holds a Curaçao license, which is a common licensing jurisdiction for online gambling sites. The platform is built on WordPress with standard plugins for SEO and design, providing a professional and mobile-optimized user experience. However, the absence of verifiable WHOIS data and lack of contact or compliance documentation raises concerns about the legitimacy and transparency of the business. Security posture is weak due to missing security headers and lack of disclosed policies, which could expose users to risks. Overall, the site appears functional but lacks critical trust and compliance elements necessary for a high-trust gambling platform.
- PPalác Akropolis
palacakropolis.cz
Media · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Palác Akropolis is a well-established cultural venue and club based in Prague, Czech Republic, with a domain age dating back to 1999. The website serves as a platform to showcase a diverse range of cultural events including music concerts, theater performances, jazz sessions, and other artistic projects. It targets a broad audience interested in cultural and nightlife activities. The business model revolves around event hosting, ticket sales, and cultural programming, positioning itself as a key player in the local cultural scene. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and a cookie consent management tool, ensuring compliance with privacy regulations such as GDPR. The site is mobile optimized and offers a good user experience with clear navigation and professional design. While no major CMS is detected, the site appears to be custom-built or uses a proprietary system. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular categories. However, some security headers like X-Frame-Options and Content Security Policy are not explicitly present, which could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner. Overall, the website is trustworthy, professional, and compliant with relevant privacy laws. It effectively supports the business goals of Palác Akropolis by providing event information, ticketing options, and engaging content. Strategic recommendations include enhancing security headers, continuing to monitor third-party scripts, and possibly adding explicit contact emails and phone numbers for improved user trust and support.
PONEC - divadlo pro tanecdivadloponec.cz
Other · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
PONEC - divadlo pro tanec is a well-established cultural institution based in Prague, Czech Republic, specializing in contemporary dance performances, educational programs, and artist residencies. The website reflects a professional and consistent brand presence, targeting a general audience interested in dance and performing arts. The business model revolves around event hosting, ticket sales, and community engagement through workshops and educational offerings. Technically, the site is built on Drupal 7 with modern front-end libraries and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, with clear contact information and partner affiliations, supporting a positive user experience and compliance with privacy regulations.
Government · United States
72Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
The U.S. Securities and Exchange Commission (SEC) operates the website www.sec.gov as the official federal government portal for securities regulation, investor protection, and market oversight. The site provides comprehensive resources including filings search, rulemaking activities, enforcement news, and educational materials targeted at investors, businesses, and market participants. The SEC is a large, enterprise-level government agency with a long-standing history dating back to 1934, reflected in the authoritative and professional content presented on the site. Technically, the website is built on the Drupal CMS platform, leveraging the U.S. Web Design System (USWDS) for accessibility and responsive design. It integrates modern analytics and tracking tools such as Google Tag Manager and YouTube APIs, ensuring a rich user experience with fast performance and excellent mobile optimization. The site is hosted likely on government infrastructure or via Akamai CDN, ensuring reliability and security. From a security perspective, the site enforces HTTPS and demonstrates good security practices including secure forms and no visible vulnerabilities. While explicit security headers were not fully confirmed in the provided content, the overall posture is strong, consistent with a government entity. Privacy and cookie policies were not explicitly found in the provided HTML snippet, which slightly impacts privacy compliance scoring. Overall, the SEC website is a highly credible, trustworthy, and professionally maintained government resource. It effectively serves its mission to protect investors and maintain market integrity. Strategic recommendations include publishing explicit privacy and cookie policies prominently, ensuring all security headers are set, and maintaining vigilance on third-party scripts to uphold security standards.
- NNerdWallet
nerdwallet.biz
Finance
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
This website is a Cloudflare Access login portal for NerdWallet's staging environment, designed to provide secure authentication for authorized users via Okta SSO. The page itself contains minimal content, primarily focused on user login and identity verification, with no public-facing business information or marketing content. The technical infrastructure leverages Cloudflare's security platform and Okta's identity management, indicating a mature approach to access control and user authentication. However, the lack of publicly accessible content, privacy policies, or contact information limits the ability to fully assess the business or compliance posture from this page alone. Security is strong due to enforced HTTPS and integration with trusted identity providers, but the page is effectively blocked to unauthorized users, restricting content visibility and SEO benefits.
Ondřej Dvořákondrejdvorak.eu
Technology · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Ondřej Dvořák operates a professional web design service primarily targeting small to medium businesses in the Czech Republic. The website showcases a portfolio of web design, e-shop development, and brand identity services, emphasizing effective and efficient online presence. The business positions itself as a quality-focused niche provider with strong client testimonials and social media engagement. Technically, the site is built on WordPress using the Breakdance builder and LiteSpeed caching, providing a modern and responsive user experience with good SEO practices. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partially met with privacy and cookie policies present, though a cookie consent mechanism is missing. Overall, the site is trustworthy and professional, with room for improvement in security and privacy transparency.
- K
Media · Belgium
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Belgium Film is a cultural media platform dedicated to promoting Belgian cinema, operated under the auspices of a Belgian governmental communication office. The website provides information about Belgian films, events, and industry news, targeting film enthusiasts and professionals within the cultural sector. The domain is well-established since 2010 and is registered to a legitimate government-related entity, reinforcing its credibility. Technically, the website is built using modern web technologies such as React and Gatsby, with a focus on responsive design and good user experience. However, there is a lack of advanced security measures such as security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No analytics or advertising scripts were detected, indicating minimal tracking. From a security standpoint, the site lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of security headers and privacy compliance features lowers the security posture score. The WHOIS data supports the legitimacy of the domain, with no suspicious patterns detected. Overall, the website is functional and credible but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.
Deník Nnovydenik.com
Media · Czech Republic
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Deník N is an independent Czech daily news media outlet established in 2015, offering subscription-based and advertising-supported news content primarily targeting the Czech-speaking general public. The website demonstrates a solid market position as a trusted independent news source with a consistent brand presence and good content quality. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, OneSignal for notifications, and Didomi for consent management, reflecting a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though explicit security headers and a published security policy are absent, indicating room for improvement. Overall, the site is trustworthy, privacy-conscious, and professionally maintained, with no signs of malicious activity or content safety concerns.
Visicodvisicod.com
Technology · France
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Visicod is a French digital communication agency specializing in bespoke website creation, SEO and SEA services, and personalized client support. Established since 2008, it serves artisans, small and medium enterprises across France with a focus on clear, effective digital solutions. The website demonstrates a professional and modern digital presence with strong client testimonials and transparent service offerings. Technically, the site uses modern web technologies, includes cookie consent mechanisms, and integrates Google Analytics for performance tracking. Security posture is good with HTTPS and privacy compliance, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection or recent registration, but the website content and structure indicate a legitimate and trustworthy business. Overall, Visicod presents a credible and professional digital agency profile with room for minor technical security enhancements.
- Fundación La Contienda Dehesa Sostenible
fundacionlacontienda.es
Non-profit · Spain
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Fundación La Contienda Dehesa Sostenible is a Spanish non-profit organization dedicated to the preservation of the Iberian pig and its natural habitat, the dehesa. The foundation operates an innovative sustainable farming model and provides educational, research, and promotional services focused on this sector. The website reflects a regional leader position in sustainable agriculture within the Sierra de Aracena and Picos de Aroche natural park. Technically, the site is built on WordPress using the Divi theme, with modern web technologies and GDPR compliance mechanisms in place. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the website is professional, trustworthy, and content-rich, targeting industry members, researchers, and the general public interested in Iberian pig farming and sustainability.
Instituto de Estudios Cajasolinstitutocajasol.com
Education · Spain
57Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Instituto de Estudios Cajasol is a well-established business school based in Sevilla, Spain, offering professional master’s degrees, postgraduate courses, and corporate training primarily targeting professionals and students in Andalucía. The institution has a strong regional presence with a domain registered since 2006, reflecting its longevity and market position. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience and strong SEO performance. Technically, the site leverages WordPress with popular plugins and integrates multiple marketing and analytics tools, including Google Tag Manager and Outbrain, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness with clear contact information and consistent branding.
VERMONT Services Slovakia s. r. o.vermont.cz
Retail · Czech Republic
70Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Vermont.cz is a professional e-commerce website representing a premium international fashion brand offering clothing and accessories for men, women, and children. The site features multiple well-known trademarks and brands, providing a comprehensive online shopping experience supported by physical stores in the Czech Republic. The business model focuses on retail sales with value-added services such as free shipping over a threshold and gift vouchers. Technically, the website employs modern JavaScript frameworks like Vue.js and Inertia.js, integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel, and maintains good SEO and mobile optimization standards. Security-wise, the site enforces HTTPS, implements key security headers, and uses cookie consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data for the domain is a notable gap in trust assessment but does not detract from the professional presentation and operational maturity of the business. Overall, Vermont.cz presents a secure, user-friendly, and content-rich platform suitable for its retail audience.
Selectracomparaiso.cl
Telecommunications · Chile
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Comparaiso.cl is a Chile-based online platform specializing in comparing telecommunications services including internet, mobile, fixed phone, and television plans. It operates under the parent company Selectra, providing consumers with comprehensive options to select the best plans suited to their needs. The website is well-positioned in the Chilean market, partnering with major telecom providers and offering additional services such as speed tests and streaming platform information. Technically, the site is built on Drupal 10, integrates Google Tag Manager for analytics, and uses Cloudflare DNS, reflecting a modern and maintainable infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is good, with clear privacy and cookie policies linked to the parent domain. Overall, the site presents a professional and trustworthy front to users, with clear contact channels and consistent branding.
- Selectra India
selectra.in
Telecommunications · India
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Selectra India operates a comprehensive online platform focused on providing consumers in India with detailed comparisons of mobile, broadband, DTH, and OTT plans. The website is well-structured, leveraging Drupal 10 CMS and modern web technologies to deliver a user-friendly experience. It targets Indian telecom consumers seeking to make informed decisions about their telecom services. The platform positions itself as a trusted partner in telecom decision-making, offering consulting and plan recommendations. Technically, the site uses Google Fonts, Google Tag Manager, and Google Adsense for analytics and monetization, with a cookie consent mechanism in place to comply with privacy regulations. Security posture is solid with HTTPS enforced, though some security headers and explicit privacy policies are missing. No signs of WAF or content blocking were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is professional, trustworthy, and provides valuable telecom information, but could improve privacy transparency and contact availability.
- Selectra
selectra.ie
Energy · Ireland
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Selectra Ireland is a well-established utility and broadband comparison service operating since 2019 in Ireland, part of a larger international group founded in 2016. The company provides consumers with personalized advice and tools to compare and switch energy, broadband, waste, alarm, and insurance providers, aiming to save money on household bills. Their business model relies on affiliate commissions from partner providers, while offering a free service to customers. The website demonstrates a strong market position with a consistent brand and positive customer trust signals such as high Trustpilot and Google reviews. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries and Google Analytics for tracking. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. The site includes GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature digital infrastructure. However, some security best practices like DNSSEC and HTTP security headers could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. No critical vulnerabilities or malware indicators were found. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. Overall, the security posture is solid but could benefit from enhanced DNS security and published security policies. The overall risk assessment is low, with no blocking or WAF challenges detected. Strategic recommendations include enabling DNSSEC, implementing security headers, and publishing incident response contacts to further strengthen trust and compliance.
CallMePowercallmepower.be
Energy · Belgium
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
CallMePower is a Belgian energy-focused service platform established in 2014, offering consumers multilingual support to save on their energy bills. The website is built on Drupal 10 and hosted by OVH, employing modern web technologies and tracking tools such as Google Tag Manager and Pagesense. The site demonstrates good design quality, mobile optimization, and accessibility, providing a positive user experience. However, it lacks explicit privacy policies, terms of service, and contact information, which are critical for trust and compliance. Security posture is adequate with HTTPS and cookie consent mechanisms but could be improved by adding security headers and incident response details. Overall, the site is safe, professional, and moderately trustworthy but would benefit from enhanced transparency and security practices.
Clint Agencyclintagency.com
Technology · France
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Clint Agency is a French digital design agency specializing in product, service, brand, and website design. Founded in 2012, it serves businesses seeking innovative and meaningful digital solutions. The website is professionally designed, mobile-optimized, and rich in content showcasing their services and client projects. Technically, the site uses modern technologies including Webflow CMS, Google Tag Manager, and Axeptio for cookie consent, hosted with OVH and Cloudflare DNS. Security posture is strong with HTTPS and domain locks, though DNSSEC is not enabled. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market niche.
Collectivité Territoriale de Martiniquecollectivitedemartinique.mq
Government · Martinique
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Collectivité Territoriale de Martinique website serves as the official digital presence of the regional government authority of Martinique. It provides residents and stakeholders with access to administrative acts, aid programs, calls for candidatures, cultural events, and satellite information. The site is designed primarily for the French-speaking population of Martinique and aims to facilitate public service information dissemination. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as Bootstrap, FontAwesome, and jQuery. It employs Matomo analytics configured for privacy and Cookiebot for cookie consent management, indicating a commitment to GDPR compliance. The site is mobile-optimized and presents a professional and consistent branding aligned with government standards. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks several advanced security headers and a public vulnerability disclosure policy. The absence of WHOIS data reduces domain registration transparency, but the official branding and social media presence support its legitimacy. Overall, the site maintains a moderate security posture with room for improvement in security headers and incident response readiness. The overall risk assessment is low, with recommendations to enhance security headers, implement a security.txt file, and improve accessibility features to strengthen compliance and trust. The website is suitable for its public service role and demonstrates a good balance between usability, privacy, and security.
- CCNAV - Caisse Nationale d'Assurance Vieillesse Travail Salariés
carsat-sudest.fr
Government · France
50Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website carsat-sudest.fr is a regional portal for CNAV, the French national social security organization responsible for retirement insurance for salaried workers. The domain is legitimately registered to CNAV since 2010, reflecting a well-established government entity. However, the website content is currently inaccessible, presenting only a 400 Bad Request error page citing an 'Unknown locale' issue. This prevents any meaningful user interaction or access to services. The site lacks privacy, cookie, or terms of service policies, and no contact information or external links are present in the provided HTML content. Technically, the site uses basic HTML, CSS, and JavaScript but shows no evidence of modern frameworks, CMS, or security headers. The meta robots tag forbids indexing, further limiting visibility.
- Carsat CentreOuest
carsat-centreouest.fr
Government · France
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Carsat CentreOuest is a French regional government agency providing retirement insurance and occupational health services. The website serves active workers, retirees, enterprises, and partners with comprehensive information and online services. It is well-structured, accessible, and professionally designed, reflecting a mature digital presence. The technical infrastructure is based on Jahia CMS, Bootstrap, and jQuery, with cookie consent and analytics implemented responsibly. Security posture is good with HTTPS and some security best practices, though some headers could be improved. The absence of WHOIS data limits domain trust analysis but the official branding and content indicate legitimacy. Overall, the site is a reliable public service portal with moderate to high trustworthiness.
Bpifrancebpifrance-creation.fr
Finance · France
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Bpifrance Création is a French government-affiliated platform dedicated to supporting entrepreneurs in creating, managing, developing, and transmitting their businesses. The website offers comprehensive resources including financing tools, legal and fiscal guides, expert videos, and event information. It targets entrepreneurs and small business owners primarily in France, positioning itself as a key national resource in the entrepreneurship ecosystem. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and Vuetify, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and secure authentication mechanisms, though some security headers and policies could be improved. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. Overall, the site is professional, trustworthy, and content-rich, serving its audience effectively.
Agence de l'Eau Seine-Normandieeau-seine-normandie.fr
Government · France
62Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Agence de l'Eau Seine-Normandie is a French government water agency dedicated to sustainable water resource management and aquatic environment preservation within the Seine-Normandie basin. The agency provides financial aid, technical expertise, and regulatory oversight to various stakeholders including local authorities, businesses, farmers, and associations. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple online services such as tele-declaration and partner extranet access. The agency actively communicates through newsletters, social media, and publications, reinforcing its role as a key regional environmental actor. Technically, the website is built on Drupal 9, leveraging modern web technologies and frameworks such as Foundation CSS and Matomo analytics for privacy-respecting user tracking. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and formal security policies are absent. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. The domain registration data aligns with the agency's identity and history, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected, making the site a reliable source for its intended audience. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen trust and security culture.
- Agefiph
agefiph.fr
Government · France
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Agefiph is a French non-profit association dedicated to supporting employment development for persons with disabilities. The organization provides financial aids, services, and training to individuals, employers, and training actors. The website is professionally designed using Drupal 10, with modern analytics and marketing tools integrated, including Matomo, Google Analytics, Hotjar, and AB Tasty. It features comprehensive cookie consent management and clear navigation tailored to multiple user profiles. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by official social media presence and related partner domains. Overall, the site is a trustworthy and authoritative resource in its sector.
- MMDDM Brandýs nad Labem - Stará Boleslav
mddmbrandys-boleslav.cz
Education · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MDDM Brandýs nad Labem - Stará Boleslav is a local educational and cultural institution providing courses, events, camps, and creative workshops primarily targeting children and youth in the Brandýs nad Labem-Stará Boleslav region of the Czech Republic. The organization operates as a non-profit entity with strong community ties and partnerships with local government and cultural organizations. The website reflects a well-maintained digital presence with clear navigation and relevant content for its audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various UI libraries, and is mobile optimized with lazy loading for images. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and a formal privacy policy page. WHOIS data is missing, which raises some concerns about domain registration transparency, but the active and professional website presence mitigates this risk to some extent. Overall, the site is trustworthy and serves its community well, but could improve compliance and security practices.
- BBrandýs nad Labem - Stará Boleslav
bezpecnebrandysko.cz
Government · Czech Republic
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website 'Bezpečné Brandýsko' serves as an official local government portal for public safety information in Brandýs nad Labem - Stará Boleslav, Czech Republic. It provides residents and visitors with updates and resources related to municipal police, Czech Police, fire brigade, social prevention, and traffic safety. The site is positioned as a trusted source for local safety news and community alerts. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, and it employs Google reCAPTCHA for form security. While the site uses HTTPS and has a professional design, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data reduces domain registration transparency, but the presence of official contact phone numbers and local government branding supports legitimacy. Overall, the site is functional and serves its public service purpose effectively but could improve in security and compliance areas.
- SEAUTON International
seauton-international.com
Other · Belgium
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SEAUTON International is a Brussels-based company specializing in association management, event organization, communication, branding, and financial processes. As part of the Uhoda Group, it leverages over 20 years of experience to serve associations and corporate clients, focusing on operational excellence and client satisfaction. The website reflects a professional and consistent brand image with clear service offerings and a target audience of associations and event organizers. Technically, the site is built on WordPress using modern libraries such as jQuery, GSAP, and Swiper, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is missing, which raises concerns about domain registration transparency and slightly impacts trust. Overall, the site is functional, professional, and trustworthy but could improve in security and privacy compliance.
Cortijo Social Mediacortijosocialmedia.com
Media · Spain
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Cortijo Social Media is a Spanish communication agency established since 1996, offering services including public relations, event organization, audiovisual production, branding, and communication consulting. The website presents a professional image with clear navigation and good content quality, targeting institutions and companies seeking communication support. Technically, the site is built on WordPress with Bootstrap and jQuery, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or incident response policies. The absence of WHOIS data and domain registration transparency raises concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
Enreda SCAenreda.coop
Technology · Spain
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Enreda SCA is a Spanish cooperative specializing in social transformation through digital participation, OpenData, and product design and development. The company targets public and private institutions seeking to enhance citizen participation, transparency, and sustainability. With over a decade of experience and certification from the Consul Democracy Foundation, Enreda holds a credible market position in the technology and non-profit sectors. Their key services include citizen participation processes, digital participation software, transparency and data visualization, and sustainability consulting. Technically, the website is built using the Eleventy static site generator, leveraging modern JavaScript modules and libraries such as Lunr.js for search and Plausible Analytics for privacy-focused user tracking. Hosting is provided by DigitalOcean, indicating a reliable infrastructure. The site is mobile-optimized with good SEO practices and fast performance, though accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
Fundación Cajasolfundacioncajasol.com
Non-profit · Spain
59Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Fundación Cajasol is a well-established non-profit cultural and social foundation based in Andalucía, Spain, founded in 2006. It offers a broad range of cultural events, educational programs, and social initiatives, positioning itself as a key regional player in these sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to a general audience interested in culture and education. Technically, the site is built on WordPress, hosted on Microsoft Azure DNS infrastructure, and employs common security and compliance plugins such as Wordfence and GDPR Cookie Compliance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.