Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,181001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
24,101–24,150 of 99,068
České modelky s.r.o.plussizemodelky.cz
Media · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
České modelky s.r.o. operates the website plussizemodelky.cz, a specialized platform focused on plus size modeling in the Czech Republic. The company offers a comprehensive database of plus size models, organizes fashion shows, photo shoots, and beauty contests such as Miss Plus Size Modelky ČR. The business targets plus size women and fashion industry clients seeking diverse modeling talent. The website is well-branded, professionally designed, and supported by extensive media coverage and social media presence, positioning it as a leading player in its niche market. Technically, the website employs modern web technologies including jQuery, Google Fonts, Google Analytics, Adsense, and reCAPTCHA. It is hosted via a Czech registrar and hosting provider (REG-WEDOS), with good mobile optimization and moderate performance. However, it lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. The site uses HTTPS, and no critical security vulnerabilities were detected in the content. From a security perspective, the site demonstrates basic best practices such as HTTPS and CAPTCHA protection on forms but should enhance its security posture by implementing security headers and publishing privacy and cookie policies to improve GDPR compliance. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy, with no adult or explicit content detected.
Demo verze stránekrango.cz
Hospitality · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.rango.cz represents a boutique hotel and Mediterranean restaurant located in Plzeň, Czech Republic. The business offers stylish accommodation and dining services in historic city center premises. The site is built on WordPress using Elementor and related plugins, indicating a modern and maintainable technical infrastructure. SEO optimization is evident through the use of Rank Math plugin and structured data markup. However, the absence of WHOIS data and registrant information reduces domain trustworthiness. Security posture is moderate with no detected security headers or explicit policies, and privacy compliance is partial with a cookie consent mechanism but no visible privacy policy. Overall, the website is professional and functional but would benefit from enhanced transparency and security measures.
BeNomadbenomad.com
Technology
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
BeNomad is a specialized technology company focused on designing, developing, and marketing mapping and navigation software since 2002. Their offerings target companies that manage mobile resources, positioning them as a leading provider in location-based services and professional GPS navigation software. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress with common plugins such as Yoast SEO and MonsterInsights for analytics, indicating a moderate level of digital maturity. HTTPS is properly configured with IP anonymization in Google Analytics, but the absence of security headers and explicit privacy or cookie policies suggests room for improvement in security posture and privacy compliance. Overall, the site is safe, business-focused, and trustworthy, but lacks some compliance and security best practices.
- VVercel Security Checkpoint
renault.no
Other · Norway
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website renault.no is currently inaccessible due to a Vercel Security Checkpoint blocking content access. The page displays a message indicating failed browser verification and provides a link for the website owner to fix the issue. Due to this block, no business-related content, metadata, or contact information is available for analysis. The site appears to be hosted on Vercel and uses Astro framework technology. Without access to the actual website content, it is impossible to assess the business model, services, or market position. The security posture cannot be evaluated beyond the presence of the security checkpoint, which itself indicates some level of bot or threat mitigation. Overall, the site is currently non-functional for end users and requires resolution of the security checkpoint to enable further analysis.
- World Media Partners, s.r.o.
czecot.info
Hospitality · Czech Republic
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.czecot.info represents the CZeCOT information and reservation system for tourism in the Czech Republic, operated by World Media Partners, s.r.o. It provides extensive tourism data, including tourist objects, routes, events, and accommodation services, supporting both domestic and inbound tourism. The system includes a reservation platform for accommodation and event tickets and collaborates closely with CzechTourism and related publishing entities. The business model focuses on providing tourism information and reservation services to both consumers and partner portals. Technically, the site is built on an outdated Joomla 1.5 CMS with additional JavaScript libraries like jQuery and MooTools, and uses multiple analytics tools including Google Analytics, Matomo, and Cloudflare Insights. While the site is functional and content-rich, it lacks modern security practices such as updated CMS, security headers, and visible privacy or cookie policies. The WHOIS data is unavailable, limiting domain trust verification. Overall, the site is moderately professional but requires technical and security modernization to improve trust and compliance.
Thermomix NZthermomix.co.nz
Retail · New Zealand
71Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Thermomix NZ operates a professional e-commerce platform specializing in advanced kitchen appliances, primarily the Thermomix® product line. The company leverages a consultant network and offers in-home cooking demos, enhancing customer engagement and support. The website is well-positioned in the New Zealand market as a leading retailer of smart kitchen appliances, supported by a loyalty rewards program and accessory sales. Technically, the site is built on Shopify, utilizing modern web technologies and integrations with major analytics and marketing platforms such as Google Analytics, Facebook Pixel, TikTok Pixel, Klaviyo, and Hotjar. The infrastructure includes Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced and standard security headers likely managed by Shopify, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Business credibility is supported by consistent domain registration data, professional content, and trust indicators like customer reviews and consultant support. Overall, the website demonstrates a mature digital presence with solid security and privacy practices, suitable for its retail business model.
- VVorwerk Thermomix
thermomix.mx
Retail · Mexico
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Thermomix Mexico operates as a leading retailer of advanced kitchen appliances, specifically promoting the TM7 model with integrated digital recipe services. The company leverages a strong online presence with a WordPress-based website, offering product demos, community engagement, and e-commerce capabilities. The website is well-structured, mobile-optimized, and incorporates modern web technologies and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS and secure forms, though improvements in security headers and vulnerability disclosure are recommended. Overall, the site reflects a reputable and professional brand with high trustworthiness and user experience.
Vorwerk Hellasvorwerk.gr
Retail · Greece
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Vorwerk Hellas operates as the official distributor and e-commerce platform for Thermomix® kitchen appliances in Greece. The website offers product information, live demonstrations, consultant recruitment, and direct sales, targeting Greek consumers interested in innovative kitchen technology. The business is positioned as a medium-sized retail entity under the global Vorwerk Group umbrella, with a consistent brand presence and active social media engagement. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and marketing pixels for analytics and advertising. It demonstrates good performance, mobile optimization, and accessibility features. The presence of structured data and comprehensive metadata supports SEO efforts. From a security perspective, the site enforces HTTPS and employs CAPTCHA for form protection. While explicit security headers are not evident in the HTML, no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, though incident response and security policy details are not publicly available. Overall, the website presents a professional, trustworthy, and secure online presence suitable for its retail business model. Strategic improvements in security header implementation and incident response transparency could further enhance its security posture.
association Autour du 1er maibase-tessa.net
Non-profit · France
57Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website base-tessa.net represents a small non-profit project launched in 2021 by the association Autour du 1er mai, focused on cataloging and promoting films related to the social and solidarity economy (ESS) and ecological transition. The platform serves a niche audience interested in social innovation and sustainability through cinema. Technically, the site is built on the SPIP CMS, hosted by OVH sas, and uses Matomo for analytics. The site is accessible, with a good content structure and moderate performance, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the credibility of the project.
Storckmamba.de
Retail · Germany
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website www.mamba.de is a professionally maintained brand site for Mamba, a fruit-flavored chewy candy brand under the Storck company. It targets a general German-speaking audience with product information, brand marketing, and consumer engagement content. The site uses TYPO3 CMS and modern JavaScript libraries, including RequireJS, Lodash, and jQuery, and integrates Piwik PRO for analytics. The technical infrastructure is modern and mobile-optimized, with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data aligns with the brand, supporting legitimacy. Overall, the site is trustworthy and well-positioned in the retail confectionery market.
- Storck
mamba.com
Retail
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Mamba.com is the official international website for Mamba fruit chews, a confectionery brand under the Storck company umbrella. The site provides product information and directs users to country-specific versions, supporting a global retail presence. The website is professionally designed with good content quality and consistent branding aligned with Storck's portfolio. Technically, the site uses modern JavaScript libraries such as RequireJS, jQuery, and Bootstrap, and employs Piwik PRO for analytics, indicating a moderate level of digital maturity. However, some technical aspects like security headers and explicit CMS identification are not evident from the data provided. Security posture is moderate; the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit incident response contacts. WHOIS data is missing or unavailable, which reduces domain registration transparency and slightly impacts trustworthiness. Overall, the website is functional, user-friendly, and compliant with privacy regulations, but could improve in security and transparency aspects.
- Storck
werthers-original.com
Retail
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Werther’s Original is a well-established confectionery brand specializing in caramel products, operated under the parent company Storck. The website serves as a global brand portal with localized country versions, offering product information and brand storytelling. The site demonstrates a professional digital presence with modern web technologies including RequireJS, jQuery, and Bootstrap, and integrates Piwik PRO for analytics. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR standards. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding strongly indicate a legitimate commercial operation. Security posture is solid with HTTPS enforced, but could be improved by adding security headers and explicit security policies. Overall, the website is user-friendly, well-branded, and trustworthy from a content perspective, but domain registration transparency should be addressed.
Storckknoppers.com
Retail
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Knoppers.com is the official website for the Knoppers brand, a confectionery product line under the Storck company. The site provides product information about their milk-hazelnut wafers and various bars, targeting general consumers seeking tasty snack options. The website is multilingual and links to country-specific domains, indicating a broad international presence. Technically, the site uses modern JavaScript libraries such as RequireJS, jQuery, and Bootstrap, and employs Piwik PRO for analytics, reflecting moderate digital maturity. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain is a notable anomaly, though the website content and branding align with the reputable Storck company, suggesting legitimacy. Overall, the site is professionally designed, user-friendly, and compliant with privacy regulations, but could improve security posture and transparency.
Storcktoffifay.us
Retail · United States
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Storck is a well-established confectionery company with a global presence, offering products such as Toffifay, a unique confection combining caramel, hazelnut, and chocolate. The website reflects a professional brand image with consistent branding and clear product information targeted at a general audience. The technical infrastructure is based on TYPO3 CMS with modern JavaScript libraries, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit incident response policies are absent. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection.
Other · France
56Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website synergie-europe.fr currently returns a 404 error page with no accessible content, indicating it is either inactive or under construction. The domain is registered with OVH since 2020, which aligns with a relatively new business entity. Due to the lack of website content, no business description, services, or contact information can be extracted. The technical infrastructure appears minimal with no detectable technologies, scripts, or security headers. The absence of HTTPS information and security policies suggests a weak security posture. Overall, the website lacks fundamental elements required for trust, compliance, and user engagement.
- Fédération UniAgro
uniagro.fr
Education · France
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Fédération UniAgro is a French federation uniting eight alumni associations of life sciences engineers, providing a centralized platform for networking, career services, community engagement, and professional publications. The website is professionally designed, mobile-optimized, and integrates modern web technologies including jQuery, Bootstrap, and GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and hCaptcha protecting forms, though security headers and explicit security policies are absent. WHOIS data is unavailable, which limits domain legitimacy verification, but the website's content and partner ecosystem support its credibility. Overall, the site serves as a trusted hub for its target audience of alumni and professionals in the agro-life sciences sector.
- Patriot Program
patriotprogram.cz
Media · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Patriot Program is a regional media platform focused on providing a comprehensive calendar and search engine for cultural, sports, and social events in the Moravskoslezský kraj region of the Czech Republic. The website offers event listings, articles, and a downloadable magazine, targeting a broad audience including families, seniors, and cultural enthusiasts. The platform supports user-generated event creation and maintains active social media channels on Facebook and YouTube. Technically, the website is built using modern web technologies including Next.js and React, hosted on DigitalOcean infrastructure, and optimized for mobile devices with good performance and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy compliance pages indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and content quality suggest a legitimate business. Overall, the site scores well on content and technical implementation but needs to enhance privacy compliance and transparency to improve trust and security posture.
- Flexity Joga Shop
flexitylife.cz
Retail · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Flexitylife.cz operates as a specialized e-commerce retailer focused on yoga, pilates, ayurveda, massage, health, and meditation products primarily serving the Czech Republic and neighboring countries. The website offers a broad catalog of wellness-related goods including mats, clothing, accessories, books, and supplements, positioning itself as a niche wellness retail provider with a professional online presence. The platform is built on the Shoptet e-commerce system, leveraging modern web technologies and CDN services to deliver a responsive and user-friendly experience. Privacy and cookie compliance are well implemented with explicit consent mechanisms, and the site uses multiple analytics and marketing tools to optimize business operations. Security posture is generally good with HTTPS enforcement and secure forms, though the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable concern impacting business credibility and trust, warranting further verification. Overall, the site is safe, professionally designed, and well-structured for its target audience, but would benefit from enhanced transparency and security disclosures.
- Svíčky Lumio
svickylumio.cz
Retail · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Svíčky Lumio is a Czech family-owned business specializing in the production and sale of harmonizing, chakra, energetic, and spiritual candles. The company operates an e-commerce platform built on the Shoptet CMS, offering a wide range of products including candles, incense, spiritual symbols, and related accessories. Their market position is that of a niche retailer focused on spiritual and energy-related products, targeting customers interested in holistic and spiritual well-being. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses standard web technologies including jQuery and Facebook SDK, with HTTPS enforced and CSRF protections on forms, though it lacks some advanced security headers. Privacy and cookie policies are present and GDPR compliant, and contact information is clearly provided. However, the absence of WHOIS data for the domain reduces the overall trustworthiness from a domain registration perspective. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences.
Maharishi College of Perfect Health Internationalayurvedatraining.eu
Education · Slovenia
55Medium
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
Maharishi College of Perfect Health International operates the ayurvedatraining.eu website, offering a one-year, part-time professional training program in Maharishi AyurVeda at an accredited European university in Slovenia. The business targets health professionals and individuals interested in integrative Ayurvedic medicine, providing a hybrid online and in-residence educational experience. The website is well-branded and contains testimonials, structured data, and SEO metadata that support its credibility and market positioning as a niche educational provider in Europe. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating Google reCAPTCHA and Google Tag Manager for security and analytics. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO practices are good, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is limited to a detailed contact form, with no direct emails or phone numbers published. Overall, the website presents a professional and trustworthy front for its educational services, with a solid technical foundation and good business credibility. Improvements in privacy compliance, security headers, and direct contact information would enhance its security posture and user trust.
- IInternational Maharishi AyurVeda Foundation
internationalayurvedacongress.com
Healthcare · Netherlands
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The International Ayurveda Congress website serves as a professional platform for organizing and documenting international Ayurveda congresses. It is operated by a coalition of Ayurveda-focused organizations, primarily the International Maharishi AyurVeda Foundation. The site offers extensive archives, event details, and educational resources targeting healthcare professionals, researchers, and policymakers interested in Ayurveda. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. The security posture is moderate with room for improvement in DNS security and privacy compliance. Overall, the website is legitimate, well-established, and trustworthy, though it could enhance user privacy and security transparency.
- QS Quacquarelli Symonds Limited
qshesummits.com
Education
74Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
QS Quacquarelli Symonds Limited operates a professional website focused on higher education analytics, events, and publications. The company is positioned as a global leader in providing services and insights to the higher education sector, organizing multiple international summits and conferences. The website content is well-structured, professionally designed, and targets education professionals and stakeholders worldwide. The technical infrastructure is based on WordPress with modern plugins and integrations including HubSpot and Google Analytics, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and DNSSEC are missing. Privacy compliance is supported by a cookie consent mechanism and a privacy policy linked to the main QS corporate site. Overall, the website reflects a credible and trustworthy business presence with good digital maturity.
Quacquarelli Symonds Limitedreimagine-education.com
Education
58Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Reimagine Education is a globally recognized conference and awards platform operated by Quacquarelli Symonds Limited, focusing on innovation in education and employability. The website serves as a hub for event information, award applications, showcases, and partner engagement. It targets educational innovators, academic institutions, and edtech startups worldwide. The platform is well-positioned in the education sector with a strong brand and professional digital presence. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, WPBakery, Slider Revolution, and Google Analytics. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be improved. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a publicly stated security policy or incident response information. The WHOIS data is notably absent or unavailable, which introduces some uncertainty regarding domain registration legitimacy. However, the website's content, structured data, and branding strongly associate it with the reputable QS organization. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy from a business and technical perspective, with minor gaps in transparency around domain registration and security policies. Strategic improvements in these areas would enhance trust and compliance.
CallRailcallrail.com
Technology · United States
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
CallRail is a well-established SaaS company specializing in call tracking and marketing analytics solutions designed to help businesses optimize their marketing efforts and customer interactions. The company targets businesses and marketing professionals seeking detailed insights into call attribution and lead generation effectiveness. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about their services. The technical infrastructure leverages modern web technologies including Angular, Google Analytics, Microsoft Clarity, and OneTrust for cookie consent, hosted on Netlify for performance and reliability. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, CallRail presents a trustworthy and professional online presence suitable for its business audience.
- Ascendoor
ascendoor.com
Technology
74Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Ascendoor is a small technology business specializing in the development and sale of WordPress themes and plugins, offering both premium and free options. The company provides additional services such as theme customization and dedicated customer support, positioning itself as a one-stop solution for WordPress users seeking quality design and functionality. The website is professionally designed with good SEO practices and mobile optimization, reflecting a mature digital presence for a business founded around 2020. Technically, the site runs on WordPress 6.7.4 with common plugins for SEO, forms, and cookie management, and integrates Google Analytics and reCAPTCHA for tracking and security. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. No critical security or content safety issues were detected.
KUTNOHORSKÁ MINCOVNA A.S.kutnohorskytolar.cz
Manufacturing · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Kutnohorská Mincovna A.S. operates a specialized minting business in Kutná Hora, Czech Republic, focusing on producing collectible and investment-grade silver coins known as Kutnohorský Tolar. The company leverages Czech historical heritage and artistic craftsmanship, collaborating with renowned sculptor Vladimír Oppl to create limited edition coins. Their market position is niche but strong within the numismatic and investment coin sector, targeting collectors and investors interested in Czech cultural artifacts. Technically, the website is built on WordPress with Elementor, employing modern web technologies and delivering a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Overall, the business presents a credible and professional front, though improvements in privacy and security policies are recommended to enhance trust and compliance.
Kutnohorská Mincovnakutnohorskamincovna.cz
Retail · Czech Republic
51Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
Kutnohorská Mincovna is a small Czech Republic-based business dedicated to reviving and celebrating the historical royal mint of Kutná Hora. The company focuses on producing investment-grade gold and silver coins, bullion bars, corporate minting services, and collector's editions that honor Czech traditions and history. The website is professionally designed with good content quality and clear navigation, targeting investors and collectors interested in precious metals and Czech heritage. Technically, the site uses modern front-end libraries including Bootstrap, FontAwesome, and Google Tag Manager for analytics and marketing. The hosting leverages Amazon Cloudfront for widget delivery. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trustworthiness. Overall, the site is safe, compliant with GDPR, and provides a positive user experience with room for security and contact information improvements.
Technology · Poland
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
theprotocol.it is a specialized online job portal focused on the IT sector in Poland, providing daily updated job offers and resources for both candidates and employers. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and user-friendly experience. It maintains a strong security posture with HTTPS, DNSSEC, and security headers, ensuring safe browsing for users. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance, and does not provide explicit contact information, which may affect user trust and compliance. Overall, the site is professionally designed and well-positioned in its niche market but should enhance its privacy compliance and transparency to improve trust and legal adherence.
Media
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Gan Jing World is a media streaming and content sharing platform that offers video, movie, and show streaming services across desktop, mobile, and TV apps. The platform emphasizes non-addictive algorithms and promotes values of kindness, respect, and trust. It allows users to create and share videos, posts, and articles without mandatory registration, enhancing user privacy and freedom of speech. The website is positioned as a niche media platform with a focus on meaningful content and social connection. Technically, the website is built on a modern stack using Next.js and React, hosted on CloudOkyo cloud infrastructure. It employs Google Fonts and CookieYes for consent management, indicating a commitment to privacy compliance. The site is mobile-optimized with good SEO and accessibility features, though some security headers are missing. The cookie consent mechanism is comprehensive and GDPR compliant, with granular user controls. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of WHOIS registration data and security headers suggests areas for improvement. No explicit privacy policy or contact information for security incidents is found, which could impact trust. The domain's WHOIS data is missing, possibly indicating recent registration or privacy protection, which lowers the domain trust score. Overall, Gan Jing World presents a professional and privacy-conscious media platform with modern technology and good user experience. Strategic recommendations include publishing a privacy policy, adding security headers, and providing clear contact information to enhance trust and compliance.
(주)에포크미디어코리아epochtimes.co.kr
Media · South Korea
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
에포크미디어코리아가 운영하는 에포크타임스(www.epochtimes.kr)는 한국어 뉴스 미디어 사이트로, 정치, 경제, 사회, 국제, 문화, 과학 등 다양한 분야의 뉴스를 제공하며, 에포크TV 영상 콘텐츠와 프리미엄 리포트, 인터뷰, 오피니언 등 풍부한 콘텐츠를 갖추고 있습니다. 사이트는 WordPress CMS 기반으로 최신 웹 기술과 광고 및 분석 도구를 활용해 운영되고 있으며, 모바일 최적화와 사용자 경험이 우수합니다. 보안 측면에서는 HTTPS가 적용되어 있고, 쿠키 동의 배너를 통해 개인정보 보호에 대한 기본적인 조치를 취하고 있으나, 보안 정책 및 보안 헤더 적용은 다소 미흡한 편입니다. WHOIS 정보가 조회되지 않아 도메인 등록 정보의 투명성은 낮으나, 사이트 내 회사 정보와 연락처가 명확히 제공되어 신뢰성은 중상위 수준으로 평가됩니다.
- EEtIndonesia | Mengabarkan dan Menginspirasi
erabaru.net
Media · Indonesia
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EtIndonesia is an Indonesian media website focused on delivering news, inspirational stories, and video content primarily to an Indonesian-speaking audience. The site covers a broad range of topics including national and international news, family, mystery, health, and science. The business model appears to be online media publishing monetized through advertising, notably Google AdSense. The website uses WordPress CMS with several tagDiv plugins and integrates Google Analytics for user tracking. Hosting and DNS are managed via Cloudflare, providing some security and performance benefits. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. No contact or incident response information is published, limiting transparency. Overall, the site is functional, mobile-optimized, and professionally designed but would benefit from enhanced security and privacy compliance measures.
Epoch Timeselepoch.com
Media
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.elepoch.com is a Spanish-language news media platform branded as Epoch Times, providing independent and objective news coverage focused on truth, tradition, and hope. It targets Spanish-speaking audiences interested in US, Latin American, and global news, offering a variety of news categories including politics, health, economy, and entertainment. The site features multimedia content such as videos and newsletters, supported by advertising networks like Google Adsense. Technically, the site is built on modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though explicit security headers and incident response information are not publicly visible. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. WHOIS data is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation and content quality. Overall, the site is a credible media outlet with room for improvement in privacy and security disclosures.
Education · Italy
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Università degli Studi di Palermo is a large, well-established public university in Italy, founded in 1806, serving over 40,000 students. It offers a broad range of academic programs including undergraduate, graduate, and single-cycle degrees. The website reflects its educational mission with content focused on academic offerings and institutional information. Technically, the site uses standard web technologies such as Bootstrap and FontAwesome, providing a good user experience with responsive design and clear navigation. However, there is a lack of visible privacy and cookie policies, as well as security and incident response information, which are critical for compliance and trust in today's digital environment. The security posture is moderate but could be improved by implementing security headers and disclosing vulnerability handling procedures. Overall, the domain registration data aligns well with the university's identity, indicating high legitimacy and trustworthiness.
Linkila Technologies Inc.linki.la
Technology
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Linkila Technologies Inc. operates a technology platform specializing in deep linking and link management solutions, targeting digital marketers and businesses requiring enhanced link marketing capabilities. The company, founded in 2020, offers SaaS-based services including bio link deep linking and marketing integrations. The website content analyzed is a 404 error page, but the overall site branding and structure indicate a focused technology business with a niche market position. Technically, the website employs modern web technologies such as Google Fonts, Cloudflare DNS, and integrates analytics tools like Google Analytics and Ackee. The site is hosted behind Cloudflare, uses HTTPS, and includes marketing widgets such as Trustpilot. Performance and mobile optimization are moderate to good, though accessibility and SEO optimizations are basic. No CMS or major frameworks were detected on this page. From a security perspective, the domain registration is consistent and legitimate, with protective domain statuses and no privacy protection masking registrant data. The site uses HTTPS but lacks DNSSEC and some recommended security headers. No explicit security policies or incident response contacts are published. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism detected. No vulnerabilities or exposed sensitive data were found on this page. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. The business credibility is supported by consistent branding and domain legitimacy. The 404 page content limits full content quality assessment but does not indicate any malicious or unsafe content.
- Content Ignite
tagdeliver.com
Technology
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Content Ignite operates as a responsible advertising technology provider focusing on delivering ads that comply with industry standards such as those set by the Interactive Advertising Bureau (IAB). The company emphasizes user privacy by offering opt-out mechanisms for personalized advertising, targeting advertisers and privacy-conscious internet users. The website content is professionally presented with a clear focus on privacy and advertising transparency, although contact details and comprehensive cookie policies are not prominently provided. Technically, the website uses modern frontend technologies including Bootstrap 4.3.1 and JavaScript Fetch API to dynamically load branding and user consent data from APIs hosted on DigitalOcean infrastructure. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. The domain is registered with GoDaddy and hosted on DigitalOcean, indicating a stable and professional infrastructure. From a security perspective, the site uses HTTPS and client-side consent management but lacks visible security headers and a cookie consent mechanism. No forms or sensitive data collection points were detected on the analyzed page, reducing immediate risk. The WHOIS data shows consistent domain registration with appropriate domain age and no privacy protection, supporting legitimacy. However, improvements in security headers, cookie consent, and contact transparency are recommended. Overall, the website presents a moderate risk profile with good privacy compliance and business credibility but could enhance security posture and user trust by addressing identified gaps.
- PPage not Found
pages06.net
Other
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The analyzed domain contentz.mkt61.net currently serves a minimal 404 error page indicating that the requested page is not found. There is no substantive business content, metadata, or structured data to assess the company's operations, services, or market positioning. The domain WHOIS query returned no registration data, suggesting the domain is either unregistered or inactive. Technically, the website lacks HTTPS, security headers, and any modern web technologies. No contact or compliance information is present, severely limiting trust and credibility. Overall, the site is non-functional from a business or security perspective and appears to be a placeholder or dead domain. From a technical infrastructure standpoint, the site is extremely basic with no detectable CMS, frameworks, or analytics tools. The absence of HTTPS and security best practices poses significant risks if the domain were to be used for business purposes. The lack of privacy and cookie policies also indicates non-compliance with common data protection regulations. Security posture is minimal to non-existent. No security headers or incident response contacts are found. The domain's unregistered status further undermines legitimacy and trust. There are no indications of malicious content or adult material, but the site provides no value or assurance to visitors. Given these findings, the overall risk is high due to lack of registration, security, and business information. Strategic recommendations include registering the domain properly, implementing HTTPS, adding comprehensive business and compliance content, and adopting security best practices to build trust and protect users.
Technology
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website lift.win presents a data-driven advertising platform tailored for the iGaming industry, focusing on player acquisition and lifetime value maximization through machine learning. The platform targets iGaming operators and positions itself as a niche solution within the advertising technology sector. Technically, the site employs modern frameworks such as Next.js and React, with integrations of HubSpot marketing and analytics tools, indicating a mature digital infrastructure. Security posture is moderate; HTTPS is implied, but no explicit security headers or policies are found, and WHOIS data is unavailable, which limits full trust assessment. Overall, the site is professional and functional but would benefit from enhanced privacy and security disclosures to improve compliance and trust.
- SSecurity Verification
cancarka.cz
Other
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website at cancarka.cz is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or similar bot mitigation mechanism, which blocks full content delivery and limits the ability to analyze the site's business or security posture comprehensively. The domain is very new, registered in April 2024, consistent with a newly launched or under-development site. No business information, contact details, or privacy policies are available on the accessible page, which restricts trust and credibility assessment. From a technical perspective, the site uses modern frontend libraries such as Bootstrap 5.3.3 and integrates Google reCAPTCHA for security. However, no explicit security headers or HTTPS confirmation were found in the provided data, and the content is minimal, consisting solely of a bot verification challenge. This results in a low content quality and poor user experience. Security-wise, the use of Google reCAPTCHA is a positive measure against automated threats, but the absence of visible security headers and policies, combined with the blocking mechanism, suggests an immature security posture. The lack of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. Overall, the site currently presents a high risk for users and visitors due to lack of transparency, minimal content, and blocking by security mechanisms. Strategic improvements in content availability, security headers, privacy compliance, and business transparency are recommended to enhance trust and usability.
- U Mistra Mydláře
umistramydlare.cz
Retail · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
U Mistra Mydláře is a small family-owned business based in the Czech Republic specializing in handmade soaps, shampoos, shaving foams, and scented gifts. Established in 2012, the company emphasizes natural ingredients without chemical preservatives or dyes, targeting customers who value artisanal and natural skincare products. Their market position is that of a niche regional player with a loyal customer base, supported by certifications such as the regional product certificate and registration in the European Cosmetic Products Notification Portal (CPNP). Technically, the website is built on the Webnode CMS platform and utilizes modern web technologies including JavaScript, CSS, and HTML5. It leverages AWS Cloudfront CDN for hosting static assets and integrates Google Tag Manager for analytics and Smartsupp for live chat support. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. From a security perspective, the website enforces HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, although the website content and business information appear legitimate and consistent. Overall, the website presents a professional and trustworthy front for a small artisanal business but would benefit from enhanced security headers, improved privacy compliance mechanisms, and transparency in domain registration details to strengthen its security posture and trust signals.
Akademie klasické homeopatie, spol. s r.o.budtezdravi.cz
Healthcare · Czech Republic
54Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website www.budtezdravi.cz represents Akademie klasické homeopatie, a small Czech healthcare and education entity specializing in classical homeopathy. The site offers homeopathic consultation, education, and product sales, targeting patients and students interested in natural health solutions. The business appears established with a professional online presence, including social media and newsletter engagement. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, providing a responsive and user-friendly experience. However, the absence of WHOIS data and explicit privacy or terms of service pages slightly detracts from its trustworthiness. Security practices include cookie consent and CAPTCHA integration, but lack visible HTTP security headers and detailed security policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security hardening.
- Fabrx
fabrx.co
Technology
59Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Fabrx is a small technology-focused business specializing in providing high-quality design systems, UI kits, and templates for designers, developers, and startups. Their offerings include assets compatible with Figma, Sketch, Adobe XD, and Bootstrap 5, aimed at accelerating design workflows. The website is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Paddle for payment processing. The site demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit incident response contacts. Overall, Fabrx presents a credible and professional online presence with room for enhanced privacy and security practices.
WebinarPresswebinarpress.com
Technology
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
WebinarPress is a specialized WordPress plugin provider focused on enabling seamless hosting of live, automated, paid, and member webinars directly within WordPress websites. Established in 2014, the company targets WordPress site owners, marketers, and educators seeking integrated webinar solutions. The website demonstrates a professional design with consistent branding and good content quality, leveraging popular WordPress technologies such as Elementor, Easy Digital Downloads, and AffiliateWP. The technical infrastructure is modern and includes performance optimization tools like WP Rocket and integrations with Stripe for payments and Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and domain protection flags set, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced privacy and security disclosures.
Intentwaveintentwave.com
Technology
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Intentwave operates as a technology company specializing in consent-based visitor identification and lead generation services. Their platform captures anonymous website visitors and enriches visitor data with personal and professional information such as name, company, title, business email, LinkedIn profile, and phone number. The company targets B2B clients seeking enhanced lead generation capabilities. The website is built using modern web design tools (Framer) and integrates popular tracking pixels from Facebook and TikTok to support marketing and analytics efforts. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The website lacks critical compliance documents such as privacy and cookie policies, as well as contact information, which impacts its overall credibility and privacy posture. Security headers and SSL configuration details are not evident, suggesting room for improvement in security best practices.
- LLatvijas Universitāte
naba.lv
Media · Latvia
67Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Radio NABA is a university-affiliated radio station operated by Latvijas Universitāte, serving a Latvian audience with music, news, and cultural programming. The website reflects a well-established media outlet with a clear focus on alternative and cultural content, supported by a medium-sized educational institution. The site is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Technically, it is built on TYPO3 CMS and integrates modern web technologies and analytics tools, ensuring moderate performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the site is a credible and professional digital presence for a university radio station.
- EEx Libris
kopkatalogs.lv
Education · Latvia
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website kopkatalogs.lv serves as a shared electronic catalog platform for nine national-level libraries in Latvia, leveraging the Ex Libris ALEPH integrated library system. It targets library users including students, researchers, and the general public seeking access to Latvian library resources. The platform is positioned as a key national service facilitating unified catalog access and user authentication. Technically, the site employs JavaScript, Matomo, and Google Analytics for tracking, and is hosted with DNS services on Microsoft Azure. The site uses HTTPS for secure login but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements. The privacy policy is linked to an official government domain, supporting GDPR compliance, though cookie consent is absent. Overall, the site is functional with moderate technical maturity and basic content quality, suitable for its educational sector role.
- Failiem.lv
failiem.lv
Technology · Latvia
63Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Failiem.lv is a Latvian-based technology company specializing in secure file hosting, cloud storage, and file sharing services. The platform offers a range of solutions including file synchronization, public content publishing, file selling with integrated payments, AI-powered content search, and server rental services. It targets both general internet users and businesses requiring reliable and fast file transfer and storage solutions. The website demonstrates a solid market position in the Baltic region with a medium-sized operational scale and consistent branding.
FORTHEM Allianceforthem-alliance.eu
Education
65Medium
NIS2 55 · GDPR 55
NIS2 55 · GDPR 55
FORTHEM Alliance is a European network of nine multidisciplinary public research universities focused on fostering cooperation across languages, borders, and disciplines to address societal challenges and skills shortages in Europe. The alliance provides various mobility programs, digital learning platforms, research innovation services, and collaborative labs targeting students, staff, researchers, and public organizations. The website reflects a well-structured and content-rich platform that supports the alliance's educational and research mission. Technically, the website leverages modern web technologies including React and Next.js, delivering a responsive and moderately performant user experience. The site is accessible and SEO optimized, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The domain WHOIS data is privacy protected by EURid, which is common for .eu domains and justified for this non-profit educational alliance. No suspicious patterns or vulnerabilities were detected. Overall, the website demonstrates a trustworthy and professional presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy and incident response information, and enhancing accessibility features to further strengthen the website's security and compliance posture.
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website indica.org.in/lander is currently a minimal placeholder or parking page with very limited content. It primarily loads a React-based frontend with no visible business information, contact details, or policies. The presence of Google Adsense scripts indicates an intent to monetize traffic, but no substantive content or services are offered. The technical infrastructure is basic, relying on React and hosted on WSImg's platform, with no detected CMS or advanced SEO features. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No forms or user data collection mechanisms are present, reducing immediate privacy risks but also indicating low engagement. Overall, the site lacks credibility and trust signals, making it unsuitable for business or user interaction in its current state.
CentreForMuseumscentreformuseums.in
Non-profit · India
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CentreForMuseums is a non-profit initiative focused on revitalizing the museum sector in India through research, management strategies, digital engagement, and sustainability planning. The organization targets museums, cultural institutions, and professionals seeking to modernize and enhance visitor experiences. The website is built on the Squarespace platform, featuring professional design and moderate performance with good mobile optimization. Security measures include HTTPS with HSTS, but the site lacks explicit privacy and cookie policies, which impacts compliance. Contact information is minimal, with only an Instagram social media link provided. Overall, the site presents a credible and focused cultural non-profit with room for improvement in privacy compliance and contact transparency.
Other
52Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website indica.pictures/lander is currently a minimal placeholder or parking page with very limited content. It primarily loads a React-based JavaScript bundle and includes Google Adsense scripts for advertising. There is no visible business information, metadata, or structured data to describe the company or its services. The lack of contact details, privacy policies, or terms of service indicates a very low level of digital maturity and business presence. Technically, the site uses modern JavaScript frameworks but lacks SEO optimization, accessibility features, and security headers. There is no evidence of HTTPS or SSL configuration from the provided data. The WHOIS information is unavailable due to unsupported TLD, preventing verification of domain ownership or legitimacy. From a security perspective, the site shows no signs of advanced security measures or compliance with privacy regulations such as GDPR. The absence of contact information and security policies further reduces trustworthiness. No vulnerabilities or malicious indicators were detected, but the minimal content limits comprehensive security assessment. Overall, the site presents a low-risk profile due to its minimal content but also a low trust and credibility level. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear business and contact information, and improving SEO and accessibility to enhance user trust and compliance.