Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
23,651–23,700 of 99,068
- SYNLAB
eshop-synlab.cz
Healthcare · Czech Republic
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
SYNLAB e-shop is an online platform offering a wide range of laboratory diagnostic tests for self-paying customers, operated by SYNLAB, a leading European provider of laboratory diagnostics. The website targets individual consumers seeking convenient access to health testing services. The platform is built on the Shoptet e-commerce system and integrates multiple analytics and marketing tools with a strong emphasis on user privacy and GDPR compliance. The site features comprehensive product listings, clear navigation, and professional branding, supporting a positive user experience. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial sites. Overall, the website demonstrates a mature digital presence with good compliance and security practices.
Babalácbabalac.sk
Retail · Slovakia
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Babalác is a Slovak e-commerce retailer specializing in high-quality children's toys including Montessori, wooden toys, and magnetic building sets. The website targets parents and caregivers seeking educational and safe toys for young children. It maintains a niche market position with a focus on quality and customer satisfaction, supported by product reviews and bestseller indicators. The business model is primarily online retail with additional content such as a blog to engage customers. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries and integrations with Google Analytics, Facebook Pixel, Hotjar, and other marketing tools. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate with CDN usage and asynchronous script loading. Security posture is strong with HTTPS enforced, standard security headers, CSRF protection on forms, and no exposed sensitive data. Cookie consent mechanisms comply with GDPR, and privacy policies are comprehensive and accessible. However, the site lacks a dedicated security policy or incident response contact information, which could enhance trust and compliance. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing incident response contacts, enhancing accessibility, and maintaining up-to-date third-party libraries to mitigate potential vulnerabilities.
PlenkyLevně.czplenkylevne.cz
Retail · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
PlenkyLevně.cz is a Czech Republic-based e-commerce retailer specializing in baby diapers, particularly the Dada brand, along with related baby care products such as wet wipes and monthly diaper packs. The website targets parents and caregivers seeking affordable and convenient baby care solutions. The business operates a niche online retail model with a clear focus on product variety by size and type, supported by a professional and user-friendly website. The site demonstrates compliance with GDPR and includes standard e-commerce features such as customer support contacts and cookie consent mechanisms. Technically, the website is built on the Shoptet e-commerce platform, leveraging modern JavaScript libraries, Google Analytics, Facebook SDK, and other marketing and tracking tools. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and CSRF protections on forms, but could benefit from additional HTTP security headers. Overall, the website presents a trustworthy and professional online retail presence with no signs of blocking or WAF interference. The lack of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Strategic recommendations include improving security headers and accessibility compliance to further strengthen the site's security and user experience.
- 2din.cz s.r.o.
2din.cz
Retail · Czech Republic
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
2din.cz s.r.o. is a Czech Republic-based company specializing in professional car audio upgrades and vehicle soundproofing services. The company operates an e-commerce platform offering a wide range of automotive audio products including speakers, subwoofers, amplifiers, and accessories, complemented by professional installation and diagnostic coding services. The website targets car owners and automotive enthusiasts primarily in the Czech market, positioning itself as a trusted local specialist with over a decade of experience and thousands of installations. Technically, the website is built on the Shoptet e-commerce platform and utilizes modern web technologies such as jQuery, Bootstrap Icons, Slick Carousel, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a good level of GDPR compliance. From a security perspective, the site enforces HTTPS and implements standard security best practices such as CSRF tokens in forms and cookie consent. However, it lacks a publicly available security policy or incident response information, and no vulnerability disclosure or security.txt file was found. The absence of WHOIS data for the domain is a notable gap, slightly reducing trustworthiness, although the website content and business information appear legitimate and professional. Overall, 2din.cz presents a solid business and technical profile with good security hygiene and privacy compliance. The main risk areas include the missing WHOIS data and lack of explicit security policies. Strategic recommendations include publishing security and incident response policies, implementing vulnerability disclosure mechanisms, enhancing accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.
- Haky
haky.sk
Retail · Slovakia
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Haky is a Slovak-based e-commerce retailer specializing in packaging materials and office supplies. The website offers a broad catalog of products including boxes, films, tapes, bags, envelopes, and labels, targeting businesses and individuals in Slovakia and the Czech Republic. The company emphasizes fast shipping and custom production services, positioning itself as a convenient one-stop shop for packaging needs. Technically, the website is built on the Shoptet platform, leveraging common web technologies such as jQuery, Google Analytics, and Facebook SDK, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a professional and trustworthy online presence with moderate tracking and advertising integrations.
Šperky Olivie.czolivie.cz
Retail · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Olivie.cz is a Czech-based e-commerce retailer specializing in silver and gold jewelry, offering a wide range of products including rings, earrings, bracelets, necklaces, and pendants. The website targets general consumers interested in quality jewelry for various occasions, supported by a loyalty program and affiliate marketing. The company maintains a professional online presence with clear contact information and comprehensive privacy and cookie policies, indicating compliance with GDPR regulations. Technically, the site is built on the Shoptet platform, leveraging modern analytics and marketing tools such as Google Analytics, Facebook SDK, TikTok Pixel, and Klaviyo, reflecting a mature digital marketing strategy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The lack of WHOIS data reduces domain trustworthiness slightly, but the overall business and technical indicators suggest a legitimate and professionally managed online retailer.
- Giovani
giovani.sk
Retail · Slovakia
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Giovani.sk is a Slovak-based e-commerce retailer specializing in luxury scented laundry oils, perfumes, scented candles, and related accessories. The company positions itself as a leading brand in the EU market niche with over 1.5 million customers, offering a wide range of fragrance products inspired by world-renowned perfume brands. The website is professionally designed, with clear navigation and a focus on customer experience, including comprehensive privacy and cookie policies with consent mechanisms.
ArtMoment Events s.r.o.artmoment.cz
Hospitality · Czech Republic
64Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
ArtMoment Events s.r.o. operates a professional experiential art workshop platform in the Czech Republic, offering creative painting events, gift vouchers, and corporate event services. The company targets a broad audience interested in leisure and creative activities, with multiple city locations enhancing market reach. The website is built on the Shoptet e-commerce platform, integrating modern tracking and marketing technologies such as Google Analytics GA4, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, with a strong emphasis on user consent and privacy compliance. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website's professional design, content quality, and business transparency support a high trust level. Overall, the site provides a seamless user experience with clear navigation, rich content, and effective marketing integration.
- TicketingBox
ticketingbox.com
Technology
71Medium
NIS2 37 · GDPR 35
NIS2 37 · GDPR 35
TicketingBox operates a professional, turnkey theater ticketing platform designed to boost ticket sales, simplify audience management, and maximize revenue for theaters and venues. The website demonstrates a solid market position with notable clients such as Shen Yun, showcasing its capability to handle large-scale events across multiple theaters annually. The platform offers comprehensive services including marketing tools, custom branding, reporting, and secure ticketing technology. Technically, the website is built on a modern WordPress CMS with Elementor and integrates Google Analytics and AdSense for tracking and monetization. The site is mobile-optimized and SEO-friendly, providing a good user experience. However, the absence of privacy and cookie policies and missing WHOIS registration data raise concerns about compliance and domain legitimacy. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.
Other
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website www.callendar.tech is a small-scale technology-oriented site built on the Wix platform. It appears to be in an early or minimal content stage, with no explicit business description, contact information, or policy documents visible. The technical infrastructure relies on Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a modern but basic digital maturity. Security posture shows some JavaScript hardening practices but lacks explicit security headers and formal policies, which limits compliance and trust. Overall, the site presents a low to moderate risk profile but requires significant improvements in transparency, privacy compliance, and security best practices to enhance credibility and user trust.
Spinfest Entertainment Ltdspinfest.ch
Other · Czech Republic
72Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Spinfest Casino is an online gambling platform launched in 2023, targeting players primarily in the Czech Republic. It offers a wide variety of casino games including slots, live casino, and jackpots, supported by a Curacao gaming license. The platform emphasizes fast transactions, including cryptocurrency payments, and provides a user-friendly interface with clear bonus offers. The website is professionally designed with good SEO and mobile optimization, leveraging Cloudflare for performance and security. However, contact options are limited to email, and no phone or physical address is provided. Security posture is solid with HTTPS and Cloudflare protection, but could benefit from enhanced security headers and a formal security policy. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, the site is legitimate and trustworthy within the online gambling sector but should improve transparency and security practices to enhance user trust and regulatory compliance.
Paysafecardcasinopaysafecard.cz
Other · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website casinopaysafecard.cz operates as an affiliate marketing platform focused on promoting online casinos that accept Paysafecard as a payment method, targeting Czech players. It provides informational content about casino bonuses, games, and payment safety, positioning itself as a niche player in the Czech online gambling market. The site uses modern web technologies and Cloudflare for hosting and security, ensuring good performance and HTTPS encryption. However, it lacks direct company contact information, terms of service, and cookie consent mechanisms, which impacts its compliance and trustworthiness. The affiliate links all redirect to a single external domain, indicating a focused but limited business model. Security posture is adequate with HTTPS and Cloudflare protection but could be improved with additional security headers and policies.
Plinkoplinkohra.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Plinkohra.cz is a newly established Czech-language website dedicated to the Plinko gambling game, providing detailed information, game mechanics, strategies, and links to online casinos offering Plinko. The site targets Czech players interested in online gambling and offers both demo and real-money play options. It maintains a consistent brand presence with social media channels and includes basic trust signals such as privacy policy, terms of service, and RNG certification. Technically, the site uses modern web standards, Cloudflare for DNS and CDN, and structured data for SEO. Security posture is generally good with HTTPS and Cloudflare protection, though minor concerns exist around the use of eval() in inline scripts and lack of explicit security policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site scores moderately well in content quality, technical implementation, security, privacy, and business credibility, but improvements are recommended in security best practices and privacy compliance.
- Region-Tour.cz, s.r.o.
region-jizerskehory.cz
Hospitality · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Region-Jizerskehory.cz is a regional tourism information website focused on the Jizerské hory and Liberecko areas in the Czech Republic. It provides comprehensive tourist information including accommodation options, tips for trips, active leisure activities, and photo galleries. The site targets tourists and visitors interested in exploring this region, offering a curated selection of hotels, pensions, chalets, and apartments. The business model centers on providing tourism-related content and accommodation listings, positioning itself as a key regional tourism resource. The website is operated by Region-Tour.cz, s.r.o., a small hospitality sector entity.
- Orlické hory - ubytování | výlety | zážitky v Orlických horách
region-orlickehory.cz
Hospitality · Czech Republic
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.region-orlickehory.cz serves as a regional tourism portal focused on the Orlické hory mountain area in the Czech Republic. It provides visitors with comprehensive tourist information, accommodation options, and tips for outdoor activities such as hiking, cycling, and skiing. The site facilitates online accommodation reservations, targeting tourists and visitors interested in this region. The business model centers on tourism promotion and accommodation booking services, positioning itself within the hospitality industry. The content is primarily in Czech and is well structured for its audience, though no explicit business registration or contact details are provided in the accessible content. Technically, the website is built on the Webnode CMS platform and employs a variety of third-party scripts including Google Analytics, Google Tag Manager, SumoMe, ShareThis, and Mailchimp for marketing and analytics purposes. The site uses Amazon CloudFront as a CDN for static assets. Performance is moderate with basic mobile optimization and accessibility features. SEO is adequately addressed with proper meta tags and keywords. From a security perspective, the site lacks visible security headers and does not present privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS lookup failed to retrieve domain registration details, which raises concerns about domain legitimacy and transparency. No WAF or blocking mechanisms were detected, and the site content is accessible without restrictions. The absence of contact information and security policies limits the site's trustworthiness from a security and compliance standpoint. Overall, the website is functional and relevant for its tourism purpose but requires improvements in security posture, privacy compliance, and transparency to enhance trust and meet regulatory standards.
- Region Krkonoše – Ubytování | Výlety | Zážitky
region-krkonose.cz
Hospitality · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.region-krkonose.cz serves as a regional tourism information portal focused on the Krkonoše National Park area in the Czech Republic. It provides visitors with essential information for planning trips, including accommodation options, excursions, active leisure activities, and local experiences. The site targets tourists and visitors interested in exploring the Krkonoše region, positioning itself as a local resource for travel planning and leisure activities. Technically, the website is built on the Webnode CMS platform and utilizes various third-party services such as Google Analytics, Google Tag Manager, SumoMe, and Mailchimp for analytics and marketing purposes. The site is delivered via AWS Cloudfront CDN, ensuring moderate performance and availability. Security-wise, the website employs HTTPS with IP anonymization in Google Analytics, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registrant data suggests privacy protection or non-public registration, which is common for small regional sites but reduces transparency. Overall, the site is functional and provides relevant content for its audience but would benefit from enhanced security practices and privacy compliance to improve trust and regulatory adherence.
- Region-Tour.cz, s.r.o.
region-ceskesvycarsko.cz
Hospitality · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Region-ceskesvycarsko.cz is a tourism information portal dedicated to the České Švýcarsko region in the Czech Republic. It provides comprehensive details on accommodation options, tourist attractions, activities, and travel tips, targeting tourists and visitors interested in exploring this natural and cultural region. The site is operated by Region-Tour.cz, s.r.o., a small hospitality-focused business with a regional market position. Technically, the website is built on the Webnode CMS platform, leveraging modern JavaScript libraries and third-party services such as Google Analytics, Mailchimp, and Sumo for marketing and analytics. The site is served over HTTPS with Cloudfront CDN, ensuring secure and performant content delivery. However, the absence of WHOIS data and lack of privacy and terms of service pages indicate gaps in transparency and compliance. Security posture is moderate with HTTPS and cookie consent implemented but lacking security headers and incident response information. Overall, the website is functional, content-rich, and safe for general audiences but would benefit from enhanced security and compliance measures.
- TTRE.CZ
treq.cz
Technology · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TRE.CZ is a small, modern web development company based in the Czech Republic specializing in professional website creation, including web design, WordPress development, and SEO consulting. The company targets businesses seeking comprehensive digital solutions from initial wireframes to post-launch advertising campaigns. The website is built on WordPress using the Illdy theme and incorporates modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for security. While the site is well-structured and visually professional, it lacks published privacy and cookie policies, which impacts compliance and user trust. The absence of WHOIS registration data limits the ability to fully verify domain legitimacy, although the website content and contact information appear consistent and professional. Security posture is moderate with HTTPS and reCAPTCHA implemented but missing key security headers and formal security policies. Overall, TRE.CZ presents as a credible small business with room for improvement in privacy compliance and security transparency.
Anycoders s.r.o.anycoders.cz
Technology · Czech Republic
55Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Anycoders s.r.o. is a Czech-based full-service digital agency specializing in custom software development, web and e-commerce solutions, and digital marketing services. Founded in 2015 and headquartered in České Budějovice, the company serves clients primarily in the Czech Republic and across Europe. Their market position is strengthened by multiple certifications including Google Partner and partnerships with platforms like Sklik, Heureka, and Shoptet. The company offers a broad range of services from web development to advanced analytics and marketing strategies, targeting businesses seeking digital transformation and e-commerce growth. Technically, Anycoders employs a modern technology stack including Vue.js, Spring Framework, Symfony, GraphQL, Docker, and more, indicating a mature and scalable infrastructure. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a published security policy and incident response details suggests room for improvement. The website demonstrates good privacy compliance with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Contact information is comprehensive, including emails, phone numbers, and a contact form. However, the lack of WHOIS data for the domain introduces uncertainty regarding domain registration legitimacy, which slightly impacts the overall trust score. Overall, Anycoders presents as a professional and trustworthy digital agency with robust technical capabilities and compliance practices. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.
- Panter spol. s r. o.
sennheiser.cz
Technology · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Panter spol. s r. o. operates as the authorized distributor and reseller of Sennheiser audio products in the Czech Republic and Slovakia. The website serves as a commercial platform showcasing a broad range of audio equipment including headphones, microphones, conference systems, and accessories. The company targets both consumer and professional markets, positioning itself as a trusted local leader with a strong partnership ecosystem. The business model focuses on direct sales, authorized servicing, and support for audio technology products.
Deezerdeezer.com
Media · France
71Medium
NIS2 20 · GDPR 95
NIS2 20 · GDPR 95
Deezer is a well-established global music streaming service founded in 2007, headquartered in Paris, France. It offers a comprehensive platform for music lovers to stream millions of songs, playlists, and podcasts. The company targets a broad audience of general music listeners and operates a subscription and ad-supported business model. Deezer maintains a strong market position with consistent branding and a professional online presence. Technically, the website employs modern web technologies including JavaScript frameworks, Segment analytics, and Survicate surveys, ensuring a fast, mobile-optimized, and accessible user experience. The site uses HTTPS with strong security headers, indicating a mature security posture. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data for the domain is unavailable, which is unusual for a major brand and slightly reduces trustworthiness. There is no publicly available explicit security policy or incident response information, which could be improved. Overall, Deezer's website is professional, secure, and user-friendly, with minor gaps in transparency regarding domain registration and security disclosures. Strategic recommendations include publishing detailed security and incident response policies, providing vulnerability disclosure channels, and clarifying domain registration details to enhance trust and compliance.
- SimplyBook.me
simplybook.me
Technology · United States
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
SimplyBook.me is a mature SaaS provider specializing in online appointment booking systems tailored for service-based industries worldwide. Founded in 2011, the company offers a comprehensive platform including booking websites, widgets, mobile apps, payment processing, and integrations with major social media and payment providers. Their market position is strong, supported by ISO 27001 certification and GDPR compliance, appealing to businesses seeking reliable scheduling solutions. Technically, the website is well-structured, mobile-optimized, and leverages modern technologies such as Google Tag Manager and Iubenda for privacy compliance. Hosting is provided by Linode, ensuring robust infrastructure. Security posture is solid with HTTPS enforcement, security headers, and certifications, though DNSSEC is not enabled and no explicit incident response contacts or vulnerability disclosure pages were found. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, making it a credible and secure platform for appointment scheduling.
IRIS Interactiveiris-interactive.fr
Technology · France
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
IRIS Interactive is a French digital communication agency specializing in creating websites, mobile applications, and print media, with a particular focus on the tourism sector. They offer a proprietary WordPress plugin tailored for institutional tourism actors, positioning themselves as a niche player in the digital agency market. The website is professionally designed, content-rich, and targets institutional clients and agencies seeking digital communication solutions. Technically, the site is built on WordPress with modern libraries and tools such as Google Analytics, reCAPTCHA, and Axeptio for cookie consent, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and GDPR consent mechanisms. Overall, the business presents a trustworthy and professional online presence, though WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.
- Bandzone.cz
bandzone.cz
Media · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Bandzone.cz is a well-established Czech online community platform dedicated to music bands, DJs, MCs, and their fans. Founded in 2005, it hosts profiles for over 35,000 groups and 180,000 fans, offering music streaming, downloads, concert listings, videos, and promotional services. The platform integrates ticket sales via SMS Ticket and promotes music education partners, positioning itself as the largest Czech music community online. Technically, the site uses a custom CMS with a mix of legacy and modern technologies including jQuery, Firebase, Google Analytics, and Facebook Pixel. While the site is functional and professionally designed, it uses an outdated jQuery version which poses security risks. Security posture is moderate with HTTPS enabled and basic privacy compliance via cookie consent, but lacks explicit security headers and published security policies. Overall, the website is credible and trustworthy for its audience but would benefit from technical and security updates.
DialOncedial-once.com
Technology · France
70Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
DialOnce is a French technology company specializing in AI-powered omnichannel customer service agents designed to automate and enhance client interactions across multiple sectors including banking, insurance, transport, and public services. The company positions itself as a leader in the French market with over 10 years of expertise and a strong portfolio of enterprise clients. Their solutions include omnichannel AI agents, visual IVR (SVI Visuel), and augmented advisor tools integrated with CRM and CCaaS platforms. Technically, the website demonstrates a mature digital infrastructure leveraging modern web technologies such as Cloudinary for media, HubSpot for marketing and analytics, and Cookiebot for consent management. The site is well-optimized for mobile and SEO, with fast performance and good accessibility. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and cookie consent, though explicit security policies and incident response contacts are not published. The domain is recently registered with privacy protection, consistent with a professional tech company. Overall, DialOnce presents a credible, professional, and trustworthy digital presence with strong business and technical foundations.
- Ბბათუმის ესკორტი
erotikmarketi.com
Other · Turkey
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website erotikmarketi.com operates as an escort service agency primarily targeting adult clients in Georgia and Turkey, offering VIP escort girls for meetings, travel, and events. The business positions itself as an elite provider with a focus on quality and discretion. The technical infrastructure leverages AMP technology for fast mobile performance and uses Cloudflare for DNS and CDN services, indicating a modern and optimized setup. However, the site lacks critical privacy and cookie policies, and no incident response or security contact information is provided, which are important for compliance and trust. Security headers are minimal, and DNSSEC is not enabled, suggesting room for improvement in security posture. Overall, the domain is well aged and registered with a legitimate Turkish registrar, consistent with the business location and claims.
KASPER KOVO s.r.o.kasperkovo.cz
Manufacturing · Czech Republic
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
KASPER KOVO s.r.o. is a Czech Republic-based manufacturing company specializing in sheet metal processing and production of pressure vessels with over 30 years of experience. The company offers comprehensive metalworking services including design, sampling, and production of components and assembled machines, serving a global customer base. The website reflects a professional and modern digital presence built on the Solidpixels CMS platform, integrating multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. Security posture is solid with HTTPS enabled and cookie consent implemented, though the absence of security headers and privacy policy pages indicates room for improvement. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the business information and online presence suggest legitimacy. Overall, the site is well-structured, mobile-optimized, and provides clear business information and social media links, supporting a medium-sized manufacturing enterprise within the KASPER GROUP.
İstanbul Escortescortfly.com
Other · Turkey
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Escortfly.com is a Turkish escort service listing website primarily targeting adult users seeking escort services in Istanbul and other Turkish cities. The site offers listings, blog content, and service information related to escort services. Technically, the site is built on WordPress with LiteSpeed caching and uses Cloudflare DNS. The website is mobile optimized and SEO friendly but lacks critical privacy and security policies. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. No contact information or incident response details are provided, which limits transparency and trust. Overall, the site is functional and content-rich but requires improvements in privacy compliance and security best practices.
- OOnestein B.V.
onestein.nl
Technology · Netherlands
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Onestein B.V. is a Dutch company specializing in open-source business software solutions, prominently featuring their CURQ ERP system based on Odoo Community. They provide consultancy, support, and custom development services tailored to businesses ranging from startups to enterprises, with a strong emphasis on Dutch financial compliance and community management. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site runs on Odoo CMS, uses Matomo for analytics, and employs modern web technologies such as Bootstrap and FontAwesome. Security posture is solid with HTTPS enforced, CSRF tokens present, and DNSSEC enabled, though the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Devo Fine Art Printdevofineartprints.com
E-commerce · United States
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Devo Fine Art Print operates an e-commerce platform specializing in limited edition, signed collectible art prints related to the band DEVO and renowned photographers. The website is built on Shopify, leveraging its secure and scalable infrastructure to provide a professional online shopping experience. The business targets collectors and fans seeking exclusive memorabilia with authenticity guarantees. Technically, the site uses modern web standards, Shopify's payment and analytics tools, and is optimized for performance and mobile devices. Security posture is strong with HTTPS and standard security headers, though explicit privacy and security policies could be enhanced. Overall, the site presents a trustworthy and niche-focused retail presence with room for improvement in privacy compliance and direct contact transparency.
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website utiqcontent.com is currently inaccessible due to an Access Denied error, likely caused by a web application firewall or security mechanism. This prevents any meaningful content or metadata extraction. The domain is newly registered in July 2024 with Amazon Registrar, Inc., indicating a new or upcoming business. No business information, contact details, or policies are available for review. The lack of accessible content and security headers suggests a low digital maturity at this time. Security posture cannot be fully assessed but is likely weak due to missing HTTPS and security best practices. Overall, the site presents a high risk due to lack of transparency and accessibility, and it is recommended to monitor for future updates or contact the domain owner for more information.
Milkedmilked.film
Media · New Zealand
57Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Milked.film is a professionally presented documentary film website focused on exposing issues within New Zealand's dairy industry. The site targets a general audience interested in environmental and agricultural topics, leveraging social media and educational content to raise awareness. Technically, the site uses a modern tech stack including jQuery, Modernizr, and New Relic for monitoring, hosted on a platform powered by Assemble CMS. The website is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enforced but missing security headers and DNSSEC. Privacy compliance is basic with a privacy policy linked via the CMS provider but no cookie consent mechanism. Business credibility is supported by consistent branding and social media presence but limited direct contact information. Overall, the site is safe, trustworthy, and well-suited for its niche documentary purpose.
Parola spol. s r.o.sportovecjihlavska.cz
Media · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.sportovecjihlavska.cz serves as a regional media platform focused on the annual Sportovec Jihlavska sports awards and related local sports news. Operated by Parola spol. s r.o., it targets residents and sports enthusiasts in the Jihlava district, providing event coverage, voting mechanisms, and advertising opportunities. The business model revolves around media content and community engagement with advertising revenue streams. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA, and CKEditor, ensuring a functional and moderately optimized user experience. Security posture is adequate with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the visible business information and partnerships support legitimacy. Overall, the site is professional, content-rich, and trustworthy for its audience, though it would benefit from enhanced compliance and security practices.
Parola spol. s r.o.vas-politik.cz
Media · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Parola spol. s r.o. operates the regional news website 'Jihlavské listy' focused on political and local news for the Vysočina region in the Czech Republic. The site offers news articles, political commentary, advertising services, and subscription options, targeting local residents and politically engaged audiences. The business model relies on advertising revenue and local subscriptions, positioning itself as a key regional media outlet since its founding in 2007. Technically, the website employs modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and CKEditor, providing a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and secure login forms, though some security headers are missing. Privacy compliance is basic with cookie consent implemented but no explicit privacy or terms of service pages found. The domain WHOIS data is unavailable, limiting trust analysis, but the presence of company contact details and consistent branding supports legitimacy. Overall, the website is functional, moderately secure, and professionally maintained with room for improvement in privacy and security practices.
KAVÁRNA DRBÁRNAkavarnadrbarna.cz
Hospitality · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KAVÁRNA DRBÁRNA is a small hospitality business operating a café associated with the Radek Brzobohatý Theater in Prague. The business offers unique cultural and catering services including event space rental, rauts, and specialty beverages such as freshly roasted coffee and Moravian wines. The website reflects a professional and consistent brand image with a focus on cultural events and hospitality services. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks some recommended security headers and policies. The absence of WHOIS data and privacy/cookie policies are notable gaps in compliance and trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
- Terra Gaia
terragaia.eu
E-commerce · Czech Republic
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Terra Gaia is a Czech-based small e-commerce business specializing in eco-friendly, zero waste, and plant-based biodegradable household and personal care products. The company positions itself as a conscious manufacturer with over 15 years of experience, targeting environmentally aware consumers seeking sustainable living solutions. Their product range includes laundry, dishwashing, cleaning, aroma, personal care, and baby products, supported by a professional online storefront built on the Shoptet platform. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and Facebook SDK, integrated within the Shoptet e-commerce framework. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and secure forms, though explicit security headers and a public security policy are absent. Privacy compliance is well addressed with clear privacy and cookie policies, cookie consent mechanisms, and GDPR adherence. Contact information is transparent with email, phone, and social media channels. However, no incident response or vulnerability disclosure information is publicly available. Overall, the website is professional, trustworthy, and safe for general audiences. The lack of WHOIS data is due to privacy protection, which is typical for small businesses. The security and privacy posture is good but could be enhanced with additional policies and headers. The business is well positioned in its niche with clear branding and customer engagement.
INCAMincamnetwork.ca
Healthcare · Canada
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
INCAM is a Canadian non-profit organization established in 2004, dedicated to advancing research and knowledge in traditional, complementary, and integrative medicine. The organization serves as a collaborative hub for researchers, educators, practitioners, and students across Canada, aiming to integrate evidence-based complementary healthcare practices into the national healthcare system. INCAM offers membership services, research funding competitions, community forums, and educational events such as conferences and webinars. The website reflects a professional and consistent brand image aligned with its mission and target audience. Technically, the website is built on WordPress with modern optimization and analytics tools including NitroPack and MonsterInsights. It employs responsive design and SEO best practices, ensuring good performance and accessibility. However, some privacy and security best practices could be improved, such as adding explicit privacy and cookie policies and enhancing security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data. The absence of WHOIS data suggests domain privacy protection, which is reasonable for a non-profit entity. No critical vulnerabilities or adult content were detected. Overall, the site presents a trustworthy and credible online presence for INCAM. Strategically, INCAM should focus on enhancing privacy compliance by publishing clear policies and implementing consent mechanisms. Strengthening security headers and providing incident response information would further improve trust and security posture.
Mgr. Marek Nývlt - Tvorba webových stránek Trutnovwebtrutnov.net
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The website www.webtrutnov.net represents a small, local Czech web development business operated by Mgr. Marek Nývlt, specializing in custom Joomla-based website creation, domain and hosting services, and maintenance including updates and backups. The business targets individuals and small to medium enterprises primarily in the Trutnov region, offering competitively priced, personalized web solutions with a focus on quality and customer satisfaction. The site is professionally designed with clear navigation and mobile responsiveness, leveraging modern web technologies such as Joomla CMS and Bootstrap framework. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking some security headers and formal privacy or terms of service documentation. WHOIS data is missing or inconsistent, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site demonstrates good business credibility and technical implementation but would benefit from improved compliance documentation and enhanced security practices.
Komorní scéna Arénadivadloarena.cz
Other · Czech Republic
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Komorní scéna Aréna is a well-established cultural institution based in Ostrava, Czech Republic, founded in 2005. It operates as a regional theater offering a variety of theatrical performances, workshops, and cultural events, targeting a broad audience interested in arts and culture. The organization maintains a strong market position within its region and extends its influence beyond the Moravskoslezský kraj. The website reflects a professional and consistent brand image, supported by partnerships with governmental and cultural entities. Technically, the website is built on WordPress with modern technologies such as Bootstrap and jQuery, optimized for mobile devices and SEO. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact and business information.
Patrioti MSK, z. s.patriotimsk.cz
Other · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Patrioti MSK is a well-established Czech non-profit organization focused on developing and supporting entrepreneurs primarily in the Moravskoslezský region and Prague. The organization fosters a business community through events, networking, mastermind groups, and educational initiatives. Their market position is strong regionally, supported by a comprehensive digital presence including podcasts and event platforms. Technically, the website is built on WordPress with modern SEO and user experience practices, showing good mobile optimization and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and provides clear business and contact information, enhancing trust and credibility.
Université de Montpellierumontpellier.fr
Education · France
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Université de Montpellier is a large, historic French public university founded in 1220, offering higher education, research, innovation, and international cooperation services. It holds a strong market position with recognized certifications such as the European HR Excellence in Research label. The website targets students, researchers, and academic partners, providing comprehensive information on academic programs, research units, campus life, and international partnerships. Technically, the site is built on WordPress with modern frameworks like Bootstrap and jQuery, supporting multilingual content via Weglot and analytics through Piwik/Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.
Le Philanthro-Labphilanthrolab.org
Non-profit · France
68Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Le Philanthro-Lab is a French non-profit organization dedicated to fostering philanthropy. The organization offers coworking spaces, an incubator, an accelerator, event and conference spaces, and consulting and training services aimed at social impact projects. Positioned as the first dedicated philanthropy development hub in France, it targets philanthropists, project leaders, and citizens interested in positive societal impact. The website is professionally designed using WordPress and Elementor, with good SEO practices and structured data, supporting its market presence. Social media integration and published activity reports enhance its credibility. Technically, the site uses modern web technologies and plugins but lacks some advanced security headers and DNSSEC. Security posture is adequate with HTTPS and domain transfer locks but could be improved with additional policies and disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and functional but should address compliance and security policy gaps to strengthen its posture.
Nature & Découvertesnatureetdecouvertes.com
Retail · France
75Medium
NIS2 22 · GDPR 65
NIS2 22 · GDPR 65
Nature & Découvertes is a well-established French retail company specializing in nature-themed products and gifts, operating both online and through physical stores. The website offers a comprehensive e-commerce platform with features such as free in-store pickup and home delivery, targeting general consumers interested in unique and nature-related gifts. The company maintains a strong market position in the French retail sector with consistent branding and professional content. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Google Maps API, and various marketing and analytics tools such as Kameleoon and Microsoft Clarity. The site demonstrates good performance, mobile optimization, and accessibility standards, supported by a well-structured SEO strategy. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options could be explicitly added to enhance protection. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall legitimacy based on website content and branding. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include improving security header implementation and verifying domain registration transparency to bolster trust further.
- Fondation Lemarchand
fondationlemarchand.org
Non-profit · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Fondation Lemarchand is a French non-profit foundation dedicated to supporting associative projects focused on nature preservation and social aid, particularly for children in social care. Established in 2017, it has supported over 874 projects and 364 associations, positioning itself as a reputable actor in the non-profit environmental and social sector. The website provides comprehensive information about its mission, projects, and partner associations, targeting donors, associations, and the general public interested in environmental and social causes. Technically, the site uses a moderate tech stack including jQuery, Modernizr, Google Maps API, and YouTube embeds, hosted by OVH sas. The site is mobile-optimized with good navigation and content quality.
- DDomorrow
domorrow.org
Non-profit · France
56Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Domorrow is a French philanthropic endowment fund established in 2020 by the family of Bruno Rousset, operating under the Evolem group. The organization focuses on supporting projects related to sustainable agriculture and ecological transition, aiming to foster environmental and social solidarity. The website reflects a clear mission and target audience, with professional design and comprehensive content that supports their philanthropic goals. Technically, the site is built on WordPress with modern plugins and privacy-respecting analytics, hosted by Hosteur SARL in France. Security posture is good with HTTPS and cookie consent mechanisms, though some additional HTTP security headers could enhance protection. The domain registration is consistent and legitimate, with no suspicious patterns detected. Overall, Domorrow presents a trustworthy and professional online presence aligned with its non-profit mission.
- Fondation Terre Solidaire
fondation-terresolidaire.org
Non-profit · France
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Fondation Terre Solidaire is a French non-profit organization founded in 2016, dedicated to accelerating ecological and solidarity transitions by funding and supporting concrete projects. The foundation targets individuals, associations, and companies interested in contributing to ecological causes, leveraging donations and partnerships to finance impactful initiatives. The website is professionally designed, well-structured, and provides clear information about the foundation's mission, projects, and ways to engage. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted by OVH sas, and uses modern analytics and marketing tools with a cookie consent mechanism. Security posture is good with HTTPS enabled and domain registration protections, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are published. Overall, the website is trustworthy, compliant with GDPR, and effectively communicates its mission and services.
RAISEraise.co
Finance · France
75Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
RAISE is a French investment and innovation group pioneering engaged finance with a unique success-sharing model emphasizing parity and sustainability. The company supports startups, growing enterprises, real estate investments, and philanthropic initiatives, positioning itself as a responsible and innovative market player. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow, Didomi for consent management, and Plausible for analytics. Security posture is good with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is partially met with a cookie consent banner but lacks a clear privacy policy and terms of service. Overall, the site reflects a credible and trustworthy business with room for improvement in transparency and direct contact information.
Vootervooter.co
Government · France
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Vooter is a French digital platform specializing in voting, polling, and community consultation services aimed at organizations, local authorities, enterprises, and event organizers. The platform facilitates co-construction and inclusive participation through interactive digital tools, live voting, and instant communication. The website is built on WordPress using the Divi theme, incorporating standard SEO and analytics tools such as Yoast SEO and Google Analytics. Hosting and data storage are located in France, supporting GDPR compliance. Security measures include HTTPS and reCAPTCHA, though some security headers are not explicitly visible. The site lacks explicit privacy policy and terms of service pages, which are recommended for compliance and trust. Overall, the platform presents a professional and trustworthy digital service with a clear market niche in government and community engagement.
Réseau Canopémathador.fr
Education · France
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Mathador is an educational platform operated by Réseau Canopé, focused on promoting mental calculation skills through engaging games and contests. The website offers both digital and physical game formats, targeting students and educators primarily in France. The platform is well integrated with educational initiatives and provides resources to motivate learners in mathematics. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, with a cookie consent mechanism compliant with GDPR. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers and explicit security policies are not evident, suggesting room for improvement in security hardening. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain trust verification, but the strong affiliation with a reputable educational network and consistent branding supports legitimacy. Privacy compliance is well addressed through cookie management and privacy policy presence. Overall, Mathador presents a trustworthy and professional educational service with a solid digital presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability could further strengthen trust and compliance.
Réseau Canopéhiboutheque.fr
Education · France
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hibouthèque is an online documentary management solution specifically designed for primary school libraries (BCD) offered by Réseau Canopé. It targets French-speaking teachers in France and abroad, providing a subscription-based service that facilitates catalog management, loans, returns, and reservations. The platform is web-based, requiring no installation, and supports multiple simultaneous users. It includes user assistance through monthly webinars and technical support. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence in the education sector. Technically, it leverages modern frameworks such as Symfony 6.4, Bootstrap 5.3, and jQuery 3.7, with Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site is trustworthy and well-positioned within its niche.