High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,651–2,700 of 36,503
技术少女的博客iololi.com
Technology
47High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website '技术少女的博客' is a small personal technology blog primarily targeting Chinese-speaking technology enthusiasts. It provides informational content about online paid work, domain price comparison platforms, and usage of the Typecho blogging platform. The business model appears to be content-driven without explicit monetization details. The site uses the Typecho CMS with a custom theme and includes basic JavaScript and CSS resources. The technical infrastructure is moderate with basic mobile optimization and SEO practices. Security posture is limited; while HTTPS is enabled, there are no advanced security headers or DNSSEC, and the WHOIS data shows inconsistencies such as a domain creation date in the future, which raises legitimacy concerns. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are provided, limiting trust and compliance. Overall, the site is safe for general audiences but lacks professional security and privacy practices.
Kasper Bergholtkasperbergholt.org
Other · Denmark
49High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kasper Bergholt's website serves as a professional portfolio showcasing his art and photography projects, including series such as 'Flora Excursoria Hafniensis' and 'The Time Is Out of Joint.' The site targets a general audience interested in contemporary art and photography, positioning itself as a niche artistic platform. The business model revolves around content publication and artistic expression rather than commercial sales. Technically, the site is built on WordPress with a standard theme and uses Matomo for analytics. The infrastructure is moderate in performance with good mobile optimization but lacks advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enabled and domain registration stable, but improvements are needed in DNSSEC and security policies. Overall, the site is trustworthy and professional but could enhance privacy compliance and security practices.
- Salacgrivas ostas parvalde
salacgrivaport.lv
Transportation · Latvia
42High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Salacgrivas ostas parvalde operates as a regional port authority located in Latvia, managing the Salacgrīva port and related maritime infrastructure. The website presents the port's historical significance dating back to 1368 and highlights current cargo handling and fishing activities, as well as yacht marina services. The organization targets regional importers, exporters, fishermen, and maritime transport users. The website is built on DIRcms and utilizes several JavaScript libraries for enhanced user experience, including jQuery, bxSlider, and Fancybox. Google Analytics is employed for visitor tracking. Security posture is moderate with no detected advanced security headers or explicit privacy policies, though cookie consent is implemented. WHOIS data confirms the legitimacy of the registrant as a Latvian legal entity matching the website's business claims. Overall, the site is functional and credible but could improve in privacy transparency and security best practices.
Siljasilja.biz
Retail · Latvia
49High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Silja is a Latvian-based e-commerce and retail business specializing in agricultural and gardening products including seeds, machinery, spare parts, and servicing with warranty. The company targets agricultural professionals and gardening enthusiasts primarily in Latvia, offering a broad product range through a WooCommerce-powered website. The domain has been registered since 2002, indicating a mature presence in the market. Technically, the website uses WordPress with modern libraries such as jQuery, Swiper.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Cookie consent is managed via CookieYes, reflecting basic privacy compliance. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no advanced security headers or vulnerability disclosures are present. Overall, the website is professional, well-branded, and trustworthy with room for improvement in privacy policy transparency and security hardening.
Całodobowy Zakład Pogrzebowy M. Krawczukzaklad-pogrzebowy-wola.pl
Other · Poland
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website represents a small, professional funeral service provider operating primarily in Warsaw's Wola and Ursus districts. The company offers comprehensive funeral services including traditional and cremation funerals, transport of deceased persons, administrative support, and floral arrangements. The business emphasizes empathy, 24/7 availability, and local expertise with over 37 years of experience. The website is well-structured, content-rich, and optimized for SEO with structured data and clear navigation. Technically, it is built on WordPress with Elementor and uses modern libraries such as jQuery and Swiper.js. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies are missing. The domain WHOIS data shows inconsistencies, including a future creation date and a registrant unrelated to the business, which reduces trustworthiness despite the professional site content. Overall, the site is accessible, safe, and provides a positive user experience for its target audience.
DFK BKMdfkbkm.com.au
Finance · Australia
46High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
DFK Benjamin King Money (DFK BKM) is a professional services firm specializing in chartered accounting and business advisory services primarily targeting Australian businesses. The company offers a comprehensive suite of services including accounting, audit and assurance, business advisory, financial planning, taxation, and virtual CFO services. They are part of the DFK International alliance, enabling them to serve clients locally and globally. The website presents a professional image with consistent branding and clear service offerings, supported by client testimonials and active social media presence. Technically, the website is built on WordPress using modern technologies such as Bootstrap, jQuery, and integrates HubSpot for forms and analytics. The site is mobile-optimized and uses HTTPS with a good SSL configuration. However, some security best practices like security headers and DNSSEC are missing. The site employs Google Analytics and HubSpot tracking, indicating moderate user tracking and marketing capabilities. From a security perspective, the site has a solid foundation with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of explicit privacy and cookie policies is a compliance gap, and no incident response or security policy information is provided. The WHOIS data shows consistent domain registration with no privacy protection, supporting legitimacy. Overall, the website is a credible and professional platform for DFK BKM's business services, with room for improvement in privacy compliance and security hardening to enhance trust and regulatory adherence.
- AASS
ass.lv
Media · Latvia
36High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.ass.lv is an early Latvian language humor server established around 1997-1998, providing jokes, anecdotes, and entertainment content primarily targeting Latvian-speaking audiences. The site is minimalistic and static, reflecting early web design with limited interactivity and no modern web features. The business model is content entertainment with a niche focus on humor in the Latvian language. The market position is that of a pioneering humor portal in Latvia, but it lacks modern digital maturity and engagement features. Technically, the website shows signs of being outdated with no detected modern frameworks, CMS, or hosting details. There is no evidence of HTTPS usage or security headers, and the site lacks mobile optimization and accessibility features. SEO is basic, relying mainly on meta keywords and description tags. No analytics or advertising technologies are present, indicating limited digital marketing efforts. From a security perspective, the site has a low security posture with no HTTPS, no security policies, and no incident response contacts. There are no privacy or cookie policies, which is a compliance gap especially under GDPR. The lack of security best practices and modern technical controls exposes the site to potential risks, although the content itself is low risk. The domain WHOIS data is consistent with the website claims and shows a longstanding registration, supporting legitimacy. Overall, the website is low risk but also low in professionalism and security maturity. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving technical infrastructure, and enhancing security controls to protect users and comply with regulations.
Przychodna medyczna Ursus - Milmedicamilmedica.pl
Healthcare · Poland
29High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
MILMEDICA Centrum Medyczne Ursus is a private healthcare provider specializing in infant hip ultrasound diagnostics and general medical services in Warsaw Ursus. The company emphasizes patient care quality and a supportive environment for medical professionals. The website supports online appointment booking and integrates social media channels to engage its audience. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and Google Analytics for tracking. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. The domain registration is recent but consistent with the business's founding year, indicating legitimacy. Overall, the website presents a professional and trustworthy digital presence for a small healthcare provider.
Pozycjonowanie Wrocławwroclaw.pl
Technology · Poland
38High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pozycjonowanie Wrocław is a specialized website providing a comprehensive and up-to-date ranking of the best SEO agencies in Wrocław, Poland. The site targets local businesses seeking SEO services to improve their online visibility and compete effectively in the local market. The business model appears to be informational and lead-generating, offering detailed profiles and verified reviews of SEO agencies. The website is built on WordPress with modern technologies such as Tailwind CSS and Rank Math SEO plugin, ensuring excellent SEO optimization and mobile responsiveness. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security-wise, the site uses HTTPS but lacks advanced security headers and DNSSEC, which could be improved to enhance trust and protection. The domain is newly registered in 2026 via a third-party registrar, which is consistent with the website's launch date but suggests the registrant information could be updated to reflect the actual business owner. Overall, the site is professional, trustworthy, and well-structured but would benefit from enhanced privacy and security measures.
FCPOfcpo.ma
Technology · Morocco
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
FCPO is a Moroccan digital agency based in Oujda specializing in web development, mobile applications, SEO, e-commerce, and digital marketing services. The agency positions itself as a creative and expert partner for businesses seeking to enhance their online presence and digital strategy. It serves a diverse clientele nationally and internationally, leveraging a multidisciplinary team to deliver approximately 150 digital projects annually. Technically, the website is built on WordPress, utilizing modern web technologies such as Bootstrap, Font Awesome, Google Fonts, and popular marketing analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with good navigation and professional design, although some accessibility features are basic. From a security perspective, the site uses HTTPS but lacks explicit security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is unavailable, raising concerns about domain legitimacy, although the website content and activity suggest operational status. Overall, FCPO demonstrates a solid digital presence and business credibility but should address privacy compliance and security best practices to enhance trust and reduce risk.
Baltic Beauty Awardsbalticbeautyawards.lv
Retail · Latvia
47High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Baltic Beauty Awards is a specialized event and awards organizer focused on recognizing innovation and sustainability in the Baltic beauty product market. The website serves as a platform to showcase finalists and promote the annual awards ceremony, targeting beauty industry professionals and brands within the Baltic region. The business operates as a small entity closely linked with the Baltic Beauty exhibition and the E-BEAUTY.LV portal, positioning itself as a niche leader in regional beauty industry recognition. Technically, the website is built on a modern stack including Django, Bootstrap, HTMX, and uses Cloudflare for DNS and likely CDN services. It is mobile optimized with good SEO practices and integrates Google Analytics 4 for user tracking. The site is performant with moderate loading speeds and basic accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating awareness of security best practices. However, it lacks important security headers and does not publish privacy, cookie, or terms of service policies, which are critical for GDPR compliance and user trust. No contact information or incident response channels are provided, limiting transparency. Overall, the website is professional and trustworthy with no adult or questionable content. The domain registration is consistent and legitimate. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.
o2o2online.de
Telecommunications · Germany
49High
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website www.o2online.de represents a major German telecommunications provider offering a wide range of mobile, fixed-line, internet, and device sales services. The site targets both private and business customers with comprehensive product offerings including mobile contracts, prepaid tariffs, internet solutions, and entertainment services. The technical infrastructure is modern, leveraging proprietary Telefonica components, Usercentrics for consent management, and Trbo for marketing, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and consent mechanisms in place, although explicit security policies and incident response details are not publicly visible. Overall, the domain and website present a legitimate, professional, and trustworthy digital presence with a high-quality user experience.
Tavs ceļš uz ideālu āduskinlounge.lv
Retail · Latvia
40High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Skinlounge.lv is an e-commerce website specializing in professional cosmetics and skincare products, targeting Latvian customers. The site offers free consultations for home care products, positioning itself as a niche retailer in the cosmetics retail sector. The website uses the OpenCart platform with the Journal3 theme, incorporating modern JavaScript libraries to enhance user experience. The design is professional and mobile-optimized, providing a good user experience and clear navigation. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to missing security headers and unclear SSL configuration. No contact information or social media presence is evident, which may impact business credibility. Overall, the site is functional and safe but requires improvements in security and compliance to enhance trust and regulatory adherence.
KOLS Travelkolstravel.lv
Hospitality · Latvia
37High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
KOLS Travel is a small independent B2B tour operator based in Riga, Latvia, specializing in tailor-made group and FIT travel itineraries across Riga, the Baltic region, Scandinavia, and globally. The company offers a broad range of travel services including flights, hotels, visa assistance, excursions, SPA holidays, exclusive tours, transportation, and MICE services such as meet and greet, transfers, team building, and conference arrangements. The website is built on WordPress and uses standard web technologies like jQuery and Google Fonts. While the site provides basic information and social media links, it lacks critical privacy, cookie, and terms of service policies, as well as explicit contact details. No security headers or HTTPS enforcement were detected, indicating a need for improved security posture.
Other · Latvia
44High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website represents the Latvian Fishing Sports Federation, a leading non-profit organization dedicated to fishing sports in Latvia. It provides information on various fishing disciplines, organizes events, and serves its members with licenses and official documentation. The site targets fishing sports enthusiasts and federation members primarily within Latvia. The business model focuses on community engagement and sport promotion rather than commercial sales. Technically, the website is built on Joomla CMS version 5.4.3 with PHP 8.2.30 and MySQL 8.0.33 backend. It uses modern frontend libraries including Bootstrap 5 and FontAwesome for styling and icons. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible cookie consent mechanism or privacy compliance banner, which may pose GDPR compliance risks. No incident response or vulnerability disclosure information is provided, limiting transparency in security practices. Overall, the website is professional and trustworthy with clear business information and active social media presence. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.
License plates - Gallery of license plateslicenseplates.sk
Other · Slovakia
48High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website licenseplates.sk is a small-scale, hobbyist gallery showcasing license plates from around the world. It is built using the Hugo static site generator and hosted on a Slovak hosting provider, Websupport. The site features a clean, well-structured design with good navigation and mobile optimization, focusing on photographic content without interactive user input or commercial transactions. The technical infrastructure is modern and performant, with HTTPS and DNSSEC enabled, but lacks advanced security headers and privacy compliance features. Security posture is moderate with no detected vulnerabilities but missing policies and contact details reduce trust and compliance. The WHOIS data shows inconsistencies with a future domain creation date, which raises questions about data accuracy but the domain is registered with a legitimate Slovak registrar. Overall, the site is safe for general audiences and serves a niche hobbyist community but would benefit from improved privacy, security policies, and contact transparency.
ADSpectraadspectra.pl
Technology · Poland
35High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
ADSpectra is a Polish SEO agency specializing in comprehensive SEO and AI-enhanced digital marketing services. Founded recently in 2023, the company positions itself as a specialist agency delivering measurable results with a focus on advanced AI integration and tailored SEO strategies. Their website demonstrates a high level of professionalism, rich content, and clear service offerings targeting Polish businesses seeking to improve their online visibility and digital presence. Technically, the site is built on WordPress with Elementor, uses modern libraries and Google Analytics for tracking, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. Overall, the domain registration is consistent with the business profile, indicating legitimacy despite the recent registration date. Strategic recommendations include enhancing privacy and security disclosures and implementing security headers to improve trust and compliance.
- MMAARA
id.lv
Other · Latvia
29High
NIS2 2 · GDPR 15
NIS2 2 · GDPR 15
MAARA is a Latvian online service focused on providing a post-life planning tool and practical guidance for individuals managing end-of-life affairs. The website offers a free step-by-step guide for caretakers and a digital platform to help users organize medical decisions, digital assets, funeral preferences, and pet care instructions. The service targets individuals planning their own post-life arrangements or those responsible for managing a loved one's affairs after death. The business positions itself as the first in Latvia to offer such a dedicated tool, operating as a small-scale online platform. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript ES6 modules, Google Fonts, and Google Analytics for tracking. Hosting and DNS are managed via Cloudflare, providing reliable performance and security. The site is mobile-optimized with a professional design and clear navigation, though accessibility features are basic. Cookie consent is implemented with an opt-in mechanism, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS and uses cookie consent to manage tracking permissions. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed, and no formal security or incident response policies are published. The absence of a terms of service page and vulnerability disclosure policy suggests areas for improvement in transparency and security governance. Overall, the website is trustworthy and professionally presented, with moderate business credibility and good privacy compliance. The lack of explicit contact information and security policies limits full assessment of organizational maturity. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to strengthen trust and compliance.
Romaudiovideoroav.ro
Media · Romania
41High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Romaudiovideo is a Romanian-based company specializing in professional audio-video solutions and equipment, primarily serving corporate clients and event organizers. The website presents a professional image with a focus on AV products and services, leveraging WordPress with Elementor for content management and design. The technical infrastructure includes performance optimizations via WPRocket and analytics tracking through Google Tag Manager with consent mode enabled, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies on the site. Privacy compliance is partial, with cookie consent mechanisms present but no visible privacy policy or terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.
Elektrykwawaelektryk.pl
Energy · Poland
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.wawaelektryk.pl represents a small local electrical services business operating in Warsaw and surrounding areas in Poland. The company offers a range of electrical services including installation, modernization, fault repair, and mounting of electrical components. The site is professionally designed using WordPress with a modern theme and block editor, providing a good user experience and clear navigation. Contact information including phone number and physical address is prominently displayed, enhancing business credibility. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Technically, the site uses HTTPS and Google Tag Manager for analytics, but lacks advanced security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for small businesses. Overall, the site is secure, professional, and trustworthy with room for improvement in privacy compliance and security best practices.
3PIĘTRO3pietro.eu
Real Estate · Poland
41High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
3PIĘTRO is a small real estate agency based in Poland, specializing in property sales, rental management, and home staging services primarily in Sosnowiec and nearby cities. The website presents a professional and content-rich platform with detailed property listings and team member contacts, supported by active social media channels. Technically, the site uses a custom real estate CMS with common web technologies such as jQuery, Bootstrap, and Google Fonts, delivering a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. WHOIS data is unavailable due to registry privacy, limiting domain trust assessment, but the website content and structure indicate a legitimate local business. Overall, the site scores moderately well in content quality and business credibility but should improve privacy compliance and security best practices.
Global Elite Carglobalelitecar.pl
Transportation · Poland
36High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Global Elite Car is a specialized car rental service based in Poland, focusing on luxury and sports vehicles. The company offers a variety of rental options including short-term, long-term, VIP transport, and vouchers, targeting customers primarily in Warsaw and across Poland. The website is professionally designed with clear navigation and a good user experience, supporting the business model effectively. Technically, the site is built on WordPress with modern libraries and tracking tools, showing a moderate to good level of digital maturity. Security posture is adequate with HTTPS and no visible vulnerabilities, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and clear contact information.
Rent Dream Carrentdreamcar.pl
Transportation · Poland
35High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Rent Dream Car is a specialized car rental company based in Warsaw, Poland, offering luxury, sports, premium, and SUV vehicles for short and long-term rental. The company emphasizes professional customer service, transparent rental agreements, and a modern, well-maintained fleet. Their market position is strong locally with a focus on high-end clientele seeking premium automotive experiences. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS and reCAPTCHA, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is basic with cookie consent and a privacy policy present. Overall, the business demonstrates credibility and trustworthiness with clear contact details and positive customer reviews.
SPÓŁKA HANDLU TOWARAMI ŻELAZNYMI KRZYSZTOF BRUN I SYN” SPÓŁKA JAWNAprzestrzeniebruna.pl
Hospitality · Poland
36High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Przestrzenie Bruna is a small hospitality and real estate business based in Warsaw, Poland, specializing in event space rental and comprehensive event management services including weddings, corporate events, and private parties. The company operates from a unique historic loft-style venue located in the Praga district, offering a blend of vintage charm and modern amenities. The website is professionally designed, well-branded, and provides clear information about services and contact details, targeting individuals and businesses seeking event venues in Warsaw. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and Rank Math SEO, hosted by cyber_Folks S.A. It features good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks some advanced security headers and DNSSEC is not enabled. Analytics are implemented via Google Analytics with moderate user tracking. The security posture is solid for a small business, with no critical vulnerabilities detected. Privacy compliance is strong with comprehensive privacy and cookie policies and active consent mechanisms. However, the absence of terms of service and incident response information is noted. The domain registration data aligns well with the business profile, indicating legitimacy. Overall, Przestrzenie Bruna presents a trustworthy and professional online presence suitable for its market niche. Strategic improvements in security headers and transparency around incident response could further enhance trust and compliance.
INDYK NATURALNIE Mateusz Niedzielakindyknaturalnie.pl
Retail · Poland
36High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Indyk Naturalnie is a Polish-based small business specializing in the production and online retail of premium turkey and poultry products. The company emphasizes natural ingredients, sustainability, and health benefits, targeting consumers seeking high-quality, preservative-free cold cuts. The website is built on WordPress with WooCommerce, featuring modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Privacy compliance is robust with a comprehensive cookie consent mechanism and clear privacy policy. Security posture is good with HTTPS enforced and secure payment integrations, though some security headers could be improved. The domain is newly registered in late 2023, consistent with the business age and operations. Overall, the site presents a professional, trustworthy e-commerce platform with strong business credibility and compliance.
Finance · Poland
33High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
TaxClear is a Warsaw-based accounting firm specializing in comprehensive accounting and tax services for small and medium-sized enterprises, including sole proprietorships and commercial law companies. The company offers services such as business registration assistance, tax advisory, and modern online accounting solutions. Their market position is focused on local businesses in the Warsaw area, providing tailored and professional financial services. The website is built on a modern WordPress platform using Elementor, with integration of Google Tag Manager for analytics and marketing. The technical infrastructure is solid, hosted by cyber_Folks S.A., and the site is mobile-optimized with good SEO practices. However, some security best practices like DNSSEC and security headers are missing. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but improvements are recommended in DNS security and HTTP headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy with room for security and compliance enhancements. The risk assessment indicates a low risk of security or compliance issues but highlights the need for formal privacy and cookie policies to meet GDPR requirements. Strategic recommendations include implementing security headers, enabling DNSSEC, and publishing comprehensive privacy and cookie policies to improve compliance and trust.
Global Liftglobal-lift.sk
Manufacturing · Poland
35High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Global Lift is a well-established manufacturer and service provider of lifts, cranes, and lifting components primarily operating in Poland and Slovakia. Founded in 1999, the company offers a broad portfolio including personal, freight, hospital lifts, hydraulic platforms, and components. Their market position is strong, supported by partnerships and positive customer reviews. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools, though some GDPR compliance aspects like cookie consent could be improved. Security posture is good with HTTPS and no obvious vulnerabilities, but lacks some advanced security headers and explicit policies. WHOIS data shows a domain creation date anomaly that should be clarified. Overall, the company presents a professional and trustworthy online presence with room for enhanced privacy and security transparency.
Global Prestigeglobalprestige.pl
Manufacturing · Poland
36High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Global Prestige is a Polish manufacturer specializing in luxury personal and home elevators, offering bespoke and high-quality lift solutions tailored to demanding clients. The website presents a premium brand image with detailed descriptions of products and services, emphasizing craftsmanship, innovation, and aesthetic design. The company targets residential and commercial markets seeking elegant and functional elevator systems. Technically, the website is built on WordPress with Elementor, incorporating modern web technologies and Google Analytics for tracking. Mobile optimization and SEO practices are well implemented, though accessibility could be improved. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place, but lacks comprehensive security headers and public security policies. The WHOIS data reveals inconsistencies, including a future domain creation date and registrant mismatch, which may warrant further verification. Overall, the site is professional and trustworthy in appearance but would benefit from enhanced transparency and security practices.
Global Liftglobal-lift.de
Manufacturing · Germany
38High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Global Lift is a German-based manufacturer specializing in elevators and cranes, with a market presence since 1999. The company offers a range of products including passenger elevators, freight elevators, hospital platforms, and lifts for people with disabilities, targeting both businesses and private customers. Their website reflects a professional and consistent brand image, emphasizing quality and technical support. Technically, the site is built on WordPress using modern libraries such as jQuery and GSAP, with SEO optimizations via Rank Math and Google Tag Manager integration. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and published security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional, trustworthy, and well-structured but would benefit from enhanced privacy and security disclosures.
DAMI DOMOdamidomo.pl
Retail · Poland
42High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
DAMI DOMO is a specialized e-commerce retailer based in Poland, focusing on a wide range of lighting products including ceiling lamps, chandeliers, floor and table lamps, and wall sconces. The website presents a professional and well-structured online store powered by PrestaShop, targeting consumers and businesses seeking modern and classic lighting solutions. The company has been operating since 2016, with a domain registered through OVH SAS, indicating a stable and legitimate online presence. Technically, the website employs a modern tech stack with multiple analytics and marketing integrations such as Google Analytics, TikTok Pixel, Pinterest tracking, Microsoft Clarity, and Facebook Pixel. It uses cookie consent mechanisms compliant with GDPR principles, although no explicit privacy policy or terms of service were found in the provided content. The site is hosted on OVH infrastructure and uses HTTPS, ensuring secure communications. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies. No critical vulnerabilities or blocking mechanisms were detected, but improvements in security headers and transparency policies are recommended. Overall, DAMI DOMO presents a trustworthy and professional e-commerce platform with moderate to good security posture and compliance. Strategic enhancements in privacy documentation and security policies would further strengthen its risk profile and customer trust.
Lumina Decoluminadeco.pl
Retail · Poland
40High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Lumina Deco is a Polish e-commerce retailer specializing in modern and classic lighting products including chandeliers, pendant lamps, floor lamps, table lamps, wall lamps, and bulbs. The website is built on the PrestaShop platform and integrates multiple marketing and analytics tools such as Google Analytics 4, Facebook Pixel, Microsoft Clarity, and Doofinder for search and recommendations. The site provides clear contact information and implements a cookie consent mechanism with granular categories, supporting GDPR compliance to some extent. However, it lacks a published privacy policy, terms of service, and security policy, which are important for full compliance and user trust. The domain is registered with OVH SAS since 2018, consistent with the business age and operations. Overall, the website is professionally designed, mobile-optimized, and safe for general audiences.
Kancelaria Radcy Prawnego Michał Szczodryprzetargiprawnik.eu
Government · Poland
44High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Kancelaria Radcy Prawnego Michał Szczodry is a specialized legal firm based in Warsaw, Poland, focusing on public procurement law and providing comprehensive legal services to contractors and contracting authorities throughout the procurement process. The firm offers expert representation before the National Appeals Chamber (KIO) and courts, supporting clients in contract execution and dispute resolution. The website is professionally designed using WordPress and Elementor, featuring clear navigation and relevant content tailored to its target audience of businesses involved in public tenders. Technical infrastructure includes modern web technologies and compliance with cookie consent regulations, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the site demonstrates high business credibility and good privacy compliance, though explicit privacy and terms of service pages were not found in the provided content.
- Alfa DJ’s Center sp. z o.o.
adjc.pl
Education · Poland
35High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Alfa DJ’s Center sp. z o.o. is a specialized educational institution based in Poland offering professional DJ and music production training courses both online and onsite across multiple cities. The company has a strong market presence with over 1600 completed courses and more than 1500 satisfied students, supported by a team of active industry professionals. Their business model focuses on personalized, flexible training programs tailored to individual skill levels and schedules. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by modern analytics and consent management tools. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit privacy and security policies are not published. Overall, the domain registration and WHOIS data support the legitimacy and stability of the business.
Kancelaria LexWiborlexwibor.pl
Finance · Poland
49High
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Kancelaria LexWibor is a Polish legal consultancy specializing in invalidating WIBOR variable interest clauses in credit agreements. Founded in 2022, it targets individuals affected by WIBOR-related credit issues, offering niche legal services. The website is built on WordPress with Elementor and integrates modern tools like Google Tag Manager and Cookiebot for analytics and GDPR compliance. Hosting is provided by home.pl, a reputable Polish hosting provider. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and explicit privacy and terms policies. No contact emails or phone numbers are directly visible, which may impact user trust. Overall, the site is professional and focused but could improve transparency and security documentation.
LAT SLABSlatslabs.lv
Manufacturing · Latvia
49High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
LAT SLABS is a prominent industrial concrete slab manufacturer based in Latvia, serving the Baltic Sea region with a wide range of concrete products including slabs, L blocks, modular blocks, decorative slabs, and military-grade concrete solutions. The company targets industrial, logistics, agricultural, and construction sectors, positioning itself as a reliable partner with a strong regional presence. The website reflects a professional digital presence built on WordPress with Elementor, incorporating modern web technologies and SEO best practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit privacy policy, terms of service, and security incident response information, which are important for compliance and trust. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. Strategic improvements in privacy and security disclosures would enhance compliance and user trust.
Przedszkole Mała Żabkaedu.pl
Education · Poland
27High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Przedszkole Mała Żabka is a public artistic and language preschool located in Warsaw Białołęka, Poland, established in 2019. It offers a nurturing environment focused on child development through creative, linguistic, and sensory activities, supported by qualified staff and a well-structured educational program. The website reflects a strong market position as a recommended public preschool with funding support, targeting parents seeking quality early childhood education. Technically, the site is built on WordPress with Elementor and related plugins, featuring good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and no signs of suspicious activity or content.
Bizstrefa | Prawo, Biznes, Księgowość, Podatkibizstrefa.com
Other · Poland
41High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bizstrefa is a Polish service provider specializing in legal, business, accounting, and tax support primarily targeting health and wellness professionals such as trainers, dietitians, masseurs, and physiotherapists. The website positions itself as a niche platform offering stress-free and legal business setup assistance. The company appears to be a small, newly founded entity with a focused market approach. Technically, the website is built on a modern WordPress stack using Elementor and WooCommerce, integrating tracking tools like Facebook Pixel for marketing insights. Security posture is adequate with HTTPS and domain lock statuses, but lacks DNSSEC and explicit security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional and functional but could improve transparency and security documentation.
HIEThiet.in
Education · India
39High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
HIET is an established educational institution in India specializing in diploma engineering courses, notably in Mechanical Engineering. The website presents detailed course structures, training, and career opportunities, positioning HIET as a reputable polytechnic college in Chennai with industry collaborations and placement support. Technically, the site is built on WordPress with modern plugins and tracking tools, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks comprehensive security headers and explicit privacy compliance mechanisms. The absence of cookie consent and security policy pages indicates room for improvement in regulatory adherence. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.
SIA VADNEGnegrulux.lv
Retail · Latvia
46High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Negrulux.lv is a Latvian-based e-commerce platform specializing in the retail of computer equipment, phones, household appliances, and various consumer electronics. The website targets general consumers in Latvia and offers a broad catalog of products with a user-friendly shopping cart and account management features. The company behind the domain is SIA VADNEG, a legally registered Latvian entity, which aligns with the website's regional focus and product offerings. Technically, the website is built on the OpenCart CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Swiper.js for enhanced user experience. The site is mobile-optimized and includes basic SEO and accessibility features. Google Tag Manager is implemented for analytics and tracking purposes, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS, ensuring encrypted communications. However, it lacks several important security headers such as Content-Security-Policy and Strict-Transport-Security, which could improve its defense against common web attacks. No privacy or cookie policies were detected, which is a compliance gap, especially under GDPR regulations applicable in Latvia. Contact information is clearly provided, enhancing business credibility. Overall, Negrulux.lv presents a moderately secure and professionally maintained e-commerce platform with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
- LLingvojumi
lingvojumi.lv
Other · Latvia
41High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Lingvojumi is a professional translation office based in Riga, Latvia, specializing in document translation and notarized translations. The company targets private individuals and businesses requiring certified translations for submission to Latvian and foreign authorities. Their key services include document translations, notarized translations, translation certification with office stamps, apostille services, and document legalization. The website presents a professional image with clear contact details and positive trust indicators such as a 5-star Google review rating. Technically, the website employs modern tools including Google Tag Manager and Ahrefs Analytics, uses Google Fonts for typography, and is served over HTTPS ensuring secure connections. The site is mobile-optimized with good SEO practices and basic accessibility features. However, there is room for improvement in security headers and privacy compliance, as no privacy or cookie policies were found. From a security perspective, the site benefits from HTTPS and secure external linking practices but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s business claims, indicating legitimacy and consistent domain registration. Overall, Lingvojumi presents a trustworthy and professional online presence suitable for its business domain. Strategic improvements in privacy compliance and security policy transparency would enhance user trust and regulatory adherence.

—
45High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Finance · Vietnam
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BIDV is a major Vietnamese commercial bank offering a wide range of financial services including retail, corporate, and premium banking. The website reflects a professional and enterprise-grade digital presence, leveraging IBM WebSphere Portal CMS and modern web technologies such as jQuery and Bootstrap. The site is mobile optimized and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security policies and privacy/cookie policies suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and well-maintained, supporting BIDV's position as a leading financial institution in Vietnam.
Education · Latvia
40High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Daugavpils Valstspilsētas vidusskola is a medium-sized educational institution based in Latvia, providing general secondary and preschool education along with various educational projects such as Erasmus+ and health promotion programs. The website serves students, parents, educators, and the local community, offering comprehensive information about school activities, programs, and contact details. Technically, the site is built on WordPress using Elementor and related plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though it would benefit from enhanced security practices and clearer privacy documentation.
- CCraftW.
craftw.lv
Technology · Latvia
32High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
CraftW. is a Latvian IT services company established in 2005, specializing in software development, network infrastructure design, and IT support services. The company targets business clients seeking tailored IT solutions and has a moderate market presence with over 15 years of experience. The website reflects a professional digital presence with clear service descriptions and project references. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google services for analytics and advertising. However, there is a lack of visible privacy and cookie policies, and no explicit security headers or HTTPS status were confirmed, indicating room for improvement in security and compliance. Overall, the security posture is moderate but could benefit from enhanced policies and technical safeguards. The domain registration aligns with the company's founding date, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, improving security headers, and publishing incident response contacts to enhance trust and compliance.
- Torres Bühl
eventraum-buehl.de
Hospitality · Germany
41High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Torres Bühl operates a hospitality business in Bühl, Germany, specializing in Spanish tapas and Mediterranean cuisine alongside event planning and hosting services for private and corporate clients. The website presents a local small business with over 30 years of experience in event gastronomy, targeting local residents and companies seeking venue and catering services. The digital presence is built on a 1blu Homepage Baukasten CMS platform, utilizing jQuery and Google reCAPTCHA for form security. While the website provides essential contact information and a gallery showcasing the venue and offerings, it lacks comprehensive privacy and security policies, and mobile optimization is basic. Security posture is moderate with some best practices like CAPTCHA but missing security headers and explicit SSL configuration details. Overall, the site is functional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security hardening.
- CCircular Illusion
circularillusion.com
Media · United States
45High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Circular Illusion is an independent music project led by Jeff Minter, focusing on experimental music production and promotion primarily based in Denver, Colorado. The website serves as a portfolio and promotional platform showcasing music releases and providing links to social media and music streaming services. The business operates on a small scale with a niche audience interested in experimental and electronic music. Technically, the website uses basic HTML, CSS, and JavaScript with embedded Spotify content and external font resources. However, some resources are loaded over insecure HTTP, which introduces mixed content risks. The site lacks HTTPS on the main page, security headers, and privacy or cookie policies, indicating a low maturity level in security and compliance. No contact emails or phone numbers are provided, limiting direct communication channels. WHOIS data is missing or unavailable, raising concerns about domain legitimacy despite the active website presence. Overall, the site is functional but requires significant improvements in security, privacy compliance, and domain registration transparency to enhance trust and professionalism.
Aizkari1.lv - internetveikalsaizkari1.lv
Retail · Latvia
41High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Aizkari1.lv is a Latvian-based e-commerce business specializing in custom-made day and night curtains tailored to customer measurements. The company emphasizes fast production times of 3-4 days and delivery within Latvia and the European Union. The website is professionally designed using WordPress with the Astra theme and WooCommerce for e-commerce functionality. It integrates Google Tag Manager for analytics and marketing purposes and maintains an active social media presence on Facebook, Instagram, and TikTok. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response contact information. Overall, the business appears legitimate and focused on the local retail market with a small company size and good branding consistency.
FOKSY.LVfoksy.lv
Other · Latvia
39High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Foksy.lv is a small local business specializing in dog grooming services primarily for medium and small dog breeds in the Plyavnieki area of Latvia. The company offers services such as dog haircuts starting at 25 euros and washing at 20 euros. The website is professionally designed using WordPress with the Astra theme and supports multiple languages including Russian and Latvian. It integrates Google Analytics via MonsterInsights and Google Tag Manager for tracking and marketing purposes. The business is relatively young, founded in 2020, and the domain registration aligns with this timeline, indicating consistency and legitimacy. From a technical perspective, the website uses modern web technologies and plugins but lacks some advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. HTTPS is properly implemented, ensuring encrypted communication. The site is mobile optimized and has good SEO practices, but accessibility features are basic. Security-wise, the site benefits from HTTPS and anonymized IP tracking in analytics but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, Foksy.lv presents a trustworthy and professional online presence for a small local dog grooming business. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory adherence.
- Top10casino.nl
top10casino.nl
Media · Netherlands
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Top10casino.nl is a specialized Dutch media website focused on providing detailed reviews, rankings, and guides for legal online casinos in the Netherlands. Established in 2021, it serves Dutch adult players by offering trustworthy information about licensed gambling operators, bonuses, games, and responsible gambling practices. The site operates primarily on an affiliate marketing business model, promoting licensed casinos with clear disclosures and expert editorial content authored by named professionals. Technically, the website uses a modern Bootstrap framework, jQuery, and Amazon Cloudfront CDN, with Google Analytics integrated for user tracking. Age verification and ad consent mechanisms are implemented via custom JavaScript to comply with Dutch regulations. Security posture is good with HTTPS enforced, but the site lacks explicit privacy and cookie policies and some security headers. Overall, the site is professional, trustworthy, and compliant with Dutch gambling laws, targeting adults 24+ with safe gambling content.
- BBerliner Feuerwehr
berliner-feuerwehr.de
Government · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Berliner Feuerwehr is the official fire department of Berlin, Germany, providing comprehensive fire fighting, rescue, and emergency medical services since 1851. The organization serves the residents and visitors of Berlin with a broad range of services including emergency response, prevention, education, and volunteer fire services. The website reflects a well-established government entity with a strong market position as the primary emergency service provider in the capital city. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and FontAwesome. It is hosted on Strato servers with HTTPS enforced and demonstrates good mobile optimization and accessibility features, including dedicated accessibility overlays and compliance with digital accessibility standards. The site is well-structured, professionally designed, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS with a privacy-friendly YouTube embed and cookie consent mechanisms. However, it lacks explicit security headers and a published incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include implementing security headers, publishing a security policy, and adding a security.txt file to enhance transparency and incident response readiness.