Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
35,651–35,700 of 99,067
- Jaguar Kazakhstan
jaguar-kazakhstan.com
Transportation · Kazakhstan
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Jaguar Kazakhstan is a regional representation of the Jaguar automotive brand, targeting customers in Kazakhstan with premium vehicle information and brand marketing. The website uses modern web technologies including Nuxt.js for server-side rendering and integrates multiple third-party marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Facebook Pixel. The site is well-designed, mobile-optimized, and provides a professional user experience consistent with Jaguar's global branding. Security posture is good with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, which raises concerns about domain legitimacy, though the site content aligns with Jaguar's brand identity. Overall, the site is functional and professional but would benefit from improved transparency and compliance documentation.
- Jaguar Land Rover Limited
jaguar.in
Transportation · India
63Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Jaguar Land Rover Limited operates the www.jaguar.in website as the official digital presence for Jaguar luxury vehicles in India. The site offers comprehensive information on vehicle models, electric vehicles, special vehicle operations, and ownership services, targeting affluent customers interested in premium automotive products. The website is built on a robust technical infrastructure leveraging Adobe Experience Manager, modern JavaScript frameworks, and integrates advanced analytics and marketing tools such as Adobe Target and Google Tag Manager. Security posture is strong with HTTPS enforced, consent-based tracking, and no evident vulnerabilities. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site reflects a mature, professional, and trustworthy digital asset aligned with Jaguar's global brand standards.
- Jaguar Cambodia
jaguarcambodia.com
Transportation · Cambodia
69Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Jaguar Cambodia operates as the official regional website for Jaguar luxury vehicles in Cambodia, offering information on luxury saloons, compact SUVs, and sedans, along with options to book test drives. The website is professionally designed using modern web technologies such as Nuxt.js and Vue.js, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy, despite the professional appearance and branding consistency. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. Contact information and compliance documentation are missing, which impacts trust and privacy compliance scores. Overall, the site provides a good user experience and relevant content but requires improvements in transparency, security best practices, and compliance to enhance trustworthiness and reduce risk.
- Jaguar
jaguar.com.au
Transportation · Australia
61Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Jaguar Australia operates a comprehensive and professionally designed website showcasing its luxury automotive offerings, including SUVs, sedans, sports cars, electric vehicles, and special vehicle operations. The site provides extensive vehicle information, purchase options, test drive bookings, and retailer locators, targeting automotive customers in Australia. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Adobe Target and Google Tag Manager for marketing and analytics, demonstrating a mature digital presence. Security posture is strong with HTTPS, consent-based cookie management, and no visible vulnerabilities, although some security headers could be enhanced. Overall, the site reflects a trusted and legitimate brand presence with high-quality content and user experience.
werk85 GmbHwerk85.de
Media · Germany
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
werk85 GmbH is a Bremen-based full-service advertising agency specializing in digital and print media solutions. Their offerings include web and app development, content creation, social media management, and corporate design. The company serves a diverse clientele ranging from local businesses to nationwide organizations, positioning itself as a creative and reliable partner in the marketing sector. The website showcases a modern, well-structured design with detailed project case studies and clear contact information, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, ensuring fast performance and mobile optimization. Security measures are robust with HTTPS and security headers implemented, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates strong business credibility and compliance with privacy regulations, making it a trustworthy digital asset for the company.
Brand3Dbrand3d.com
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Brand3D is a technology-focused B2B consulting and SaaS provider specializing in AI-powered 3D and augmented reality solutions to enhance ecommerce product presentations and increase conversion rates. The company targets ecommerce businesses and creators seeking interactive and immersive product visualization tools. Their platform supports no-code integration and boasts a significant user base and notable partners such as Jacuzzi and Whirlpool. Technically, the website employs modern web technologies including React, Stripe for payments, and tracking tools like Facebook Pixel and Google Tag Manager. Hosting is via Amazon AWS, ensuring reliable infrastructure. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the site is professional and trustworthy with good content quality and user experience but would benefit from enhanced privacy and security practices.
melibomelibo.de
Technology · Germany
65Medium
NIS2 55 · GDPR 45
NIS2 55 · GDPR 45
Melibo is a small technology company specializing in customer service automation solutions. Their platform aims to reduce the volume of emails, calls, and tickets by automating responses, targeting businesses seeking to improve customer support efficiency. The website is professionally designed using Webflow and integrates modern marketing and analytics tools such as Google Tag Manager, Piwik Pro, Microsoft Clarity, and Visual Website Optimizer, indicating a mature digital infrastructure. The site is hosted on Webflow's CDN, ensuring reliable performance and good mobile optimization. Security posture is solid with HTTPS enforced and Google Consent Mode implemented, although explicit security headers and detailed security policies are absent. Privacy compliance is basic, with no dedicated privacy or cookie policy pages found, but a cookie consent mechanism is present. Contact information and incident response details are not publicly available, which may impact trust. Overall, the website is safe, professional, and suitable for general audiences, with moderate user tracking and marketing transparency.
Technology · Germany
68Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Communiacs is a professional digital agency based in Passau, Germany, specializing in web design, e-commerce, SEO, and online marketing services. The company positions itself as an official Google and Facebook partner, targeting businesses seeking comprehensive digital marketing solutions. Their website reflects a solid market presence with clear branding and a focus on delivering quality digital services. Technically, the website is built on TYPO3 CMS and leverages Cloudflare for DNS and likely CDN services, ensuring good performance and security. Cookiebot is implemented for GDPR-compliant cookie consent management, and Google Tag Manager is used for analytics and marketing tracking. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, some security headers are not explicitly detected, and Google reCAPTCHA is currently disabled, which could be improved. No critical vulnerabilities or exposed sensitive data were found. The absence of a public security policy or incident response contact is noted. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy digital agency platform. Strategic improvements in security headers and transparency policies would further enhance their security posture and user trust.
- WWaiting for the redirectiron...
misssite.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website misssite.com currently presents a Cloudflare security challenge page that blocks direct access to its content, limiting the ability to perform a full analysis. The domain is registered since 2013 with a reputable registrar and uses Cloudflare DNS services, indicating some level of operational maturity. However, the visible content is minimal and outdated, referencing legacy CMS versions Joomla 1.5 and WordPress 2.5, which are known to have security vulnerabilities. There is no evidence of privacy, cookie, or terms of service policies, nor any contact or business information on the accessible page. The site uses a third-party security service (BitNinja) as indicated by an external link, but no modern security headers or advanced protections are detected. Overall, the website's technical infrastructure is basic, with limited mobile optimization and poor SEO and accessibility compliance.
Viaplay Radioilikeradio.se
Media · Sweden
72Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Viaplay Radio operates as a digital media platform offering streaming access to 20 Swedish radio stations and podcasts through its website and mobile applications. The service targets Swedish-speaking audiences interested in diverse music genres and podcast content. The website is built on WordPress, leveraging modern JavaScript libraries and Google services for analytics and advertising. Privacy compliance is addressed through OneTrust cookie consent and detailed privacy and cookie policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data for the exact domain queried suggests the domain may be a subdomain or alias, which slightly impacts trust but does not detract from the professional presentation and functionality of the site.
Maldonado Digital LTDAmdndigital.co
Technology · Brazil
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
MDN Digital, operated by Maldonado Digital LTDA, is a Brazilian-based marketing and technology consultancy specializing in supporting startups, scale-ups, and enterprises to plan, develop, and monetize digital products efficiently. The company positions itself as an extension of clients' marketing and technology departments, offering a comprehensive suite of services from strategic planning to product development and performance marketing. Their market presence is reinforced by global client experience and a proprietary methodology focused on innovation and results. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Calendly integration, and Finsweet Cookie Consent for privacy compliance. The site demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Hosting is managed by Webflow, ensuring reliable performance and security. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are implemented, supporting GDPR compliance. However, the site lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, MDN Digital presents a professional, trustworthy, and well-structured online presence aligned with its business objectives. The risk profile is low, with recommendations focusing on improving security policy disclosures and incident response readiness to further strengthen trust and compliance.
- UUn Dato
undato.co
Technology · Colombia
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Un Dato is a small technology company specializing in data-driven customer experience enhancement solutions. Their offerings include pixel tracking, AI-powered audience segmentation, gamification, subscription management, and data enrichment services. The company targets businesses, particularly SMEs, seeking to leverage precise and reliable data for strategic decision-making. The website is professionally designed, mobile-optimized, and hosted on Cloudflare, employing modern web technologies such as Google Tag Manager and Google Fonts. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact is facilitated via a web form collecting email and message text, but no direct emails or phone numbers are published. Overall, the site presents a credible business with clear product offerings and transparent pricing, though improvements in privacy and security transparency are recommended.
État de Vaudvd.ch
Government · Switzerland
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.vd.ch is the official portal of the Canton of Vaud, Switzerland, serving as the authoritative source for government information, administrative services, and public communication. It targets residents, businesses, and local authorities within the canton, providing comprehensive e-government services and up-to-date news on cantonal activities. The site is well-branded, professionally designed, and offers clear navigation and accessibility features. Technically, the site is built on TYPO3 CMS with Bootstrap framework, integrating modern analytics tools such as Matomo, Google Tag Manager, and Mouseflow for user behavior insights. The infrastructure supports secure HTTPS connections and includes cookie consent mechanisms, reflecting a mature digital presence. Mobile optimization and SEO practices are well implemented, ensuring good user experience across devices. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The domain registration aligns with the official government entity, confirming legitimacy and trustworthiness. Overall, the website demonstrates a strong security posture and high business credibility, with minor gaps in transparency around security policies. It is a safe, professional, and reliable resource for its intended audience.
- ENERGYPRESS
energypress.eu
Energy · Greece
53Medium
NIS2 22 · GDPR 10
NIS2 22 · GDPR 10
ENERGYPRESS is a specialized online news platform focusing on the energy sector, particularly covering oil, gas, electricity, renewables, and related economic and political topics. The website targets industry professionals, policymakers, investors, and the general public interested in energy developments, primarily in Greece and Europe. It operates on a WordPress CMS with a moderate technical infrastructure including advertising and social media integration. The site offers news articles, a newsletter subscription, and advertising services as its main business model. The content is professionally presented with consistent branding and good user experience.
Government · United States
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Federal Aviation Administration (FAA) website serves as the official online presence of the U.S. government agency responsible for regulating and overseeing civil aviation and aerospace safety. The site provides comprehensive information and services related to aircraft certification, air traffic management, airport safety, pilot certification, drone regulation, and commercial space launches. It targets aviation professionals, government stakeholders, and the general public interested in aerospace safety and regulations. The FAA holds a strong market position as the primary federal authority in its sector, operating under the U.S. Department of Transportation. Technically, the website is built on Drupal 10 and leverages modern web technologies including Google Tag Manager and Google Analytics for tracking and performance monitoring. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced and anonymized IP tracking, though explicit security headers are not visible in the HTML source. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a visible cookie consent mechanism. Overall, the FAA website demonstrates a high level of professionalism, trustworthiness, and content quality. The absence of WHOIS data is consistent with government domain privacy practices and does not detract from the site's legitimacy. Recommendations include enhancing privacy compliance with cookie consent, publishing a security policy and incident response contacts, and implementing security.txt for vulnerability disclosures. These improvements would further strengthen the site's security posture and user trust.
Other
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at libanswers.com currently returns only a minimal JSON error message indicating the resource is not found, suggesting the site content is inaccessible or blocked. The domain is well-established, registered since 2008 with Tucows Domains Inc., and uses AWS DNS servers, indicating a professional hosting environment. However, no visible website content, metadata, or contact information is available for analysis. Due to the lack of accessible content, a comprehensive assessment of the business, technical infrastructure, and security posture is not feasible. The domain registration data is consistent with a legitimate business, but the absence of DNSSEC and security headers is noted. Overall, the site appears to be down or restricted, limiting the ability to evaluate privacy compliance, security policies, or business credibility.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain newjerseyclub.co currently serves a 404 Not Found error page, indicating the website content is inaccessible or not configured. There is no visible business information, metadata, or structured data to analyze. The lack of content and privacy-protected WHOIS data limit the ability to assess the company's market position, services, or target audience. Technically, the site lacks any detectable technologies, scripts, or security headers, and no SSL configuration data is available. Security posture is poor due to the absence of HTTPS and security best practices. Overall, the website is non-functional and does not provide any business or compliance information, resulting in a low trust and legitimacy score.
Divine Mercy Universitydivinemercy.edu
Education · United States
68Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Divine Mercy University is a specialized higher education institution offering graduate degrees in psychology and counseling, grounded in a Catholic-Christian worldview. The university targets graduate students seeking online and on-campus education in these fields, positioning itself as a niche provider with a clear mission and focused academic offerings. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its educational mission effectively. Technically, the site is built on WordPress using modern themes and plugins such as Kadence and Elementor, with integrations for event management, analytics, and marketing tools. The infrastructure supports good mobile optimization and accessibility features, including EqualWeb for enhanced accessibility compliance. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a solid baseline security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance compliance and user trust. No critical vulnerabilities or suspicious patterns were detected. Overall, Divine Mercy University’s website demonstrates a mature digital presence suitable for its educational purpose, with recommendations focusing on improving privacy compliance and transparency around security policies to further strengthen trust and regulatory adherence.
TelTek Video Research S. L.campusremotouvigo.gal
Education · Spain
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website campusremotouvigo.gal serves as the remote campus platform for Universidade de Vigo, providing students and faculty with access to live classrooms, educational resources, and university administrative links. The platform is positioned as a regional educational service supporting remote learning, with a clear focus on the Galician academic community. The business behind the domain registration is TelTek Video Research S. L., a Spanish company likely providing technical or hosting services for the university's digital infrastructure. The domain age and registration details align well with the platform's recent launch and purpose. Technically, the website employs a standard modern stack including jQuery, Bootstrap, Font Awesome, and Google Fonts, with Drupal CMS inferred from HTML attributes. Hosting is managed via OVH with DNS and CDN services from Cloudflare. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Google Analytics is used for user tracking, but no cookie consent mechanism was detected, indicating partial GDPR compliance. From a security perspective, HTTPS is properly implemented, and domain registration includes protective statuses against unauthorized changes. However, DNSSEC is not enabled, and no security headers were detected in the provided data, which are areas for enhancement. No incident response or security policy information is published, and no vulnerability disclosure or security.txt files were found. Overall, the security posture is adequate but could be strengthened with additional best practices. The website content is safe, professional, and targeted at a general academic audience with no adult or questionable content. Contact information is clearly provided with official university emails and phone numbers. Social media links connect to verified university accounts, enhancing trust. The overall risk is low, but improvements in privacy compliance and security hardening are recommended to maintain trust and regulatory adherence.
Healthcare · United States
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
NEMSIS.org is the official website for the National EMS Information System Technical Assistance Center, a key organization providing standardized emergency medical services data collection and reporting across the United States. The site serves multiple EMS stakeholders including state data managers, EMS agencies, researchers, software developers, and educators by offering data standards, public datasets, technical resources, and training opportunities. The organization is well-established with a domain age dating back to 2002, reflecting its longstanding role in the EMS data ecosystem. Technically, the website is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and ScrollMagic, supported by Google Fonts and Google Analytics for performance and analytics. Hosting and domain registration are managed via Amazon Registrar, Inc., indicating reliable infrastructure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with good design and navigation. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled, and there is a lack of explicit security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, NEMSIS.org is a trustworthy and professional resource for EMS data standards and services with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory compliance.
CEU - Universidad Fernando IIIuf3ceu.es
Education · Spain
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Universidad CEU Fernando III (UF3) is a regional higher education institution based in Sevilla, Spain, offering undergraduate, double degree, and master's programs. The website is professionally designed using WordPress, with good SEO and analytics integration, including Google Tag Manager, Microsoft Clarity, and Hotjar. The site implements GDPR-compliant cookie consent via Cookiebot, reflecting awareness of privacy regulations. However, no explicit privacy policy or terms of service pages were detected, which is a compliance gap. The WHOIS data for the domain is inaccessible due to Red.es restrictions, limiting domain legitimacy verification. Security posture is moderate with HTTPS enforced but lacking visible security headers and vulnerability disclosures. Overall, the site is safe, professional, and targeted at prospective students in the education sector.
Education · Spain
70Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
FUNDACIÓ PRIVADA UNIVERSITAT ABAT OLIBA CEU operates as a private higher education institution in Spain, offering specialized undergraduate and master's degree programs in fields such as Law, Politics, Business, Economics, Communication, Psychology, Education, and Humanities. The website reflects a professional and consistent brand image targeting students and professionals seeking quality university education. Technically, the site is built on Drupal 7 CMS and integrates modern analytics and consent management tools including Google Tag Manager, Cookiebot, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates good privacy compliance and business credibility, although WHOIS data is unavailable due to query restrictions, limiting domain registration verification. The website is accessible without WAF or security challenges, providing a safe and trustworthy user experience.
- Universidad CEU Cardenal Herrera
uchceu.es
Education · Spain
73Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Universidad CEU Cardenal Herrera is a private Catholic university based in Spain with campuses in Valencia, Alicante, and Castellón. It serves a diverse international student body from over 70 countries, offering higher education and research services. The university positions itself as a global campus with a strong academic reputation. Technically, the website employs a modern tech stack including jQuery, Slick carousel, Google Tag Manager, and Cookiebot for privacy compliance. The site is hosted behind Cloudflare, enhancing security and performance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the website is professional, well-structured, and GDPR compliant, reflecting a mature digital presence. The lack of WHOIS data limits domain legitimacy verification but the content and structured data support the institution's authenticity.
- Universidade de Vigo
uvigo.gal
Education · Spain
67Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Universidade de Vigo is a public university located in Galicia, Spain, offering a wide range of undergraduate, postgraduate, and doctoral programs. It maintains a strong focus on innovation and internationalization, serving students, academic staff, researchers, and companies. The website reflects a well-established institution with comprehensive academic and institutional information, targeting a broad academic audience. Technically, the site is built on Drupal 8, leveraging modern web technologies including Google Analytics and Font Awesome, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, employs standard security headers, and anonymizes IPs in analytics, indicating a solid security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of malicious content or blocking mechanisms.
- Actalis.com
actalis.com
Technology
69Medium
NIS2 60 · GDPR 68
NIS2 60 · GDPR 68
Actalis.com is a digital trust services provider specializing in SSL certificates, enterprise security solutions, and partner programs. The company targets businesses and website owners seeking to secure their online presence with trusted digital certificates and signature services. The website demonstrates a professional and consistent brand image with clear service offerings and a focus on digital security. Technically, the site is built on the PrestaShop e-commerce platform, utilizing modern web technologies such as Google Tag Manager, Google reCAPTCHA, and Cookiebot for privacy compliance. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the website enforces HTTPS and uses CAPTCHA to protect forms, but lacks some advanced security headers and a published security policy or incident response contact. The absence of WHOIS registration data reduces the domain trust score, though the website content and services appear legitimate. Overall, the site is well-structured and secure but would benefit from enhanced transparency in domain registration and security disclosures.
- GGreek Energy Forum
greekenergyforum.com
Energy · Greece
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Greek Energy Forum is a non-for-profit organization established in 2013, focusing on the energy sector in Greece and the wider Southeast European region. It offers services such as hosting events, publishing research and opinions, and providing memberships to energy professionals and stakeholders. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Cookiebot for cookie consent, and Google Analytics for tracking. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data, and the login form relies on client-side validation only. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no explicit GDPR compliance statements or data protection officer contact found. WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a content perspective but would benefit from improved security and transparency regarding domain registration.
- Bigbank AS
bigbank.fi
Finance · Finland
68Medium
NIS2 57 · GDPR 10
NIS2 57 · GDPR 10
Bigbank Suomi Oy operates as a consumer finance provider in Finland, specializing in personal loans and deposit products. The company is part of the larger Bigbank AS group, which has a strong presence in the Baltic and Nordic regions. The website is professionally designed, providing clear information and easy access to loan applications and customer support. The target audience is Finnish consumers seeking straightforward online financial services. Technically, the site uses modern frameworks such as Nuxt.js and integrates hCaptcha for bot protection, indicating a mature digital infrastructure. Security is robust with HTTPS, security headers, and no detected vulnerabilities, although a dedicated security policy and incident response contact are absent. Overall, the site demonstrates a high level of business credibility and compliance with privacy regulations.
Finance · Latvia
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website bigbank.lv is currently inaccessible due to a Cloudflare security challenge page that blocks direct access to the site's content. This challenge page includes a Turnstile captcha verification step, indicating active protection against automated access or potential attacks. Due to this, no direct content, business information, or contact details are available for analysis. The domain is active and uses Cloudflare DNS services, consistent with a legitimate financial institution operating in Latvia. However, the lack of accessible content limits the ability to assess the website's privacy policies, security posture, or business credibility in detail.
- Bearstech
bearstech.com
Technology · France
75Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Bearstech is a French SCOP company specializing in hosting, managed services, DevOps consulting, and cloud infrastructure management. Established in 2003, it positions itself as an expert in critical infrastructure management with a strong emphasis on open source software and sustainable digital practices. The company offers a comprehensive portfolio including dedicated hosting, multi-cloud dashboards, SaaS applications, and GitLab SaaS hosting, targeting businesses requiring reliable and secure IT infrastructure solutions. Technically, the website is built on Drupal 10 with modern responsive design and employs best practices such as lazy loading images and structured data for SEO. The presence of Google Tag Manager and Analytics indicates moderate user tracking with a privacy-compliant cookie consent mechanism. Hosting is likely provided by OVH, consistent with the domain registrar and service offerings. Security posture is solid with HTTPS enforced, domain status protections, and cookie consent, though there is room for improvement by enabling DNSSEC and publishing explicit security policies and incident response contacts. No vulnerabilities or suspicious content were detected. The domain WHOIS data aligns well with the business claims, showing a mature and legitimate entity. Overall, Bearstech demonstrates a professional, trustworthy, and technically mature online presence suitable for its target market of enterprises seeking expert IT infrastructure services.
PCFH Studio - Pour un numérique plus éthiquepcfh.studio
Technology
69Medium
NIS2 22 · GDPR 50
NIS2 22 · GDPR 50
PCFH Studio is a French digital solutions studio focused on creating, improving, and growing ethical, user-friendly, and emancipatory digital solutions. The website content is professionally presented in French, targeting organizations aware of contemporary digital challenges. The technical infrastructure is built using the Astro framework and employs Matomo analytics with Do Not Track enabled, indicating a privacy-conscious approach. However, the absence of explicit privacy and cookie policies and lack of contact information limit transparency and user trust. The security posture is moderate with HTTPS implied but missing explicit security headers and policies. Overall, the website is accessible and well-designed but would benefit from enhanced privacy compliance and clearer business contact details.
RTL AdAlliancertl-adalliance.com
Media
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
RTL AdAlliance operates as a specialized advertising sales house connecting international and local brands to European audiences through premium video content. The company leverages advanced advertising technology and a self-service platform to facilitate digital and addressable TV advertising campaigns. Positioned under the RTL Group umbrella, RTL AdAlliance holds a strong market position with access to leading European media brands. The website reflects a professional and consistent brand image, targeting advertisers and publishers with a clear value proposition centered on simplicity and effectiveness. Technically, the website is built on Drupal 10 and integrates modern JavaScript libraries such as Anime.js, GSAP, and ScrollMagic, alongside Piwik PRO for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. The domain is registered with EuroDNS S.A. and shows no signs of privacy protection or suspicious registration patterns, aligning well with the business's founding date and market presence. From a security perspective, the site enforces HTTPS and uses secure cookie settings in analytics. However, it lacks published security policies or incident response contacts, and DNSSEC is not enabled, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No critical vulnerabilities or malicious content were detected, and the site maintains a high trustworthiness rating. Overall, RTL AdAlliance presents a credible, professional, and secure online presence suitable for its business model. Strategic recommendations include enhancing DNS security with DNSSEC, publishing formal security and incident response policies, and implementing additional security headers to further strengthen the security posture.
Berlingo Mediaberlingomedia.se
Media · Sweden
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Berlingo Media is a creative advertising agency based in Stockholm, Sweden, specializing in disruptive and alternative outdoor marketing solutions. Founded in 2020, the company offers a range of unique advertising formats including large-scale outdoor billboards, facade projections, mobile street TV advertising, and guerrilla marketing campaigns. Their market position is that of a niche player focused on innovative out-of-home advertising in the Nordic region. The website reflects a modern and professional digital presence built on Webflow, leveraging advanced animation libraries and Google Tag Manager for analytics. Security measures include HTTPS, CAPTCHA protection on contact forms, and a comprehensive cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong with detailed policies and GDPR-aligned consent. Overall, the website and domain registration data indicate a legitimate, small-sized business with a clear focus and good technical maturity.
Other
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website nenda.com currently returns a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. There is no accessible content, metadata, or business information available on the site. The domain is registered with GoDaddy.com, LLC since 2002, showing a long registration history, but the lack of accessible content severely limits the ability to assess the business or its services. Technically, the site uses Cloudflare DNS but does not have DNSSEC enabled, and no security headers or privacy policies are present. Overall, the site is inaccessible and lacks transparency, which negatively impacts trust and credibility.
Viaplay Radioviaplayradio.se
Media · Sweden
74Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Viaplay Radio operates as a Swedish media streaming platform offering 20 radio stations and podcasts accessible via their website and mobile apps. The service targets Swedish-speaking audiences interested in diverse music genres and radio content. The website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and OneTrust for cookie consent. SEO is well implemented using Yoast SEO. Security posture is moderate with HTTPS enabled and some security hardening plugins in use, but lacks comprehensive security headers and explicit privacy and terms of service pages. The absence of WHOIS data for the exact domain queried raises some concerns about domain registration legitimacy, though the site content and branding appear professional and consistent. Overall, the platform provides a good user experience with safe content suitable for general audiences.
JCDecauxjcdecaux.se
Transportation · Sweden
65Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
JCDecaux is a well-established enterprise operating in the transportation sector, specializing in outdoor advertising and street furniture services. The company maintains a professional and consistent online presence with a website built on WordPress, leveraging modern technologies such as Matomo analytics, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-optimized for performance and mobile devices, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional business with a strong market position in outdoor advertising.
- AAwardly
awardly.se
Technology · Sweden
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Awardly is a Swedish-based technology platform founded in 2023 that provides a comprehensive solution for managing competitions and jury work, including project management support. The website is primarily in Swedish with an English alternate version, targeting organizations or individuals involved in competition management. The business operates in a niche market with a small company size and a focused service offering. Technically, the website is built using BaseKit CMS and leverages external resources hosted on misssite.com domains. The site demonstrates good design quality and mobile optimization but lacks advanced SEO and accessibility features. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is limited, with no privacy policy or terms of service pages found, though a cookie consent mechanism is implemented. Contact information and social media presence are absent, which may impact user trust and engagement. Overall, the website is functional and professional but would benefit from improvements in privacy, security, and contact transparency.
Nimbus Group GmbHrosso-acoustic.com
Manufacturing · Germany
56Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Rossoacoustic is a specialized brand under the Nimbus Group GmbH, focused on manufacturing highly flexible shading and acoustically effective room division systems primarily for office and object spaces. The website presents a professional and consistent brand image with clear product portfolios and project showcases targeting B2B customers in the manufacturing and office solutions sector. The technical infrastructure leverages modern JavaScript libraries and marketing tools such as Google Tag Manager and HubSpot, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, supporting the Nimbus Group's market presence in Germany.
Nimbus Group GmbHnimbus-mockup.com
Manufacturing · Germany
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nimbus Group GmbH operates a specialized showroom and manufacturing business focused on innovative LED lighting and acoustic room partitioning systems. The company targets B2B customers seeking advanced lighting solutions and acoustic design products, positioning itself as a niche player with a strong brand presence in Germany. The website serves as a digital showroom and brand portal, linking to related Nimbus and Rossoacoustic brands. Technically, the website uses a modern JavaScript stack including jQuery, Fotorama, and Pikaday, integrated with marketing and analytics tools such as Google Tag Manager and HubSpot. The site is mobile-optimized and well-structured, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS but lacks DNSSEC and visible security headers, which are recommended for enhanced protection. Cookie consent is implemented via OneTrust, indicating some GDPR compliance effort, but no privacy policy or terms of service are published. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is professional and trustworthy but could improve compliance and security posture by publishing privacy and security policies, enabling DNSSEC, and adding security headers. These steps would enhance user trust and reduce risk exposure.
Nimbus Group GmbHnimbus-group.com
Manufacturing · Germany
56Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Nimbus Group GmbH is an established German manufacturing company specializing in innovative LED lighting and acoustic room division systems under the brands Nimbus, Rosso, and Rossoacoustic. The company operates internationally with a strong presence in Stuttgart, Germany, where all products are developed and manufactured. Their business model focuses on B2B and B2C markets, offering energy-efficient lighting solutions and flexible acoustic systems for residential and commercial spaces. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website employs modern JavaScript libraries such as jQuery, Fotorama, and Moment.js, alongside marketing and analytics tools like Google Tag Manager and HubSpot. The site is mobile-optimized and performs moderately well, though SEO could be improved due to the noindex,nofollow robots meta tag on the homepage. No CMS is explicitly detected, suggesting a custom-built platform. From a security perspective, the site enforces HTTPS and domain registration protections but lacks DNSSEC and advanced security headers. There is no publicly available security policy or incident response information, which could be improved to enhance trust. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via OneTrust, supporting GDPR adherence. Overall, Nimbus Group GmbH presents a trustworthy and professional online presence with room for technical and security enhancements. Strategic improvements in security policies, DNSSEC implementation, and SEO would strengthen their digital maturity and risk posture.
- EBSCO Industries, Inc.
dynamed.com
Healthcare · United States
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
DynaMed is a leading clinical decision support platform operated by EBSCO Industries, Inc., providing evidence-based medical content, alerts, drug resources, and continuing education primarily targeting healthcare professionals and institutions. The platform is subscription-based and recognized for its authoritative medical guidance, holding prestigious awards such as the Best in KLAS Clinical Decision Support recognition. Technically, the website employs modern web technologies including React, JavaScript, and integrates advanced analytics and consent management tools such as Gainsight PX, Amplitude, Datadog RUM, and Osano CMP, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or registration issues, but the website's branding and external references confirm its association with a reputable enterprise. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience.
ARMSTARK®armstark.de
Retail · Germany
59Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ARMSTARK® is a well-established German company specializing in wellness products such as whirlpools, saunas, swim spas, and infrared cabins. The company positions itself as a market leader in Germany with over 30 years of experience, targeting customers seeking wellness solutions for home use. The website is powered by TYPO3 CMS and hosted on Hetzner infrastructure, indicating a professional technical setup. The site employs modern technologies including Cookiebot for consent management and Google Tag Manager for analytics and marketing integrations. Security posture is solid with HTTPS enforced and consent mechanisms in place, although additional security headers could enhance protection. Privacy compliance is strong, with detailed cookie disclosures and GDPR-aligned consent options. Overall, the website presents a professional and trustworthy image with good content quality and user experience.
Shoplazzashoplazza.dev
E-commerce
69Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Shoplazza is an e-commerce platform providing a developer portal focused on enabling app and theme development. The website offers comprehensive documentation, APIs, and tools to support developers and store administrators in building and managing e-commerce stores efficiently. The platform positions itself as a modern and developer-friendly solution in the e-commerce market, targeting developers and merchants seeking customization and integration capabilities. Technically, the site is built on modern web technologies including React and is hosted on the ReadMe.io platform, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and dedicated security or incident response policies, which are areas for improvement. Overall, the site is professional, trustworthy, and well-suited for its target audience, with recommendations to enhance privacy compliance and security transparency.
Hapag-Lloyd Cruiseshlc-agentcompass.com
Transportation · Germany
57Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Hapag-Lloyd Cruises AGENT COMPASS is a specialized B2B platform designed to facilitate cruise bookings and provide sales materials to travel agents. The website reflects a mature digital presence with a focus on user-friendly login and registration processes, supported by a comprehensive cookie consent mechanism compliant with GDPR. The platform integrates modern JavaScript libraries and Google Tag Manager for analytics, ensuring effective tracking and marketing capabilities. Security posture is solid with HTTPS enforced and secure form handling, although some security headers could be improved. Overall, the site demonstrates a professional and trustworthy environment aligned with the cruise industry's standards.
Agicapagicap.com
Finance · France
70Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Agicap is a France-based SaaS company specializing in cash flow management software tailored for SMBs and mid-market companies across Europe. The platform offers comprehensive treasury management, accounts payable and receivable automation, and banking & ERP connectivity, positioning itself as a market leader with over 8000 clients and a 98% satisfaction rating. The website reflects a mature digital presence with modern technologies such as React, Gatsby, and integrations with major analytics and marketing platforms. Security posture is strong, with GDPR and ISO/IEC 27701 compliance, encrypted data storage on Google Cloud, and TLS for data in transit. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, well-structured, and trustworthy, with clear business and contact information.
- Commune de Chalais
chalais.ch
Government · Switzerland
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.chalais.ch is the official online presence of the Commune de Chalais, a small municipal government entity in Valais, Switzerland. It serves as an information portal for residents and visitors, providing access to local news, administrative services, community events, and partner resources. The site is primarily in French and targets local citizens and tourists interested in the region. The business model is public service with no commercial intent, focusing on transparency and community engagement. Technically, the website uses legacy JavaScript libraries such as jQuery 1.6.4 and Nivo Slider for UI elements, alongside Google Analytics and Google Tag Manager for visitor tracking. The site is served over HTTPS with a valid SSL configuration, but lacks modern security headers and uses outdated libraries that pose potential security risks. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and consistent branding. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms, indicating some privacy awareness. However, it lacks explicit security policies, incident response information, and modern security headers. The use of outdated JavaScript libraries introduces vulnerabilities that should be addressed. No critical security issues or blocking mechanisms were detected, and the domain registration aligns well with the website's claims, supporting legitimacy. Overall, the website is a trustworthy and functional municipal portal with room for technical and security improvements. Strategic recommendations include updating legacy libraries, implementing security headers, publishing security and incident response policies, and enhancing privacy compliance to better protect users and improve trust.
- Sequotech
sequotech.ch
Technology · Switzerland
73Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Sequotech is a medium-sized Swiss IT group founded in 2021, specializing in digital transformation services including data platforms, analytics, cloud infrastructure, cybersecurity, software development, and proprietary AI products. The company positions itself as a unifying force in IT excellence, leveraging partnerships with major technology vendors and a constellation of subsidiaries to deliver comprehensive IT solutions. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern plugins and consent management, hosted with Cloudflare DNS and secured by HTTPS. Security posture is good with no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Business credibility is high, supported by transparent WHOIS data and detailed company information. Overall, Sequotech demonstrates a solid market position and digital maturity suitable for its business goals.
- Tooplate
tooplate.com
Technology
55Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Tooplate is a small technology-focused website offering over 60 free, responsive HTML website templates primarily targeting web developers, small businesses, and individuals seeking easy-to-use website layouts. The business model centers on free distribution of templates built on Bootstrap frameworks, with no registration required. The website is professionally designed with good content quality and clear navigation, optimized for mobile devices. Technically, it uses modern web technologies including Bootstrap, Google Fonts, Google Analytics, and advertising networks such as Google AdSense and DoubleClick. The site implements GDPR consent mechanisms and a privacy policy, indicating awareness of privacy compliance. Security posture is moderate with HTTPS enforced but lacks visible security headers and explicit incident response contacts. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for this business type. Overall, the site is safe, reliable, and suitable for general audiences seeking free web templates.
- Dropbox
dropbox.com
Technology · United States
72Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Dropbox is a leading global technology company specializing in cloud storage, file sharing, and collaboration solutions. It serves both individual users and enterprises with a suite of products including Dropbox, Replay, Backup, Dash, DocSend, and Sign. The company is well-established with a strong market position and recognized brand. Technically, Dropbox employs modern web technologies such as React and RequireJS, delivering a fast, mobile-optimized, and accessible website experience. Security is robust, with HTTPS enforced, comprehensive security headers, and adherence to industry standards like ISO 27001 and SOC 2. Privacy compliance is evident through detailed policies and GDPR adherence. Overall, Dropbox demonstrates a mature digital infrastructure and strong business credibility.
digistatsdigistats.ch
Technology · Switzerland
59Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
digistats is a Swiss-based privacy-focused web analytics provider offering a Google Analytics alternative that emphasizes user privacy by avoiding cookies, IP tracking, and fingerprinting. The company targets website owners who require GDPR, CCPA, and PECR compliant analytics solutions that are lightweight and easy to integrate. Their service includes real-time analytics, behavior tracking, geographic and technology insights, and adblocker-resistant data collection. The business model is subscription-based with a free 14-day trial and no credit card required, positioning digistats as a niche player in the privacy analytics market with a strong Swiss data protection emphasis. Technically, the website is built with modern web technologies including JavaScript and Bootstrap, likely running on Laravel backend as inferred from CSRF tokens. The site is fast, mobile-optimized, and well-structured with clear navigation and professional design. Hosting appears to be Swiss-based, supporting their privacy claims. The site uses HTTPS with strong SSL configuration and includes CSRF protection. However, explicit security headers are not detected, and no public security or incident response policies are published. From a security perspective, digistats demonstrates good practices by avoiding cookies and IP storage, reducing privacy risks. The presence of CSRF tokens and HTTPS is positive, but the absence of published security policies and vulnerability disclosure mechanisms is a gap. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration aligns with the website's Swiss privacy focus, enhancing legitimacy. Overall, digistats presents a trustworthy, professional, and privacy-compliant analytics service with strong technical and business foundations. Strategic improvements include publishing security policies, adding security headers, and providing explicit incident response contacts to further enhance trust and security posture.
PLR.Les Libéraux-Radicaux PRR Bienneprr-bienne.ch
Government · Switzerland
52Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website represents the local branch of the Liberal-Radical Party (PLR) in Bienne, Switzerland, serving as an informational and engagement platform for party members, voters, and the general public interested in local politics. It provides news, event agendas, party vision, elected officials information, and donation options. The site targets residents and politically engaged citizens in the Bern canton region. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Cookie consent is implemented with a high privacy standard, and Google Analytics is used with user opt-in. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, suitable for its non-profit political organization context.