Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,181001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
25,551–25,600 of 99,067
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.agglo-larochelle.fr is currently inaccessible, displaying only a minimal 'Access Denied' message with no meaningful content or metadata. The lack of WHOIS data and absence of any business or contact information severely limit the ability to assess the company's operations or market position. Technically, the site lacks HTTPS, security headers, and any modern web technologies, indicating a very low digital maturity. From a security perspective, the site shows no evidence of compliance with best practices or privacy regulations, and the blocked content suggests either a misconfiguration or intentional restriction. Overall, the risk profile is high due to the lack of transparency and accessibility, and strategic recommendations focus on establishing a proper web presence with secure, compliant, and informative content.
Région Nouvelle-Aquitainenouvelle-aquitaine.fr
Government · France
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Région Nouvelle-Aquitaine is the official regional government entity responsible for managing and supporting various public services and initiatives in the Nouvelle-Aquitaine region of France. The website serves as a comprehensive portal for citizens, providing information on economic development, employment, youth programs, territorial planning, and ecological transition. It maintains a strong market position as a government authority with a large audience base. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable, likely due to registry server response issues rather than malicious intent.
Technology
62Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The website netdna-ssl.com operates as a free web-based Instagram content downloader, offering services to download videos, photos, reels, and stories without requiring user registration. It targets content creators, marketers, and social media users seeking fast and high-quality Instagram media downloads. The site positions itself as a top-rated alternative to competitors like Snapinsta, emphasizing speed, quality, and privacy. Technically, the site uses modern technologies such as Tailwind CSS, Google Fonts, Google Adsense, and Ahrefs Analytics, hosted behind Cloudflare DNS. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. However, it lacks privacy and cookie policies, terms of service, and contact information, which impacts its compliance and trustworthiness. Security-wise, HTTPS is enabled with good SSL configuration, but no security headers or incident response policies are found. The domain WHOIS data is suspicious due to a future creation date and unrelated registrar, which lowers the domain's legitimacy score. Overall, the site is functional and professional but requires improvements in privacy, security policies, and domain registration transparency to enhance trust and compliance.
- Základní škola Jablůnka
zsjablunka.cz
Education · Czech Republic
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Základní škola Jablůnka is a small primary educational institution located in the Czech Republic, serving approximately 200 students from grades 1 through 9. The school is municipally operated by the local government of Jablůnka and offers comprehensive educational services including daycare and a school canteen. The website reflects a well-maintained digital presence with regular updates on school activities and events, targeting students, parents, and the local community. Technically, the site employs common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience across devices. However, the site lacks advanced security headers and formal privacy and terms of service documentation, which are important for compliance and trust. The absence of WHOIS data limits domain legitimacy verification, but the presence of official contact details and local government affiliation supports the site's authenticity. Overall, the website demonstrates a good balance of content quality and technical implementation but would benefit from enhanced security and privacy compliance measures.
- Mateřská škola Jablůnka
ms-jablunka.cz
Education · Czech Republic
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Mateřská škola Jablůnka is a small, local preschool educational institution located in the Czech Republic, serving the community of Jablůnka and surrounding areas. The website provides official information about the school, including educational programs, events, contact details, and news updates targeted primarily at parents and guardians of preschool children. The business model is that of a public or municipal preschool, focusing on early childhood education and related services. The site is well-branded and consistent with its educational mission. Technically, the website uses a combination of common web technologies including jQuery, Bootstrap, Swiper, and PhotoSwipe, integrated into a custom or proprietary CMS platform. The site is mobile optimized, accessible, and structured with clear navigation. Performance is moderate, with no major technical issues detected. However, there is no explicit hosting provider information or advanced frameworks identified. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published security policies. No WHOIS data is available, which reduces domain trustworthiness. There are no signs of vulnerabilities or malicious content, but the absence of privacy and terms of service documents and incident response contacts indicates room for improvement in compliance and transparency. Overall, the website is functional, trustworthy for its intended audience, and professionally presented. Strategic improvements in security posture, privacy compliance, and domain registration transparency would enhance its credibility and resilience.
- JRK Česká republika s.r.o.
meneodpadu.cz
Government · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
JRK Česká republika s.r.o. is a medium-sized company specializing in waste management consulting and solutions primarily targeting municipalities and local governments in the Czech Republic. With over 10 years of experience, JRK offers services such as PAYT system implementation, waste data tracking, composting solutions, and digital platforms to improve waste management efficiency and sustainability. The company positions itself as a trusted partner with a strong focus on environmental responsibility and cost savings for public entities. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and ActiveCampaign. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. However, some security headers are not explicitly detected, and the site relies on multiple external scripts which require ongoing security monitoring. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but improvements are recommended in implementing comprehensive security headers and ensuring robust input validation on forms. The absence of WHOIS data reduces transparency and trust slightly, but the presence of ISO 14001 certification and EU co-financed projects supports legitimacy. Overall, JRK Česká republika presents a professional and credible online presence aligned with its business goals. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and possibly publishing a security.txt file to improve vulnerability disclosure and incident response readiness.
Office de tourisme Nice Côte d'Azurnicecotedazur-greeters.com
Hospitality · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.nicecotedazur-greeters.com represents the official platform for the Nice Côte d'Azur Greeters, a volunteer-based cultural tourism initiative affiliated with the local tourism office. It offers visitors the opportunity to meet local volunteers ('Greeters') who provide free guided walks sharing their passion and knowledge of Nice and the surrounding Côte d'Azur region. The site is well-branded, professionally designed, and targets tourists seeking authentic local experiences. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance. The presence of Google Tag Manager and Cookiebot indicates a moderate level of user tracking balanced with GDPR-compliant consent mechanisms. Security posture is generally good with HTTPS enforced, though explicit security headers are not detected in the provided data. The absence of WHOIS registration data is a notable anomaly, reducing transparency and trust in domain registration details. Overall, the site is safe, professional, and serves a niche non-profit hospitality sector effectively.
Centre des Congrès Océaniceoceanice-congres.com
Hospitality · France
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.oceanice-congres.com represents the Centre des Congrès Océanice, a modern congress and event center located in Nice, France. It offers modular event spaces, accessibility features, and an eco-responsible approach to hosting events. The site targets event organizers, businesses, associations, and public entities seeking professional venues in the region. The business model focuses on venue rental and associated event services, positioning itself as a new and environmentally conscious player in the hospitality sector of Nice. Technically, the website is built on WordPress 6.6.2 with a variety of plugins including Yoast SEO for optimization, Iris Map for mapping features, and Sentry for error tracking. It uses modern web technologies such as jQuery and MapLibre GL JS. The site is well-optimized for SEO and mobile devices, with good accessibility features. Performance is moderate, with room for improvement in loading speed and technical enhancements. From a security perspective, the site uses HTTPS with a good SSL configuration and employs Sentry for monitoring. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, although the website content itself appears professional and legitimate. Overall, the website presents a solid business presence with good technical implementation and security posture but requires improvements in privacy compliance and domain registration transparency to enhance trust and regulatory adherence.
Bureau des Congrès de Nice Côte d’Azurmeet-in-nicecotedazur.com
Hospitality · France
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website 'Meet in Nice : bureau des congrès de Nice Côte d'Azur' serves as the official platform for the Bureau des Congrès de Nice Côte d’Azur, providing comprehensive support and information for organizing professional events in the Nice region. It targets event organizers, corporate clients, and tourism professionals, positioning itself as a regional leader in destination marketing and event facilitation. The site offers services including event planning assistance, venue and accommodation information, and local expertise, emphasizing sustainability and eco-responsibility. The business model focuses on promoting Nice Côte d'Azur as a premier MICE (Meetings, Incentives, Conferences, Exhibitions) destination.
French Riviera Passfrenchrivierapass.com
Hospitality · France
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
French Riviera Pass operates a professional multilingual tourism website offering city passes for Nice and the Côte d'Azur region. The business targets tourists seeking convenient access to attractions and discounts. The website is built on WordPress with modern performance and SEO optimizations, including lazy loading and Google Tag Manager integration. Security posture is good with HTTPS enforced, but lacks explicit security headers and a visible incident response policy. The absence of WHOIS data for the domain is a notable anomaly that reduces trust, though the website content and design are professional and trustworthy. Overall, the site demonstrates a mature digital presence suitable for its hospitality sector niche.
Other · France
50Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website 5mcl.fr currently presents no accessible content, metadata, or business information. The domain is registered with GANDI since 2021 and is active, but the website itself appears to be either under construction or blocked by security mechanisms. There are no visible privacy policies, contact details, or technical implementations such as scripts or analytics. This severely limits the ability to assess the business or security posture. The lack of HTTPS and security headers further reduces trustworthiness. Overall, the site is not currently suitable for business or customer engagement.
- EError
j01l4h3n.com
Other
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The analyzed domain j01l4h3n.com currently hosts no accessible website content beyond a minimal 404 Not Found error page. There is no metadata, structured data, or business information available to assess the company's operations, market position, or services. The domain is registered with a reputable registrar, Gandi SAS, and has a valid registration period, but the lack of content and contact details significantly limits the ability to evaluate the business or its credibility. Technically, the site lacks modern web technologies, security headers, and SEO optimizations, indicating a very low digital maturity level. Security posture is minimal with basic SSL but no advanced protections or policies in place. Overall, the site presents a high risk due to lack of transparency and functionality, and it is not possible to perform a comprehensive security or compliance assessment based on the current state.
- AAccess to this page has been denied
salomon.com
Other
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website at salomon.com is currently inaccessible due to a security challenge page that blocks content access. This prevents extraction of business, contact, or compliance information. The domain is long-established since 1995, registered via Nameshield SAS, and shows legitimate domain status locks, indicating a trustworthy registration. However, the inability to access actual website content limits the ability to assess the company's business model, services, or security posture in detail. The technical infrastructure includes JavaScript-based captcha protection from a third-party provider, indicating a focus on bot mitigation. Due to the content block, no privacy, cookie, or terms policies are detectable, and no contact or security policy information is available. Overall, the site is protected by a generic WAF or security mechanism, resulting in a low AI score and incomplete analysis.
Les Arcs Reservationlesarcs-reservation.com
Hospitality · France
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Les Arcs Reservation operates as the official online booking platform for accommodations and ski packages in the Les Arcs ski resort area in France. The website offers a variety of lodging options including apartments, hotels, chalets, and all-inclusive ski packages, targeting tourists and vacationers seeking a seamless reservation experience. The business positions itself as a trusted local expert with a focus on customer service and comprehensive offerings for winter and summer stays. Technically, the website is built on the Drupal CMS platform and leverages modern JavaScript libraries such as jQuery, Swiper.js, and Air Datepicker to provide an interactive and responsive user experience. The site is mobile-optimized and includes SEO best practices, although performance is moderate. Security is implemented with HTTPS and secure form handling, but lacks some advanced security headers and explicit privacy and cookie policies. From a security perspective, the site shows a good baseline with HTTPS and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data and domain transparency is a concern, reducing overall trustworthiness. No incident response or vulnerability disclosure information is provided, and privacy compliance indicators are minimal. Overall, the website is professional and functional with strong business credibility but would benefit from improved transparency in domain registration, enhanced privacy compliance, and stronger security header implementation to increase trust and security posture.
YoPlanningyoplanning.pro
Technology
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
YoPlanning is a SaaS provider specializing in online booking, planning, and payment software solutions targeted at businesses and professionals requiring streamlined scheduling tools. The website presents a professional and consistent brand image with a focus on ease of use and integration with popular social login providers such as Google, Apple, and Facebook. The technical infrastructure leverages modern web technologies including Django backend (implied), Google Cloud Storage for static assets, and integration with Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and responsive design. Security posture is solid with HTTPS enforced, CSRF protection, and secure login forms, although some security headers are missing and no explicit security or incident response policies are publicly disclosed. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. WHOIS data is unavailable due to TLD limitations and privacy protection, which is common for SaaS providers but slightly reduces trust. Overall, the website is legitimate, functional, and professionally maintained with room for improvement in privacy compliance and security transparency.
- EUROIMMUN Medizinische Labordiagnostika AG
euroimmun.info
Healthcare · Germany
56Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Euroimmun Medizinische Labordiagnostika AG is a large, internationally recognized manufacturer of medical diagnostic products, specializing in reagents and test systems for autoimmune, infectious, and allergy diagnostics. The company operates globally with multiple country-specific domains and is part of the Revvity, Inc. portfolio. The website is built on TYPO3 CMS, employs Piwik analytics, and offers a comprehensive product portfolio with a professional and modern design. However, the absence of explicit privacy and cookie policies and lack of WHOIS registration data reduce the overall trust and compliance posture. Security headers are not detected, and incident response information is missing, indicating areas for improvement in security maturity. Overall, the website is well-structured and serves its target audience effectively but would benefit from enhanced transparency and security practices.
Ministério da Gestão e Inovação em Serviços Públicosvlibras.gov.br
Government · Brazil
75Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website represents an official Brazilian government digital service focused on accessibility, specifically the VLibras suite which provides automatic translation of digital content into Brazilian Sign Language (Libras). It is a collaborative initiative involving multiple government ministries and a federal university, positioning it as a key public service for digital inclusion of deaf individuals. The site is well-structured, professionally designed, and leverages modern web technologies and accessibility standards to deliver its content effectively. Technically, it uses Plone CMS and integrates common libraries such as jQuery and Font Awesome, hosted likely on government infrastructure with strong SSL and security headers in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though incident response contacts and vulnerability disclosure mechanisms could be improved. Privacy and cookie policies are present and appear comprehensive, aligning with GDPR and Brazilian LGPD requirements. Overall, the site is trustworthy, professional, and serves a critical government function in digital accessibility.
ONdrugDeliveryondrugdelivery.com
Healthcare
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
ONdrugDelivery is a well-established B2B publication specializing in the global drug delivery industry, providing high-quality, focused content including expert views, interviews, and industry news. The website targets pharma and biopharma professionals worldwide and maintains a strong market position as a trusted source of industry intelligence. Technically, the site is built on WordPress with a moderate performance profile, leveraging common plugins for SEO, advertising, and cookie compliance. The infrastructure includes Cloudflare DNS and GoDaddy as registrar, with SSL properly configured. Security posture is solid with HTTPS enforced and domain locking, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. No direct contact information or incident response details are publicly available, which could be improved. Overall, the site is professional, trustworthy, and safe for general audiences.
Lakehouse Turbolakehouseturbo.com
Technology
68Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Lakehouse Turbo is a technology-focused company offering a cloud-based solution to optimize Databricks investments by reducing compute costs and enabling high concurrency scaling. The website is professionally designed, leveraging WordPress and modern web technologies, and integrates privacy compliance tools such as Cookiebot. The business appears to be a specialized service under the Exasol brand, targeting data professionals and enterprises using Databricks. The technical infrastructure is mature with good SEO and accessibility practices. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable concern, impacting domain transparency and trust. Overall, the website is functional, secure, and privacy-conscious but would benefit from enhanced business transparency and formal security documentation.
Other · Poland
66Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website projectic.pl is currently inaccessible, returning a 403 Forbidden error page served by an nginx web server. This indicates that the content is blocked or restricted, preventing any meaningful extraction of business or security information. The domain is registered with OVH SAS since 2012, which suggests a legitimate and stable registration history, but no further business details or contact information are available from the site itself. Due to the lack of accessible content, no metadata, forms, or external links could be analyzed. The absence of privacy, cookie, or terms of service policies, as well as contact details, limits the ability to assess compliance or user engagement. The technical infrastructure appears minimal with no visible security headers or HTTPS information provided. Overall, the site’s digital maturity and security posture cannot be properly evaluated given the blocked status.
- LLandefeld Druckluft und Hydraulik GmbH
landefeld.com
Manufacturing · Germany
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Landefeld Druckluft und Hydraulik GmbH operates a professional B2B e-commerce platform specializing in pneumatics, hydraulics, and industrial supplies. The company positions itself as a leading Europe-wide wholesaler with a large product catalog and technical consulting services. The website supports multiple languages and offers a comprehensive online shopping experience targeting industrial and commercial customers. Technically, the site uses modern frontend technologies including Vue.js and Bootstrap, integrates Google Tag Manager and consent management tools, and maintains good SEO and mobile optimization standards. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response information are absent. The lack of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site is well-designed, user-friendly, and compliant with GDPR requirements, making it a trustworthy platform for its target audience.
Energiequelle GmbHenergiequelle.de
Energy · Germany
75Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Energiequelle GmbH is a well-established family-owned company founded in 1997, specializing in the development, construction, and operation of renewable energy projects including wind energy, photovoltaic systems, substations, hybrid solutions, and energy storage. With over 600 employees and international presence across Europe and South Africa, the company positions itself as a reliable partner in the energy transition sector. The website reflects a professional and comprehensive digital presence, leveraging the Neos CMS and modern web technologies to deliver content effectively. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are not directly found in the provided content. Overall, the company demonstrates strong business credibility and technical maturity, with room for improvement in transparency of security and privacy documentation.
Viessmann Technologies GmbHviessmann-vitec.com
Healthcare
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Viessmann Technologies GmbH operates as a specialized provider of cleanroom and controlled air solutions targeting industries such as healthcare, life sciences, high-tech manufacturing, and indoor growing. The company positions itself as a competent partner for industry-specific cleanroom technology applications, supported by a professional website that highlights their solutions, project management expertise, and references. The website reflects a medium-sized business with a clear affiliation to the Viessmann Group, enhancing its market credibility. Technically, the website is built on the Scrivito CMS platform and integrates modern analytics and marketing tools such as Microsoft Clarity and Pardot. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. However, some security headers are not explicitly detected, and the WHOIS data for the domain is missing, which raises concerns about domain registration transparency. From a security perspective, the site enforces HTTPS and employs cookie consent tools, but lacks visible security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data and security headers suggests areas for improvement to enhance trust and compliance. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency in domain registration and enhanced security header implementation. Strategic recommendations include adding explicit security policies, incident response contacts, and regular third-party script audits to strengthen security posture and compliance.
Viessmann Generations Group GmbH & Co. KGviessmann.family
Energy · Germany
73Medium
NIS2 55 · GDPR 65
NIS2 55 · GDPR 65
Viessmann Generations Group GmbH & Co. KG operates as an impact-driven investment ecosystem focused on sustainable and long-term investments across multiple thematic fields including energy transition, health, education, and democratic values. The company positions itself as a strategic investor with a diversified portfolio of majority, minority, generational, and early-stage innovation investments, complemented by ecosystem partnerships and philanthropic initiatives. Their market position is that of a large, reputable player in the energy and sustainability sectors, with a strong emphasis on systemic change and climate impact. Technically, the website is built on modern web technologies such as Webflow CMS, Google Tag Manager, and Usercentrics for consent management, ensuring a smooth user experience with excellent mobile optimization and accessibility. The site is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture, though improvements are recommended in security header implementation and vulnerability disclosure. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain registration trust assessment, but the professional presentation and detailed business information support legitimacy. Strategic recommendations include enhancing security transparency, adding incident response information, and improving WHOIS data accessibility.
- Top Porn Videos Free - Full HD and 4K Porn XXX Tube
hitporntube.com
Media
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.hitporntube.com operates as an adult entertainment platform offering free streaming and downloadable pornographic videos in HD and 4K quality. It targets an adult audience exclusively, providing a wide range of explicit content categorized by various adult genres. The business model appears to rely primarily on advertising revenue through third-party ad networks and tracking services. The site lacks visible corporate or contact information, privacy policies, or terms of service, which limits transparency and user trust. Technically, the site uses standard web technologies including jQuery and JavaScript, with a basic but functional design optimized for mobile devices. HTTPS is enabled, ensuring encrypted connections; however, the absence of advanced security headers such as Content-Security-Policy and HSTS reduces the overall security posture. The site loads moderately fast but could benefit from performance and accessibility improvements. From a security perspective, the site does not expose sensitive data but lacks comprehensive security best practices. The missing WHOIS data and domain registration details raise concerns about legitimacy and transparency, common in adult content domains but detrimental to trustworthiness. No privacy or cookie policies were found, indicating poor compliance with data protection regulations such as GDPR. Overall, the website presents moderate risks related to privacy, security, and business credibility. Strategic improvements in transparency, security headers, and compliance documentation are recommended to enhance trust and reduce potential legal and security risks.
Porno Catalogeroticax.org
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website eroticax.org operates as an adult entertainment catalog and review platform, focusing on listing premium porn sites and providing links to free HD porn downloads. It targets an adults-only audience interested in adult video content and related services. The business model appears to be affiliate/referral based, aggregating content and directing traffic to partner adult sites. The site was established in 2018 and maintains a small-scale online presence without visible corporate transparency or detailed business information. Technically, the site uses basic HTML and CSS with Cloudflare DNS services but lacks advanced frameworks or CMS detection. The site shows moderate performance and basic mobile optimization but lacks accessibility and SEO best practices. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks critical security headers and privacy compliance documentation such as privacy or cookie policies. The absence of contact information and incident response channels reduces transparency and trust. The domain registration is consistent with the business type and age but lacks registrant detail. Overall security posture is weak, with recommendations to improve HTTPS configuration, add security headers, and implement privacy policies. The overall risk assessment indicates a low trustworthiness level due to missing compliance and security best practices. Strategic recommendations include enhancing security configurations, adding privacy and cookie policies, improving business transparency, and regularly auditing external links for safety to reduce potential risks and improve user trust.
- Hirose Electric Co., Ltd.
hirose.com
Manufacturing
65Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hirose Electric Co., Ltd. is presented as a leading global supplier of electrical and electronic connectors, focusing on innovative interconnect solutions and worldwide manufacturing capabilities. However, the website content is minimal, lacking detailed information, contact details, or policies, which limits the ability to fully assess the company's digital maturity. The technical infrastructure appears basic with standard HTML, CSS, and a single analytics script, but no advanced frameworks or CMS detected. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy compliance indicators. The WHOIS data is missing or inaccessible, raising concerns about domain legitimacy despite the presence of website content. Overall, the site appears to be a minimal or placeholder page rather than a fully developed corporate website.
- Aandra.com | 502: Bad gateway
andra.com
Other
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website andra.com is currently inaccessible due to a Cloudflare 502 Bad Gateway error, indicating a server-side issue preventing content delivery. The domain is long-registered since 1998 with Network Solutions, suggesting a legitimate and longstanding registration, but no business or contact information is available on the site to confirm operational status or business details. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the origin server is not responding correctly. No privacy, cookie, or security policies are published, and no contact or social media information is present, limiting the ability to assess compliance or business credibility. Overall, the site is non-functional at this time, resulting in a low AI score and incomplete analysis.
- Enhance Hosting Automation LTD
enhance.com
Technology · United Kingdom
67Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
Enhance Hosting Automation LTD operates a next-generation hosting control panel platform designed for scalable, secure multi-server hosting environments. The company targets hosting providers, web agencies, and businesses requiring advanced hosting management tools. Their platform offers comprehensive features including website isolation, security tools, backup and disaster recovery, WordPress management, and API access, positioning them as a modern and competitive player in the hosting technology sector. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built using the Astro framework and leverages Cloudflare for DNS and CDN services, ensuring fast performance and good mobile optimization. The use of modern web technologies and structured navigation contributes to a high-quality digital presence. SEO and accessibility practices are well implemented, supporting discoverability and usability. From a security perspective, the platform emphasizes strong security features such as automatic SSL provisioning, ModSecurity with OWASP rules, brute force protection, and role-based access control. However, the website lacks explicit security headers and publicly available security policies or incident response information, which could be improved to enhance trust and compliance. The domain is well-established with a long registration history, consistent with the company's claims, and uses Cloudflare DNS, indicating a mature security posture. Overall, Enhance demonstrates a strong business and technical foundation with room for improvement in privacy compliance and explicit security disclosures. The risk profile is low, with no indications of vulnerabilities or malicious activity. Strategic enhancements in transparency and security policy publication would further solidify their market position and trustworthiness.
Mark Cuban Companiesmybox.com
Other · United States
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Mark Cuban Companies is a diversified investment and business management entity led by entrepreneur Mark Cuban, headquartered in Dallas, Texas. The company operates across multiple sectors including sports franchises, healthcare, blockchain, media, consumer products, and technology ventures. The website serves as a portfolio showcase of these companies and initiatives, targeting entrepreneurs, investors, and business partners. Technically, the site is built on WordPress with modern SEO and web font technologies, hosted with Cloudflare DNS and registered via GoDaddy. The site is mobile optimized and provides a good user experience with clear navigation and professional branding. Security posture is adequate with HTTPS and domain protection but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.
- Olife Energy, a.s.
olife-energy.com
Energy · Czech Republic
54Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Olife Energy, a.s. is a Czech-based company specializing in the development and production of intelligent electric vehicle (EV) charging stations and comprehensive energy solutions. Established in 2014, the company offers a wide range of AC and DC charging stations with power outputs from 3.7 kW up to 400 kW, catering to various customer needs including wall-mounted and stand-mounted options. Their business model integrates hardware manufacturing with intelligent software and cloud services, positioning them as a niche regional player with a focus on quality and customization. The website reflects a professional and consistent brand image, targeting EV owners, businesses, and energy solution customers primarily in the Czech Republic and surrounding regions. Technically, the website is built using modern web technologies including Angular 11 and Bootstrap 4.6, with integration of popular analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to be managed through Forpsi, a Czech hosting provider, consistent with the company’s local presence. Performance is moderate with room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS (implied by external scripts loaded via HTTPS) but lacks visible advanced security headers and DNSSEC is not enabled, which are areas for enhancement. Privacy compliance is strong with clear GDPR and cookie policies and an opt-in consent mechanism. Contact information is transparent and includes multiple channels. However, no explicit security policy or incident response contacts are published, which could be improved to enhance trust and readiness. Overall, Olife Energy’s website demonstrates a solid business and technical foundation with good privacy practices but moderate security posture. Strategic improvements in security headers, DNSSEC, and incident response transparency would strengthen their security maturity and trustworthiness.
Protempisprotempis.com
Technology · United States
68Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Protempis operates as a specialized technology company offering time and frequency products including GNSS timing receivers, antennas, and PTP Grandmaster clocks. The company targets businesses and professionals requiring precise timing solutions, positioning itself as a niche provider in the technology sector. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript polyfills, indicating a moderate level of digital maturity. However, the site lacks advanced SEO optimization and comprehensive privacy or cookie policies, which limits its compliance posture. Security-wise, the site uses HTTPS and some cookie handling security scripts but lacks visible security headers and formal security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the site presents basic business information with moderate technical implementation but requires improvements in security, privacy compliance, and domain registration verification to enhance trust and professionalism.
Robustelrobustel.com
Technology
60Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Robustel is a globally recognized manufacturer and provider of industrial IoT and M2M solutions, specializing in cellular routers, gateways, and edge computing devices. Their product portfolio includes 4G/LTE/5G routers, LoRaWAN gateways, and cloud-based device management platforms, targeting industrial sectors such as energy, transportation, and manufacturing. The website demonstrates a mature digital presence with comprehensive product information, multilingual support, and active news and event updates, reflecting ongoing business operations and market engagement. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and SEO, and employs security best practices including HTTPS and Content-Security-Policy headers. However, some security headers could be enhanced for improved protection. The absence of WHOIS registration data is a notable anomaly, though the website content and certifications suggest a legitimate and established business. Overall, Robustel's online presence is professional, secure, and business-focused, supporting their market position as a leading industrial IoT solutions provider.
Telittelit-cinterion.com
Technology
71Medium
NIS2 55 · GDPR 50
NIS2 55 · GDPR 50
Telit is a global IoT solutions provider specializing in cellular modules, connectivity services, edge AI, and custom IoT solutions. The company targets businesses and enterprises seeking to accelerate digital transformation through IoT technologies. Their market position is strong with a broad portfolio and platform offerings that support various industries including technology, energy, and transportation. The website demonstrates a mature digital presence with professional design, comprehensive content, and active social media engagement. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses advanced tools such as Yoast SEO, Smart Slider 3, and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. The WHOIS data is unavailable, which raises some concerns about domain registration transparency. However, the website's professional content, social media presence, and security practices support its legitimacy. Overall, the site presents a trustworthy and authoritative front for Telit's IoT business. Strategic recommendations include publishing detailed security and incident response policies, enhancing direct contact information availability, and verifying domain registration details to improve trust and compliance.
- NOR a.s.
nor.cz
Transportation · Czech Republic
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
NOR a.s. is a Czech company specializing in railway and road construction, maintenance, and sales of steel materials. Founded in 1991, it serves a broad client base including major transportation and industrial companies in the Czech Republic. The website presents a professional image with clear business information and multiple service offerings related to railway infrastructure and civil engineering. Technically, the site uses established but somewhat dated technologies such as jQuery and Bootstrap 3.4, with a cookie consent mechanism implemented to comply with privacy regulations. Security posture is moderate with no visible critical vulnerabilities but lacks advanced security headers and a published privacy policy. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is functional, trustworthy, and business-focused but could improve in privacy and security transparency.
Technology · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
fnordserver.eu is a small managed hosting provider based in Germany, offering full-service managed hosting solutions focused on high performance and support for the latest web technologies. The website presents a professional and well-structured digital presence built on modern frameworks such as Vue.js and Nuxt.js, ensuring good performance and mobile optimization. Contact information is clearly provided, including a support email and phone number, enhancing business credibility. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or incident response information, indicating room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.
Biskupství ostravsko-opavskévarhanyproostravu.cz
Non-profit · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website 'VARHANY PRO OSTRAVU' is a dedicated non-profit project aimed at supporting the installation of new cathedral organs in the Ostrava Cathedral of the Divine Savior. It is operated under the auspices of the Biskupství ostravsko-opavské (Ostrava-Opava Diocese), targeting donors, cultural enthusiasts, and the local community. The site provides detailed information about the project, donation mechanisms including online adoption of organ pipes, and updates on progress. The business model is donation-based, focusing on cultural heritage preservation and community engagement. Technically, the website is built on WordPress using Elementor, with integrations for GDPR compliance (Complianz plugin), Google Analytics for visitor tracking, and Google Translate for multilingual support. Hosting and domain registration are managed by WEDOS, a reputable Czech provider. The site demonstrates good SEO practices, mobile responsiveness, and moderate performance. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism aligned with GDPR. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The domain registration is recent but consistent with the project's timeline, and no suspicious WHOIS patterns were identified. Overall, the security posture is good but could be improved with additional headers and a vulnerability disclosure policy. The overall risk assessment is low, with the site presenting a trustworthy and professional front for a cultural non-profit initiative. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility features to further strengthen compliance and user trust.
- Sdružení vlastníků obecních a soukromých lesů v ČR
kouzlolesa.cz
Other · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website 'Kouzlolesa-cz' serves as an educational and informational platform focused on forestry, forest care, and related environmental topics primarily targeting forest owners and nature enthusiasts in the Czech Republic. It is operated by the Sdružení vlastníků obecních a soukromých lesů v ČR and supported by the Czech Ministry of Agriculture. The site offers blog articles, practical advice, and opportunities for advertising relevant to the forestry sector. Technically, the site is built on the Webnode CMS platform, leveraging modern web technologies including Amazon Cloudfront CDN, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and performs moderately well, with good SEO practices in place. Security-wise, the site uses HTTPS and some basic security headers but lacks advanced security headers and visible security policies. The absence of WHOIS data reduces domain trustworthiness, although the site content and branding suggest legitimacy. Privacy compliance is minimal, with no explicit privacy or terms of service pages found. Overall, the site is a functional, niche informational resource with moderate security and privacy posture.
- Alexion
alexion.us
Healthcare · United States
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Alexion, a part of AstraZeneca Pharmaceuticals LP, operates a dedicated US website focused on delivering therapies for rare diseases. The company is positioned as a leader in rare disease research and patient support, targeting US audiences including patients, caregivers, and healthcare professionals. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its parent company. Technically, the site uses modern web technologies including Sitecore CMS, AWS hosting, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with no signs of malicious activity or content safety concerns.
RATP Dev Australiaratpdevaustralia.com.au
Transportation · Australia
71Medium
NIS2 22 · GDPR 53
NIS2 22 · GDPR 53
RATP Dev Australia is a regional branch of the global RATP Dev group, specializing in the operation and maintenance of urban and intercity transportation systems. The company leverages the extensive experience of its parent, RATP Group, a major public transport operator with over a century of history. The website presents a professional image with detailed references to global operations, emphasizing expertise in automated metro systems and various transit modes. Technically, the site is built on Drupal 10 and integrates modern analytics tools with privacy-conscious configurations. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and transparency of policies. WHOIS data is incomplete, which slightly impacts trust but does not detract from the overall legitimacy indicated by the website content and branding.
RATP Devratpdevusa.com
Transportation · United States
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
RATP Dev USA operates as a regional branch of the global RATP Dev group, providing urban and intercity transportation services across multiple continents. The company offers a wide range of transit solutions including bus, tramway, paratransit, metro, rail, cable cars, and sightseeing services. Their market position is strong as one of the largest multi-modal urban public transit operators with over 120 subsidiaries in 17 countries. The website reflects a professional and consistent brand image targeting transit agencies and passengers. Technically, the website is built on Drupal 10 CMS and leverages modern web technologies including Google Analytics, Matomo for analytics, and Google Maps API for geolocation features. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no explicit security or incident response policies are published. Security posture is adequate with HTTPS enabled and privacy-conscious analytics configurations, but the lack of WHOIS data and absence of privacy policy and contact information reduce trust. No signs of malware or phishing were detected. Overall, the site is safe and business-focused but would benefit from improved transparency and security disclosures. The risk assessment indicates moderate risk primarily due to missing WHOIS data and incomplete privacy and security disclosures. Strategic recommendations include publishing privacy and security policies, adding security headers, providing clear contact information, and establishing a vulnerability disclosure process.
- RATP Group
ratpgroup.com
Transportation · France
63Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
RATP Group is a leading global urban transport operator, ranked third worldwide, providing comprehensive mobility services, infrastructure management, real estate, and safety solutions. The company serves cities and regions primarily in France but also internationally, supported by a large workforce and multiple subsidiaries. The website reflects a mature digital presence with a focus on sustainability and corporate social responsibility. Technically, the site uses modern frameworks such as React and Next.js, hosted on Akamai infrastructure, and integrates privacy-conscious analytics via Matomo. Security posture is strong with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.
- VVia Transportation
viavan.com
Transportation · United States
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Via Transportation operates a comprehensive digital platform transforming public transit and shared mobility through software and operations. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong with strategic partnerships such as with Waymo and Citymapper, offering a suite of services from microtransit to corporate shuttles. Technically, the website is built on HubSpot CMS, leveraging modern analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though direct contact emails and phone numbers are not publicly listed, relying on forms for communication.
EFFIAeffia.com
Transportation · France
74Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
EFFIA is a prominent parking service provider operating primarily in France and Belgium, offering parking space reservations and subscription plans across more than 500 locations. The company targets drivers and commuters seeking convenient and cost-effective parking solutions near city centers and train stations. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site is built on Drupal CMS and integrates modern tools such as Google Maps API, Didomi for consent management, and analytics platforms like Piano Analytics and Google Tag Manager. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS registration data for the domain www.effia.com raises some concerns about domain legitimacy, though the website content and business presence appear credible. Overall, the site scores well in content quality, technical implementation, and security, but could improve business credibility by providing more transparent domain registration and direct contact information.
Marina Strážnicemarinastraznice.cz
Transportation · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Marina Strážnice is a specialized marine service provider based in the Czech Republic, offering comprehensive boat maintenance, repair, and accessory sales. Their services cover outboard and inboard motor repairs, boat trailer servicing, marine oils and parts sales, boat painting, upholstery, electrical repairs, and custom boat furniture manufacturing. The company targets boat owners and operators seeking professional care for their vessels. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a solid digital presence for a small local business. Technically, the site is built on WordPress with Elementor and related plugins, leveraging modern web technologies and Google Analytics for user tracking. Security posture is good with HTTPS enabled, though security headers and privacy compliance measures are lacking. The absence of WHOIS data limits domain legitimacy verification, but the website content and contact information suggest a trustworthy business. Strategic improvements include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure information to enhance compliance and trust.
Paperton ABpaperton.com
Media · Sweden
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Paperton AB is a Swedish company specializing in digital publishing solutions for magazines and newspapers, offering apps for iPhone, iPad, Android, and web platforms. Established in 2009, it serves publishers and readers by providing a platform to access digital magazines. The website reflects a niche media technology provider with a professional online presence and consistent branding. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google services for analytics and advertising, hosted on AWS infrastructure. Performance and mobile optimization are adequate, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers, and no visible privacy or cookie policies, indicating compliance gaps. The domain registration is consistent and trustworthy, with no privacy protection or suspicious WHOIS patterns. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
WPDreamsajaxsearchpro.com
Technology
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ajax Search Pro is a specialized WordPress plugin developed by WPDreams, offering a customizable and efficient live search engine replacement for WordPress websites. The company positions itself as a niche leader in the WordPress plugin market, targeting website developers and administrators seeking enhanced search functionality. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Smart Slider 3, and is hosted behind Cloudflare DNS services, indicating a modern and scalable technical infrastructure. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. Security-wise, the site uses HTTPS with a good SSL configuration and domain status protections, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
- Slovenská biblická spoločnosť
bibliaprenepocujucich.sk
Non-profit · Slovakia
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website 'Biblia pre nepočujúcich' is a non-profit project managed by the Slovenská biblická spoločnosť, providing biblical stories in Slovak sign language targeted at the deaf community in Slovakia. The project is educational and religious in nature, relying on donations for continuation. The site features video content, a sign language dictionary, and is designed with accessibility in mind, though some accessibility features could be improved. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, JW Player for video playback, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for tracking and analytics. The site is mobile optimized and has good SEO practices, but lacks some advanced accessibility features and security headers. From a security perspective, the site uses HTTPS and includes a CSRF token, but does not expose security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, which is a compliance gap. No contact information for security incidents or data protection officers is provided. The domain uses privacy protection in WHOIS, which is justified for this non-profit. No vulnerabilities or suspicious patterns were detected. Overall, the website is functional, professional, and safe for general audiences, but improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security posture.
Other · Slovakia
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Biblia.sk is a Slovak online platform providing access to the ecumenical translation of the Bible, targeting Slovak-speaking Christian audiences. The site offers comprehensive biblical texts, including the Gospel of Mark chapter 1, with a clean, modern, and mobile-optimized interface. The platform is supported by related partners including an e-shop and a biblical society donation site. Technically, the site is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on AWS infrastructure with DNSSEC enabled, ensuring good performance and security. Security posture is strong with HTTPS and cookie consent mechanisms, though the absence of a privacy policy and terms of service pages limits full compliance visibility. Overall, the site is trustworthy, safe, and professionally maintained, serving a niche religious educational purpose.
Other
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website giftlegacy.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha, which prevents direct content access and analysis. The domain is long-established, registered since 1999 via GoDaddy.com, LLC, with no privacy protection enabled. Due to the WAF challenge, no business, contact, or policy information is visible, limiting the ability to assess the company's market position, services, or compliance posture. The technical infrastructure includes Cloudflare as a security and performance provider, but no further technology or CMS details are available. Security posture cannot be fully evaluated due to blocked content, but domain registration data suggests a stable and legitimate domain. Overall, the site requires removal or adjustment of WAF restrictions to enable proper content delivery and compliance transparency.