Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,182001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
26,551–26,600 of 99,067
- Sector s.r.o.
onlinegamesector.com
Other
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Onlinegamesector.com is a small-scale online gaming portal operated by Sector s.r.o., offering a broad selection of free browser games including flash, Unity 3D, HTML5, and multiplayer games. The site targets casual gamers seeking entertainment and relaxation. The business model is primarily advertising-supported, leveraging Google Adsense and tracking services such as Google Analytics and Quantcast. The website demonstrates moderate digital maturity with a functional design, basic mobile optimization, and standard SEO practices. However, the use of outdated JavaScript libraries and lack of visible security headers indicate technical debt and potential security risks. The absence of publicly available WHOIS data raises concerns about domain registration transparency, although the site itself appears legitimate and professionally maintained. Privacy compliance is minimal, with no dedicated privacy or terms of service pages, but a cookie consent mechanism is implemented via Quantcast CMP.
Two Circles Ltd.twocircles.com
Media · United Kingdom
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Two Circles Ltd. is a well-established UK-based sports marketing agency specializing in data-driven audience and revenue growth for leading sports properties worldwide. Their services include broadcast, social media, web and app development, fan data analytics, media rights, sponsorship, ticketing, and retail licensing. The company has a strong market position with over 900 clients and extensive data analytics capabilities, serving major sports organizations such as the Premier League, NFL, UEFA, and others. The website reflects a professional and modern digital presence built on WordPress with advanced JavaScript libraries, optimized for mobile and SEO. Security posture is good with HTTPS and some best practices, though improvements in security headers and vulnerability disclosure are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's credibility in the sports marketing sector.
2exViamasteredit.com
Technology · France
58Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
2exVia is a well-established French digital communication and marketing agency with over 25 years of experience. They offer a broad range of services including custom web and app development, video production, brand identity, and social media management. Their proprietary CMS, MasterEdit®, powers over 250 websites, demonstrating technical maturity and a strong market presence. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Matomo analytics and lazy loading for performance. Security posture is good with HTTPS and cookie consent implemented, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the overall trustworthiness given the professional content and social media presence. Overall, the site represents a credible and competent digital agency with a solid technical foundation.
Government
60Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
The Organization for Security and Co-operation in Europe (OSCE) is a prominent intergovernmental organization dedicated to security, cooperation, and human rights across Europe and neighboring regions. The website reflects a mature digital presence with comprehensive multilingual content, clear navigation, and professional design, targeting governments, policymakers, and civil society. Technically, the site is built on Drupal CMS, leveraging modern web technologies and analytics tools such as Google Analytics and New Relic, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policy and incident response information could be improved. Overall, the site demonstrates high trustworthiness and business credibility, with no signs of malicious activity or content safety concerns.
- Múzeum SNP
muzeumsnp.sk
Government · Slovakia
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Múzeum SNP is a Slovak government-affiliated museum dedicated to preserving and presenting the history of the Slovak National Uprising from 1938 to 1945. It offers exhibitions, educational programs, archival collections, and public events, positioning itself as a key cultural and historical institution in Slovakia. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting the general public, researchers, and students. Technically, the site is built on WordPress with modern plugins and frameworks, including WPBakery, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, serving its educational and cultural mission effectively.
Transportation · Slovakia
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Letecké Opravovne Trenčín, a.s. is a traditional Slovak company specializing in aircraft repair and manufacturing, uniquely positioned in its sector within Slovakia. The website serves as the official corporate portal, providing information about the company's services and heritage. The site is built on WordPress using the Astra theme, enhanced with SEO tools like Yoast and tracking via Google Analytics and Tag Manager. The technical infrastructure is modern and supports mobile responsiveness, though some performance optimizations could be considered. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site reflects a professional business presence but would benefit from enhanced transparency and security documentation.
Government · Slovakia
68Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Vojenské lesy a majetky SR, š.p. is a Slovak state enterprise responsible for the ecological management of forest and agricultural lands within military training areas. The organization operates through a general directorate and multiple branch offices, providing services such as forestry management, agricultural activities, water management, and public education. The website reflects a professional government portal with clear contact information and compliance with privacy regulations. Technically, the site uses modern web technologies including Bootstrap and Cookiebot for consent management, ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.
Government · Slovakia
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Vojenský historický ústav (VHÚ) is a Slovak government institution dedicated to military history research, archiving, museum exhibitions, and publication activities. It serves researchers, historians, students, and the general public interested in Slovak and Czechoslovak military history. The website reflects a well-established government entity with official affiliations to Slovak ministries and cultural bodies. The institution provides comprehensive services including archival access, exhibitions, and scholarly publications. Technically, the website is built on a modern CMS (SysCom), uses Bootstrap for responsive design, and integrates popular libraries such as Swiper and Fancybox for UI enhancements. Google Analytics is used for visitor tracking with a GDPR-compliant cookie consent mechanism in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers are not explicitly detected. Contact information is clearly presented with official email and phone numbers, enhancing trust and credibility. Overall, the website is professional, accessible, and trustworthy, reflecting the institution's authoritative role in Slovakia's military historical domain.
- AAglo Solutions s.r.o.
aglo.sk
Technology · Slovakia
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Aglo Solutions s.r.o. is a Slovakian technology company specializing in custom web applications, website and e-shop development, online marketing, and server management services. Established in 2003, the company has over 15 years of experience and serves more than 400 clients, positioning itself as a trusted local provider with ISO 9001 certification indicating a commitment to quality management. Their website reflects a professional and consistent brand image targeting businesses seeking tailored digital solutions. Technically, the site is built on the SysCom CMS platform, uses modern web technologies, and integrates Google Analytics for traffic insights. The site is mobile optimized and provides clear navigation and content relevant to its audience. Security-wise, the website uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and incident response disclosures, which are recommended for enhanced security posture. Overall, the domain registration details are consistent with the business claims, supporting the legitimacy and trustworthiness of the company.
- NNárodné obranné sily
noska.sk
Government · Slovakia
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.noska.sk represents the official Slovak government initiative 'Národné obranné sily' (National Defense Forces), focused on recruiting and training volunteers for national defense reserves. It targets Slovak citizens aged 18 to 65, including various security and emergency service personnel. The site provides detailed information on benefits, training schedules, and contact channels, supporting the government's defense readiness objectives. Technically, the site uses a modern CMS (SysCom), jQuery, and Bootstrap frameworks, with cookie consent mechanisms ensuring GDPR compliance. Security posture is adequate but could be improved by implementing additional security headers and explicit incident response policies. The WHOIS data aligns with the government affiliation, confirming legitimacy. Overall, the site is professional, trustworthy, and serves its purpose effectively.
- AAglo Solutions s.r.o.
syscom.sk
Technology · Slovakia
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SysCom, operated by Aglo Solutions s.r.o., is a Slovak technology company specializing in a proprietary content management system and application framework designed for rapid development of websites, intranet solutions, and online shops. The company targets businesses and developers seeking efficient web and application development platforms, boasting over 10 years of experience and a portfolio including government and corporate clients. The website presents a professional and consistent brand image with clear contact information and client references, positioning SysCom as a credible player in the regional technology sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and various UI plugins, running on the SysCom CMS platform. The site is mobile-optimized with good navigation and design quality, though performance is moderate. Google Analytics is used for visitor tracking, but no visible cookie consent or privacy policies are present, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, supporting legitimacy. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance, security header implementation, and formal policies to improve its security posture and regulatory adherence.
EUROMOTOReuromotor.sk
Transportation · Slovakia
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
EUROMOTOR is an authorized vehicle sales and service company based in Banská Bystrica, Slovakia. The company offers comprehensive services including vehicle sales, financing, insurance, and servicing, targeting general consumers in the local transportation sector. The website is professionally designed using WordPress CMS with modern plugins and tracking tools, indicating a moderate level of digital maturity. The presence of cookie consent via Cookiebot demonstrates some privacy awareness, although explicit privacy and terms of service policies are missing. Security posture is adequate with HTTPS and some best practices, but lacks detailed security policies and vulnerability disclosures. Overall, the website is trustworthy and functional but could improve compliance and security transparency.
x-bionic spherex-bionicsphere.com
Hospitality · Slovakia
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
x-bionic sphere is a large-scale sports and leisure resort located in Šamorín, Slovakia, offering a comprehensive range of services including Olympic-standard sports facilities, wellness and relaxation amenities, hotel accommodations, diverse dining options, and event hosting capabilities. The resort targets both professional and amateur athletes as well as families and corporate clients, positioning itself as a unique destination in the region with a strong brand presence supported by the X-BIONIC® sportswear brand. The website is professionally designed, multilingual, and integrates modern web technologies to provide a rich user experience. Privacy and cookie policies are well implemented, reflecting compliance with GDPR standards. However, the absence of WHOIS registration data raises concerns about domain legitimacy that should be further investigated. Overall, the digital infrastructure is mature with good security practices, though some security headers could be enhanced. The resort maintains active social media channels and partners with related businesses to extend its market reach.
Automagazin.sk - Novinky, testy, recenzieautomagazin.sk
Media · Slovakia
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Automagazin.sk is a leading Slovak automotive media website offering news, vehicle tests, reviews, motorsport coverage, and travel advice. It targets Slovak-speaking automotive enthusiasts and maintains a strong market position as the most read motorist magazine in Slovakia. The business model relies on advertising and subscription services, supported by partnerships with related domains. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and Adsense, and it demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR consent. Overall, the site is professional, trustworthy, and content-rich, with no blocking or WAF interference detected.
- Ringier Slovakia Media s.r.o.
aktuality.sk
Media · Slovakia
72Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Aktuality.sk is the leading independent news portal in Slovakia, operated by Ringier Slovakia Media s.r.o. The website offers comprehensive news coverage including domestic and international news, economy, culture, weather forecasts, horoscopes, TV programs, and multimedia content such as podcasts and videos. It targets the general Slovak public and operates a business model based on advertising and premium subscription content. The site maintains a strong market position supported by multiple journalism awards and memberships in journalistic ethics organizations. Technically, Aktuality.sk employs a modern web technology stack including Vue.js and Nuxt.js frameworks, integrated with advanced analytics and advertising platforms such as Gemius, Google Tag Manager, and Piano.io for subscription management. The site is mobile-optimized, SEO-friendly, and uses HTTPS with robust security headers, ensuring a secure and performant user experience. From a security perspective, the website demonstrates good practices including GDPR-compliant consent management, use of reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, suggesting room for improvement in transparency and readiness. Overall, Aktuality.sk presents a trustworthy, professional, and well-maintained digital presence with high content quality and strong business credibility. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure policies, and continuous monitoring of third-party integrations to maintain security posture.
Fun Rádiofunradio.sk
Media · Slovakia
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Fun rádio is a prominent Slovak media company operating a popular radio station and digital platform offering music hits, podcasts, news, and contests. The website demonstrates a mature digital infrastructure using modern technologies such as Vue.js, Cookiebot for cookie consent, and Google Tag Manager for analytics and marketing. The security posture is strong with HTTPS enforced and standard security headers present, although explicit privacy and terms of service documents are missing, representing a compliance gap. The site is well-optimized for mobile and desktop users, providing a good user experience with clear navigation and relevant content. Overall, the domain registration and WHOIS data align with the business claims, supporting legitimacy and trustworthiness.
Allianz - Slovenská poisťovňa, a.s.allianzsp.sk
Finance · Slovakia
74Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Allianz - Slovenská poisťovňa, a.s. operates a professional insurance website targeting private individuals and entrepreneurs in Slovakia. The company offers a broad range of insurance products including property, car (including electric and older vehicles), travel, life, and business insurance. The website reflects a strong market position as part of the global Allianz Group, with consistent branding and clear service offerings. Technically, the site is built on Adobe Experience Manager, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is trustworthy, well-structured, and provides a good user experience with moderate performance and good mobile optimization.
Retail · Slovakia
56Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
The website 4fstore.sk appears to be an established e-commerce retail platform, likely specializing in sportswear or apparel, based on the domain and URL patterns. The domain has been registered since 2013 and is hosted via Akamai CDN, indicating a mature infrastructure. The site employs modern web technologies including React and Tailwind CSS, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, SalesManago, and Cookiebot for cookie consent management. However, explicit privacy policies, terms of service, and contact information are not found in the analyzed content, which may impact user trust and compliance. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and formal security policies. Overall, the site is functional and professionally designed but could improve transparency and security practices.
Government · Slovakia
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TIPOS, národná lotériová spoločnosť, a. s., is the national lottery company of Slovakia, offering a broad range of gambling services including lotteries, sports betting, scratchcards, and online casino games. The company holds a dominant market position as the official national operator, targeting Slovak residents interested in regulated gambling entertainment. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern JavaScript libraries and tracking tools, with good performance and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the site demonstrates high business credibility with clear contact information, official certifications, and government affiliations.
- LLime Inspirations
limetalk.com
Technology
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Lime Talk, operated by Lime Inspirations, provides an intuitive and affordable online chat solution tailored for websites and e-commerce shops. The platform focuses on enhancing customer engagement by offering real-time visitor insights, automated messaging, and seamless integration with various web platforms. With over 1000 customers daily and a strong market presence evidenced by a high Capterra rating, Lime Talk positions itself as a reliable SaaS provider in the customer support technology sector. Technically, the website employs modern JavaScript libraries and tracking tools such as jQuery, Google Analytics, Facebook Pixel, and Inspectlet, indicating a mature digital infrastructure. The site is mobile-optimized and designed with professional quality, ensuring a positive user experience. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks certain security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness, although the website content and business information appear legitimate and professional. Overall, Lime Talk demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency.
Vědavýzkum.czvedavyzkum.cz
Education · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vědavýzkum.cz is a well-established Czech online portal dedicated to providing independent and comprehensive information about science and research. The platform serves a diverse audience including researchers, academics, students, and the general public interested in scientific developments. It offers a wide range of content such as news articles, interviews, analyses, opinions, grant information, event calendars, podcasts, and job listings, positioning itself as a key information hub in the Czech scientific community. The portal maintains strong partnerships with reputable Czech scientific institutions, enhancing its credibility and reach. Technically, the website is built on the Joomla CMS platform, utilizing modern frontend technologies such as jQuery, Awesomplete, Owl Carousel, and the Gantry 5 framework. It employs Google Analytics for traffic analysis and implements GDPR-compliant cookie consent mechanisms. The site is hosted by REG-ZONER, a Czech hosting provider, and uses HTTPS with good SSL configuration, ensuring secure communications. The design is professional, mobile-optimized, and offers good navigation and SEO practices. From a security perspective, the portal demonstrates good practices including HTTPS enforcement and cookie consent management. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. The absence of a dedicated security policy or incident response contact suggests room for enhancement in security transparency. Overall, Vědavýzkum.cz presents a trustworthy, professional, and content-rich platform with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and user trust.
Healthcare · Czech Republic
64Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The Institute of Molecular and Translational Medicine (IMTM) is a well-established biomedical research institute based in the Czech Republic, founded in 2010. It focuses on understanding infectious diseases and cancer, developing medicines, diagnostics, and medical devices. The institute operates with a strong emphasis on public-private partnerships and international research collaborations. The website reflects a mature digital presence with comprehensive scientific content, including featured publications, research projects, and educational resources targeting researchers, students, and healthcare professionals. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Tag Manager for user tracking with anonymized IPs and provides a GDPR-compliant cookie consent mechanism. The hosting and domain registration are consistent with the organization's location and business nature. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers and a published security policy or incident response contacts are missing, representing areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with basic privacy standards.
- Kairos Power
kairospower.com
Energy · United States
74Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Kairos Power is a mission-driven engineering company specializing in advanced nuclear reactor technology aimed at enabling the global transition to clean energy. The company focuses on the design, licensing, and demonstration of its fluoride salt-cooled high temperature reactor (KP-FHR), positioning itself as a competitive and responsible energy provider in the U.S. market. The website reflects a professional and consistent brand presence with clear communication of its mission and services. Technically, the website is built on WordPress with modern technologies such as jQuery and Yoast SEO, hosted by GoDaddy. It features good mobile optimization, SEO practices, and moderate performance. However, some security enhancements such as DNSSEC and security headers are missing, and there is no cookie consent mechanism despite the use of tracking scripts. From a security perspective, the site uses HTTPS and domain locking statuses that enhance domain security. The absence of explicit security policies and incident response contacts is a gap. The WHOIS data is consistent with the business claims, showing a well-aged domain without privacy protection, supporting legitimacy. Overall, the website is trustworthy and professional with room for improvement in privacy compliance and security hardening to better protect user data and enhance trust.
Non-profit
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The International Committee of Sports for the Deaf (ICSD) operates the website ciss.org, serving as a non-profit international sports governing body dedicated to deaf athletes and deaf sports events worldwide. The organization has a long history dating back to 1924 and is recognized for organizing the Deaflympics and other related championships. The website provides news, event information, and resources for athletes, countries, and sports enthusiasts within the deaf community. The target audience includes deaf athletes, sports organizations, and the international sports community. Technically, the website employs modern frontend technologies such as Bootstrap 5 and jQuery 3.6.0, offering a responsive and user-friendly experience. The site is moderately performant with good mobile optimization and basic accessibility features. SEO optimization is basic but sufficient for the content provided. Hosting details are not explicitly disclosed, but the domain is registered with Network Solutions, LLC, and uses 1and1 DNS servers. From a security perspective, the website uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and a cookie consent mechanism, which are important for enhancing security and privacy compliance. No forms or direct contact emails are visible on the homepage, limiting data collection risks but also reducing user engagement options. The WHOIS data is consistent with the organization's history and shows no suspicious patterns, supporting the domain's legitimacy. Overall, the website is professional, trustworthy, and focused on its niche audience. Security and privacy practices could be improved to align with modern standards and regulatory requirements. The absence of a cookie policy and explicit GDPR compliance indicators are notable gaps. Strategic improvements in security headers, privacy mechanisms, and incident response transparency would enhance the site's security posture and user trust.
Usep Nationaleusep.org
Education · France
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Usep Nationale is a large French non-profit federation dedicated to organizing and promoting school sports activities for primary education. It operates nationwide including overseas territories, serving over 8250 school associations and 825,000 licensed members, impacting 2 million children annually. The website is professionally designed, content-rich, and targets educators, schools, and sports associations. Technically, it is built on WordPress with Gravity Forms, uses Matomo for analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA v3, though security headers and explicit security policies are absent. WHOIS data is unavailable due to privacy protection but the domain and website content align with a legitimate non-profit organization. Overall, the site demonstrates strong digital maturity and trustworthiness.
- UUfolep
ufolep.org
Non-profit · France
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Ufolep is a leading French multisport federation offering a wide range of sports activities, training, and events across France. The website targets sports associations and participants, providing comprehensive information about their services and engagements. The organization holds a strong market position as the first multisport federation in France, emphasizing community and inclusive sports participation. Technically, the website employs a traditional tech stack including jQuery 1.8.2, Google Fonts, and Matomo analytics configured with privacy-respecting settings. The site is moderately performant with good mobile optimization and basic accessibility features. However, the use of an outdated jQuery version and lack of visible security headers indicate areas for technical improvement. From a security perspective, the site benefits from HTTPS and privacy-conscious analytics but lacks explicit security policies and modern security headers. The absence of WHOIS data limits domain trust verification, though the professional content and social media presence support legitimacy. Cookie consent mechanisms are implemented, but privacy and terms of service pages are not clearly found. Overall, the website presents a professional and trustworthy front for a non-profit sports federation but would benefit from enhanced security practices, updated technologies, and clearer privacy documentation to strengthen compliance and user trust.
UCPAucpa.com
Hospitality · France
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
UCPA is a well-established French organization specializing in sports vacations, youth camps, and weekend sports stays since 1965. The website reflects a mature digital presence with a focus on performance and mobile optimization through AMP technology. It offers a rich user experience with clear navigation, professional design, and comprehensive content tailored to sports enthusiasts and families. The company maintains active social media channels and provides customer service contact via phone and forms. Technically, the site uses modern web standards and integrates Google Analytics and Tag Manager for user behavior tracking. Security posture is solid with HTTPS and security headers, though lacks a publicly available security policy or incident response information. WHOIS data is unavailable, limiting domain legitimacy verification, but the website's branding and structured data suggest a legitimate business. Overall, the site is safe, professional, and user-friendly, with room for improvement in transparency around security and domain registration.
- People in Need (implied from domain and cookie providers)
jedensvetonline.cz
Media · Czech Republic
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Jeden svět online is a Czech Republic-based online streaming platform dedicated to showcasing the best films from the Jeden svět human rights festival. Founded in 2021, it serves a niche audience interested in human rights and cultural content, providing access to festival films across the country. The platform leverages modern web technologies including JavaScript frameworks, Video.js for media playback, and integrates third-party services such as Google Tag Manager and Facebook Pixel for analytics and marketing. Cookiebot is used to ensure GDPR-compliant cookie consent management, reflecting a commitment to privacy compliance. Security posture is solid with HTTPS enforced and use of CSRF tokens, though some security headers could be explicitly confirmed and enhanced. No critical vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns well with the business profile. Overall, the website presents a professional and trustworthy digital presence with good content quality and user experience.
Moravská hvězda, vánoční dekorace.moravskahvezda.eu
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.moravskahvezda.eu is a Czech-language e-commerce platform specializing in the sale of traditional Moravian stars and Christmas decorations. It targets general consumers interested in cultural and festive products, primarily within the Czech Republic. The business model is retail-focused, leveraging the eshop-rychle.cz platform for online sales. The site presents a consistent brand image with good content quality and clear navigation, although it lacks explicit business contact details and comprehensive privacy documentation. Technically, the site uses legacy JavaScript libraries such as jQuery 1.8.3 and jQuery UI 1.10.3, along with Matomo analytics for user tracking. The platform is built on eshop-rychle.cz, a specialized e-commerce solution. While the site is functional and moderately optimized for performance and mobile use, it shows room for improvement in modernizing its tech stack and enhancing accessibility and SEO. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose vulnerabilities. There is no visible privacy or cookie policy, nor incident response or security contact information, which impacts compliance and trust. The WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains and does not raise immediate suspicion. Overall, the website is moderately secure and professionally presented but would benefit from updates to its security posture, privacy compliance, and technical modernization to reduce risks and improve user trust.
- Repromeda
repromeda.com
Healthcare
52Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Repromeda is a healthcare service provider specializing in fertility and family planning treatments, with a notable track record of over 6,000 children born through their services. The website is professionally designed using WordPress with Elementor and integrates modern technologies such as Fluent Forms and Google services for analytics and advertising. The site is accessible without any WAF or security challenges, indicating good availability. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site presents a professional front for fertility services but would benefit from improved transparency and compliance documentation.
Sex18babes.com - XXX Video Freesex18babes.com
Other
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Sex18babes.com is an adult entertainment website established in 2018, offering free pornographic video streaming and downloads. The site targets adult audiences with a wide range of explicit content categories and leverages affiliate marketing and advertising for monetization. Technically, it runs on the DataLife Engine CMS with jQuery and SVG icons, hosted behind Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers. Privacy compliance is minimal, with no visible privacy or cookie policies, and contact options are limited to a feedback form. The site is accessible without WAF or security challenges, but security posture is weak due to missing HTTPS enforcement and security headers.
SafetyGloves by HexArmorsafetygloves.com
E-commerce · United States
75Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SafetyGloves by HexArmor operates a professional e-commerce platform specializing in personal protective equipment including gloves, eyewear, helmets, hearing protection, arm and body protection, and footwear. The company positions itself as a leader in safety products for individuals and businesses, leveraging the HexArmor brand. The website is built on the Shopify platform using a modern Turbo theme, integrating multiple marketing and analytics tools such as Klaviyo, Hotjar, Facebook Pixel, and Google Tag Manager, indicating a mature digital marketing infrastructure. Security posture is solid with HTTPS enforced, domain status locks, and no exposed sensitive data, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is trustworthy, professional, and well-structured, serving a general audience seeking safety equipment.
- NUTRISENS ITALIA S.B.R.L
nutrisens-medical.it
Healthcare · Italy
63Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Nutrisens Italia S.B.R.L is a medium-sized Italian company specializing in clinical nutrition and special alimentation products. The company offers a broad range of nutritional solutions designed for healthcare professionals, patients, and consumers, focusing on effective, safe, and palatable products that enhance quality of life. Nutrisens holds a strong market position in Italy with a well-established brand, supported by active social media presence and customer testimonials. The website reflects a professional and comprehensive digital presence with clear navigation and rich content. Technically, the site is built on a custom ASP.NET platform using modern libraries such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy disclosures and advanced security headers. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, Nutrisens demonstrates a mature digital infrastructure and trustworthy business profile.
- Nutrisens
nutrisens.com
Healthcare · France
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Nutrisens is a French agro-food group specializing in nutrition and health products tailored for patients with malnutrition, dysphagia, specific diets, and allergies. The company offers products developed by expert nutritionists and chefs, targeting both individual patients and healthcare professionals. Their business model includes direct sales through an online shop and professional channels, positioning them as a specialized player in the healthcare nutrition sector. The website is professionally designed, multilingual, and optimized for SEO, reflecting a medium-sized enterprise with a clear market focus. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates multiple analytics and tracking tools including Matomo, Microsoft Clarity, Bing UET, and LinkedIn Insight. The site uses HTTPS and includes a cookie consent mechanism via Axeptio, indicating a baseline compliance with privacy regulations. However, explicit privacy and terms of service pages were not detected in the provided content, which could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. There is no evidence of security headers in the provided data, and no direct incident response or security policy information is available. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and technical setup suggest a legitimate business. No vulnerabilities or malicious indicators were found. Overall, Nutrisens presents a professional and trustworthy online presence in the healthcare nutrition industry, with room for improvement in privacy transparency and security header implementation. The lack of WHOIS data is a concern that should be investigated further to confirm domain legitimacy.
- EERROR: The request could not be satisfied
smartygrants.com.au
Other · Australia
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website smartygrants.com.au is currently inaccessible due to a 403 error page generated by AWS CloudFront, indicating that the request is blocked by a Web Application Firewall or due to configuration issues. As a result, no website content, metadata, or business information is available for analysis. The domain registration data shows the domain is registered through a reputable Australian registrar with no suspicious indicators, but DNSSEC is not enabled. Hosting is via AWS CloudFront, which is actively blocking access, limiting the ability to assess the website's technical infrastructure, security posture, or compliance status. Overall, the site cannot be evaluated beyond domain registration legitimacy and hosting provider identification.
- EERROR: The request could not be satisfied
advocate.com.au
Other · Australia
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website communitydirectors.com.au/news is currently inaccessible due to a CloudFront 403 error indicating the request is blocked, likely by a Web Application Firewall (WAF). This prevents access to any meaningful content, metadata, or business information. The domain is registered through a reputable Australian registrar and uses AWS DNS services, indicating a legitimate registration. However, the lack of accessible content and security headers limits the ability to assess the website's technical maturity, security posture, and compliance. The site does not expose any contact information, privacy policies, or terms of service on the blocked page. Overall, the website's digital presence is currently non-functional for external visitors, which poses a significant risk to user trust and business credibility.
- EERROR: The request could not be satisfied
communitiesincontrol.com.au
Other · Australia
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website communitiesincontrol.com.au is currently inaccessible, returning a 403 error page generated by AWS CloudFront, indicating that the request is blocked likely due to a Web Application Firewall (WAF) or configuration issue. Due to this blocking, no actual website content, metadata, or business information is available for analysis. The domain registration data shows the domain is registered through an Australian registrar, consistent with the .au domain, and appears legitimate without privacy protection or suspicious patterns. However, the lack of DNSSEC and the blocking of content limit the ability to assess the website's security posture, privacy compliance, or business credibility. The absence of visible policies, contact information, or technical details further restricts comprehensive evaluation.
- EERROR: The request could not be satisfied
communitydirectors.com.au
Other · Australia
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website communitydirectors.com.au is currently inaccessible due to a 403 error generated by AWS CloudFront, indicating that the request was blocked possibly due to traffic or configuration issues. As a result, no website content, metadata, or business information is available for analysis. The domain is registered through an Australian registrar, consistent with the .au domain, and appears legitimate based on WHOIS data. However, the lack of accessible content prevents a full assessment of the business, technical infrastructure, and security posture. The hosting infrastructure uses AWS CloudFront CDN, but the current configuration blocks access, which severely limits digital maturity and user experience. Security posture cannot be evaluated due to missing data, but the absence of DNSSEC and security headers is noted as a minor concern. Overall, the site presents a high risk of poor user trust and operational disruption until access issues are resolved.
- Funding Centre
fundingcentre.com.au
Non-profit · Australia
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Funding Centre is an Australian-based organization providing a comprehensive grants database and fundraising capacity building services primarily targeting not-for-profits, schools, businesses, government entities, and individuals. The website offers subscription-based membership plans granting access to a rich database of live grants, fundraising tools, and resources, positioning itself as a leading platform in the Australian fundraising ecosystem with over 20 years of experience. The parent company, Our Community, supports the platform, enhancing its credibility and market presence. Technically, the website employs modern web technologies including Bootstrap 4, FontAwesome, Google reCAPTCHA v3, and Google Tag Manager, ensuring a responsive and user-friendly experience across devices. The site demonstrates good SEO practices and moderate performance, with room for improvement in accessibility and explicit security header implementation. From a security standpoint, the site enforces HTTPS and integrates bot protection via reCAPTCHA. However, it lacks explicit security headers and a visible security or incident response policy. Privacy compliance is partially addressed with a comprehensive privacy policy hosted on the parent domain, but no cookie consent mechanism is present. WHOIS data is privacy-protected, which is typical for such organizations, and no suspicious patterns were detected. Overall, the website presents a professional, trustworthy, and functional platform with moderate technical maturity and a solid business model. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.
- GCE Group
gcegroup.com
Manufacturing
65Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
GCE Group is a leading European manufacturer specializing in gas control equipment, serving diverse sectors including industrial, healthcare, and high purity applications. The company operates through multiple business areas such as Process Applications, Cutting and Welding, Medical, and High Purity, positioning itself as a key player in the gas equipment market. Their website reflects a professional and comprehensive digital presence with clear product segmentation and regional subsidiaries to support global operations. Technically, the website employs a mature technology stack including jQuery, Modernizr, and video.js, alongside modern analytics and marketing tools like Google Analytics, Hotjar, and Microsoft Clarity. The site is well-optimized for mobile and SEO, with good accessibility and performance metrics. Security-wise, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA and cookie consent mechanisms, indicating a solid security posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure pages suggests room for improvement in transparency and security governance. The lack of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy assessments. Overall, the website presents a credible and professional business front with moderate risk due to incomplete domain registration information.
EDELRIDedelrid.de
Retail · Germany
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
EDELRID is a well-established German company specializing in mountain sports, climbing, and occupational safety equipment with a history spanning over 160 years. The website serves both sports enthusiasts and professional users, offering a broad catalog of products and training services. The company maintains a strong market position with a focus on quality and innovation. Technically, the website is built with modern web technologies, including JavaScript frameworks and consent management tools, hosted on Cloudflare infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
- LEONI Group
leoni.com
Transportation · Germany
66Medium
NIS2 12 · GDPR 83
NIS2 12 · GDPR 83
LEONI Group is a global enterprise specializing in innovative cable and wiring systems primarily for the automotive and mobility sectors. The company positions itself as a key player shaping the future of mobility through advanced manufacturing solutions. Their website reflects a professional corporate presence with a focus on product offerings such as low and high voltage wiring harnesses and integrated system solutions. Technically, the website is built on TYPO3 CMS and employs Cookiebot for GDPR-compliant cookie management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response contacts. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing a security policy, and improving contact transparency to bolster trust and compliance.
HUBER+SUHNERhubersuhner.com
Manufacturing · Switzerland
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
HUBER+SUHNER is a global manufacturer and supplier of electrical and optical connectivity products serving the industrial, communication, and transportation sectors. The company offers a broad portfolio of products and services designed to ensure reliable data and power transmission worldwide. Their website reflects a mature digital presence with a professional design, comprehensive content, and a strong global footprint supported by numerous subsidiaries and locations. Technically, the site uses modern web technologies including Kentico CMS, Vue.js, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy despite the professional business presence. Overall, the website is trustworthy and well-maintained, but the WHOIS inconsistency and lack of explicit security disclosures suggest areas for improvement.
Orange Franceorange.fr
Telecommunications · France
71Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Orange France operates a comprehensive telecommunications portal offering mobile, internet, TV, and streaming services primarily targeting the French market. The website demonstrates a strong market position as a leading telecom operator with a wide range of consumer offerings and a professional digital presence. The technical infrastructure utilizes modern web technologies including JavaScript libraries for carousels and sliders, and structured data for SEO and business information. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is limited in visible content with no clear privacy or cookie policies detected. Overall, the website is professional, trustworthy, and safe for general audiences, but could improve transparency in privacy and security disclosures. The absence of WHOIS data limits domain legitimacy verification but does not detract significantly from the brand's credibility given its established presence.
- EEDF
edf.fr
Energy · France
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
EDF is a leading French energy company specializing in electricity production and supply, with a strong commitment to decarbonization and sustainable energy solutions. The website serves multiple audiences including individual consumers, businesses, communities, and job seekers, providing comprehensive information and services. The digital infrastructure is built on Drupal 10 with modern analytics and privacy management tools, reflecting a mature and professional technical setup. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Overall, the site is well-designed, accessible, and trustworthy, supporting EDF's market position as a major energy provider in France.
- Communauté d'Agglomération Sophia Antipolis
starteo-entreprises.fr
Government · France
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Starteo Entreprises is a regional business incubator managed by the Communauté d'Agglomération Sophia Antipolis in France, launched in 2023. It provides office spaces, entrepreneurial workshops, and business accompaniment services targeting startups and entrepreneurs in the Sophia Antipolis area. The website is built on TYPO3 CMS and integrates modern web technologies including Matomo analytics and cookie consent management, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and supports multilingual access via Google Translate. Security posture is solid with HTTPS and privacy compliance, though there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business profile. Overall, the site presents a professional and trustworthy digital presence for a government-affiliated business incubator.
- Communauté d'Agglomération Sophia Antipolis
tourisme-prealpesdazur.fr
Hospitality · France
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.villagesvalleesdazur-tourisme.fr serves as a regional tourism portal managed by the Communauté d'Agglomération Sophia Antipolis, focusing on promoting the Villages Vallées d'Azur area in France. It provides visitors with information about local villages, events, guided tours, and outdoor activities, targeting tourists and families interested in cultural and natural experiences. The site positions itself as a key regional information source, supported by official regional branding and social media presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including jQuery, Matomo analytics with privacy-respecting configurations, and a comprehensive cookie consent mechanism via Tarteaucitron.js. The infrastructure is hosted within the regional network, ensuring moderate performance and good mobile optimization. Accessibility and SEO are adequately addressed, though there is room for improvement in SEO depth. From a security perspective, the site enforces HTTPS and provides a granular cookie consent panel, respecting GDPR requirements. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were identified in the analyzed content. The WHOIS data aligns well with the website's regional and governmental nature, supporting legitimacy and trustworthiness. Overall, the website demonstrates a solid digital presence with good privacy compliance and a safe content environment. The lack of explicit contact information and security policies suggests areas for enhancement to improve user trust and operational security. Strategic recommendations include implementing security headers, publishing incident response information, and enriching SEO and accessibility features.
Other
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website hbiq.net is currently inaccessible due to an Access Denied error likely caused by Cloudflare security mechanisms. This prevents any meaningful extraction of business, technical, or security content from the site. The domain is registered with MarkMonitor Inc., a reputable registrar, and uses Cloudflare DNS servers, but DNSSEC is not enabled. No metadata, structured data, or contact information is available in the provided HTML content. Due to the lack of accessible content, the website's business model, services, and market positioning cannot be determined. The technical infrastructure shows reliance on Cloudflare for DNS and security, but the blocking of content limits further analysis. Security posture cannot be fully assessed, but the absence of DNSSEC and security headers is noted. Overall, the site appears to be either under development, restricted, or protected by a WAF, resulting in a low AI score and limited insights.
EXHOBBY LIMITEDexhobby.com
E-commerce · Hong Kong
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
EXHOBBY LIMITED operates a professional e-commerce platform specializing in remote control hobby products including planes, boats, trucks, and accessories under the VOLANTEXRC brand. The company targets hobbyists primarily in Europe and globally, offering localized storefronts and free shipping from US stock. The website is built on Shopify, leveraging a modern tech stack with multiple marketing and analytics integrations, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional retail experience with room for enhanced transparency in security and privacy disclosures.
—
72Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73