Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
38,751–38,800 of 99,067
visitfrankfurt.de domain name is for sale. Inquire now.visitfrankfurt.de
Other
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.visitfrankfurt.de is a domain sales landing page indicating that the premium domain name is available for purchase. It is hosted on a domain marketplace platform (Efty) and uses standard web technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics. The site includes a contact form protected by Google reCAPTCHA to collect offers from potential buyers. The overall content is minimal and focused solely on domain sale promotion, targeting domain investors and businesses interested in premium domains. The WHOIS data aligns with the domain marketplace usage, showing consistent name servers and domain status. No registrant details are provided, which is typical for domain sales platforms. The site lacks privacy, cookie, and terms of service policies, which impacts its privacy compliance score.
Francesco Carovillanofrancescocarovillano.com
Other · France
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Francesco Carovillano's website is a professionally designed personal portfolio showcasing landscape photography and artistic work, including a book available for purchase. The site targets art enthusiasts and potential buyers, operating primarily as a small-scale personal brand. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and Google Analytics for visitor tracking. It is mobile-optimized with good design and navigation clarity. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts compliance. Overall, the site is trustworthy and legitimate, with consistent WHOIS data matching the business identity.
Landeshauptstadt Dresdendresden.de
Government · Germany
63Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website www.dresden.de serves as the official digital portal for the Landeshauptstadt Dresden, providing comprehensive information and services related to city administration, culture, tourism, economy, and public welfare. It targets residents, visitors, and businesses, positioning itself as the authoritative source for municipal information. The site features a well-structured navigation system and extensive content covering various aspects of city life. Technically, the website employs a range of JavaScript libraries including jQuery, Perfect Scrollbar, Swiper.js, and Highcharts, indicating a mature but somewhat legacy technology stack. The site is mobile-optimized and accessible, with good SEO practices and performance rated as moderate. Hosting and CMS details are not explicitly identified, suggesting a custom or proprietary solution. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The use of an older jQuery version may present minor risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional transparency and modern security headers. The overall risk assessment is low, with the site demonstrating high professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include updating legacy libraries, publishing security and incident response policies, and implementing security.txt for vulnerability reporting to further strengthen trust and security culture.
- Image Professionals GmbH
lookphotos.com
Media · Germany
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
lookphotos is a specialized German image agency focusing on travel, nature, outdoor, adventure, and lifestyle photography. It operates as a business unit of Image Professionals GmbH, offering curated image collections, photographer portfolios, and image reservation services. The website is professionally designed with consistent branding and clear navigation, targeting professional clients seeking high-quality photographic content. Technically, the site uses jQuery, React 15.4.0, and Matomo analytics with cookies disabled, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by implementing security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces transparency but does not significantly impact perceived legitimacy given the professional presentation and detailed contact information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.
visitBerlinvisitberlin.de
Hospitality · Germany
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
visitBerlin.de is the official tourism portal for Berlin, offering comprehensive information on sightseeing, hotels, events, tickets, and travel offers. The website targets tourists and visitors seeking detailed and reliable travel information about Berlin. It holds a strong market position as an authoritative source for Berlin tourism, providing multilingual content and a user-friendly experience. The business model focuses on tourism promotion and ticket sales, supported by a large-scale digital platform.
Other
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The domain zendesk.in currently hosts a parked domain page indicating that the domain registration has expired and is available for auction or registration via Dynadot. There is no active website content, business description, or services offered on this domain. The page primarily serves advertising and domain parking purposes with third-party ad scripts and tracking. The lack of HTTPS, security policies, contact information, and business presence indicates the domain is not currently in use by a legitimate business entity. This poses risks including domain hijacking and misuse. From a technical perspective, the site uses basic JavaScript and Google Adsense scripts typical of domain parking pages. There is no evidence of a CMS or modern web framework. Performance and mobile optimization are basic, with minimal content and structure. SEO and accessibility are poor due to lack of meaningful content and metadata. Security posture is weak with no HTTPS detected in the provided data, no security headers, and no privacy or cookie compliance mechanisms beyond a basic privacy policy link. The domain expiration status is a critical vulnerability. No incident response or security contact information is available. Overall, the domain is currently non-operational as a business website and should be considered high risk. Immediate renewal and proper website development with security and compliance best practices are recommended to restore legitimacy and trust.
- Zendesk
zendesk.hk
Technology · Hong Kong
62Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading global provider of AI-driven customer service software solutions, trusted by over 200,000 customers. The website targets enterprise and small business clients in Hong Kong and globally, offering a comprehensive suite of products including AI agents, ticketing systems, messaging, and workforce management. The site is well-structured, professionally designed, and localized in Traditional Chinese with multi-language support, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, hosted on Amazon CloudFront, with integrated marketing and analytics tools like Marketo and Google Tag Manager, all implemented with good performance and accessibility standards. Security posture is strong with HTTPS, security headers, and consent-based analytics loading, though incident response and vulnerability disclosure information could be enhanced. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.
- Zendesk
zendesk.tw
Technology · Taiwan
74Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading global provider of AI-powered customer service software solutions, trusted by over 200,000 customers worldwide. The website targets enterprise and business customers in Taiwan, offering a comprehensive suite of services including AI agents, ticketing systems, messaging, voice, and workforce management. The company positions itself as a mature, enterprise-grade SaaS provider with a strong market presence and a focus on innovation in customer experience technology. The technical infrastructure is modern, leveraging Next.js, React, and cloud hosting via Amazon CloudFront, with integrated analytics and consent management tools. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, indicating a well-maintained and secure web presence. Overall, the website demonstrates high professionalism, excellent content quality, and robust business credibility.
- Zendesk
zendesk.kr
Technology · South Korea
71Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading global provider of customer service software solutions, trusted by over 200,000 customers worldwide. The Korean localized website offers comprehensive AI-powered customer service tools including AI agents, copilot features, ticketing systems, messaging, and voice services. The company targets enterprises, SMBs, and startups across various industries, emphasizing AI integration and workflow improvements. Technically, the site is built on modern frameworks such as Next.js and React, hosted on Amazon Cloudfront, and employs advanced analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though the absence of WHOIS data for the domain introduces a minor trust concern. Overall, the website demonstrates high professionalism, excellent content quality, and good privacy compliance, positioning Zendesk as a mature and credible SaaS provider in the customer service technology sector.
- Zendesk
zendesk.nl
Technology · Netherlands
73Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Zendesk is a leading enterprise SaaS provider specializing in AI-driven customer service solutions. The company offers a comprehensive suite of products including AI agents, ticketing systems, messaging, voice, and workforce management, targeting businesses of all sizes globally. The website is professionally designed, multilingual, and optimized for performance and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though some additional headers could enhance protection. The domain registration is consistent with the company's history and operations, supporting legitimacy. Overall, Zendesk presents a trustworthy and professional online presence aligned with its market position.
- Zendesk
zendesk.com.mx
Technology · Mexico
70Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading global provider of customer service software, offering a comprehensive suite of AI-powered and traditional customer support solutions. The website targets businesses seeking to enhance their customer service capabilities through modern, scalable SaaS products. The company positions itself strongly in the enterprise market with a broad portfolio including AI agents, ticketing, messaging, voice, and workforce management. Technically, the site is built on modern frameworks such as React and Next.js, hosted on AWS Cloudfront CDN, and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, key security headers, and privacy compliance mechanisms, though there is room for improvement in explicit security policies and incident response disclosures. Overall, the site demonstrates high professionalism, trustworthiness, and compliance, supporting a strong market presence in Mexico and globally.
- Zendesk
zendesk.fr
Technology · France
68Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading global provider of AI-powered customer service solutions, offering a comprehensive suite of products including AI agents, ticketing systems, messaging, and call center software. The company targets a broad audience ranging from startups to large enterprises across multiple industries such as technology, retail, finance, healthcare, and telecommunications. The website is professionally designed, multilingual, and optimized for performance and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance aligned with GDPR standards. However, explicit incident response and vulnerability disclosure information are not publicly available, representing an area for improvement. Overall, Zendesk presents a trustworthy and professional online presence consistent with its market position.
- Zendesk
zendesk.es
Technology · Spain
74Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading enterprise software company specializing in comprehensive customer service solutions powered by artificial intelligence. Their platform supports multichannel communication including SMS, email, chat, voice, and social media, serving over 200,000 customers globally. The website reflects a mature digital presence with multiple language options and a strong emphasis on AI-driven service enhancements. Technically, the site leverages modern frameworks such as Next.js, integrates marketing and analytics tools like Marketo and Google Tag Manager, and uses Amazon Cloudfront for content delivery, ensuring fast and responsive user experience. Security posture is solid with HTTPS enforcement and key security headers, though improvements like CSP and DNSSEC could enhance protection. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable due to registry restrictions, limiting domain registration verification.
- Zendesk
zendesk.co.uk
Technology · United Kingdom
59Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading enterprise technology company specializing in AI-powered customer service software. The company offers a comprehensive suite of products including AI agents, ticketing systems, messaging, and workforce management solutions designed to enhance customer and employee interactions across multiple channels. With a strong market presence and over 200,000 customers, Zendesk positions itself as a complete customer service solution provider. The website demonstrates a mature digital infrastructure leveraging modern frameworks such as Next.js and React, hosted on AWS Cloudfront, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement and key security headers, complemented by privacy compliance mechanisms including cookie consent and GDPR-aligned policies. The absence of WHOIS data is due to a query error on the subdomain rather than the root domain, and does not detract from the site's legitimacy. Overall, Zendesk's website reflects a professional, secure, and user-friendly platform aligned with enterprise standards.
- Zendesk
zendesk.de
Technology · Germany
65Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading enterprise software company specializing in AI-powered customer service solutions. Their platform supports multiple communication channels including SMS, app, phone, email, live chat, and social media, serving over 200,000 customers globally. The website reflects a mature digital presence with comprehensive product offerings and multilingual support, targeting businesses of various sizes and industries. Technically, the site leverages modern frameworks like Next.js and React, hosted on Cloudflare and AWS Cloudfront, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and essential security headers, though incident response and vulnerability disclosure information could be enhanced. Overall, Zendesk demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR, making it a reliable platform for customer service needs.
- Zendesk
zendesk.com.br
Technology · Brazil
69Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading enterprise software company specializing in AI-powered customer service solutions. The website targets businesses of all sizes, offering a comprehensive suite of services including AI agents, ticketing systems, messaging, voice, and quality assurance. The company maintains a strong market position with a professional and well-branded online presence, supporting multiple languages and international markets. Technically, the site leverages modern frameworks such as Next.js and React, integrates marketing and analytics tools like Marketo and Google Tag Manager, and is hosted with Cloudflare DNS services, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the site demonstrates a mature digital infrastructure and strong business credibility, with minor recommendations to enhance transparency in security policies.
- Zendesk
zendesk.org
Technology · United States
63Medium
NIS2 35 · GDPR 100
NIS2 35 · GDPR 100
Zendesk Foundation is a corporate foundation of Zendesk, Inc., focused on leveraging company resources, products, and employee volunteerism to support nonprofit organizations addressing social challenges globally. The foundation operates programs fostering community, creating tech career pathways, and promoting resilience during crises. The website reflects a mature digital presence with modern technologies, strong branding, and comprehensive content. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place. Privacy policies and terms are clearly presented, indicating good compliance practices. The absence of WHOIS data is likely due to privacy protection, which is justified for an enterprise entity. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with Zendesk's corporate identity.
ResponseTapresponsetap.com
Technology · United Kingdom
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
ResponseTap is a UK-based technology company specializing in intelligent call tracking and analytics software designed to help businesses and marketing agencies understand which campaigns drive phone calls. The company positions itself as a comprehensive solution in the call tracking market and is now part of the parent company Infinity. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. However, the absence of WHOIS registration data raises concerns about domain transparency and legitimacy. Security posture is moderate with HTTPS and cookie consent implemented, but lacks visible security policies or incident response information. Privacy compliance is basic, with no explicit privacy policy detected in the provided content. Overall, the website presents a credible business front but would benefit from improved transparency and security documentation.
Bazaarbazaar-london.com
E-commerce · United Kingdom
75Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Bazaar London is a premium e-commerce retailer specializing in unique, customisable contemporary furniture designed for exclusive addresses. The company emphasizes exceptional craftsmanship and sustainability, supported by its B-Corp certification. The website targets high-end consumers, interior designers, and trade customers, offering bespoke furniture and interior design services. Bazaar operates under the parent company Accouter Group of Companies, indicating a structured business foundation. Technically, the website is built on the Shopify platform, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Klarna for payments. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and secure payment processing, although a dedicated security policy and vulnerability disclosure are absent. Overall, Bazaar London presents a trustworthy, professional online presence with a solid business and technical foundation.
- TText, Inc.
livechatinc.com
Technology · United States
71Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
LiveChat® is a leading AI-powered live chat software provider targeting ecommerce and B2B businesses globally. The company offers a comprehensive SaaS platform that enhances real-time customer support, sales, and marketing through live chat and AI chatbots. Their market position is strong, supported by over 35,000 companies worldwide and a consistent brand presence. Technically, the website employs modern web technologies, asynchronous loading of scripts, and structured data for SEO, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure form handling, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and business credible, with strong integration partnerships and a clear focus on customer service automation.
Deutsche Automobil Treuhand GmbHdatgroup.com
Transportation · Germany
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Deutsche Automobil Treuhand GmbH (DAT) operates an international website providing automotive data and software solutions with a history spanning approximately 90 years. The company targets automotive professionals, fleet managers, repair shops, and insurers with products such as vehicle valuation, repair cost estimation, claims management, and telematics. The website reflects a mature business with a broad international footprint through multiple subsidiaries. Technically, the site is built on TYPO3 CMS, employs modern JavaScript frameworks, and integrates a consent management platform (Usercentrics) and self-hosted analytics (Matomo), indicating a good level of digital maturity. Security posture is strong with HTTPS enforcement and nonce-based content security, though some security headers and explicit policies are absent. The absence of WHOIS data for the domain reduces trust in domain registration transparency but does not detract from the professional presentation and business legitimacy evident on the site. Overall, the site is well-structured, privacy compliant, and professionally maintained.
HUMAN Securityperimeterx.com
Technology
65Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
HUMAN Security is an enterprise-focused cybersecurity company specializing in protecting digital interactions from sophisticated bot attacks, fraud, and account abuse. Their market position is that of an established provider offering advanced solutions such as bot mitigation, fraud prevention, and invalid traffic detection. The company targets enterprises and internet platforms seeking to secure their digital assets and transactions. The website demonstrates a mature digital infrastructure with a WordPress CMS, modern JavaScript frameworks, and integration of multiple analytics and marketing tools, indicating a high level of digital maturity and marketing sophistication. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of publicly disclosed incident response or vulnerability disclosure policies suggests room for improvement in transparency and security governance. Overall, the website is professional, well-structured, and compliant with privacy regulations, but the lack of WHOIS data limits full trust assessment. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance trust and compliance.
Technology · United Kingdom
56Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
buzzword.org.uk is a small, niche website focused on semantic web technologies such as RDF, RDFa, and related specifications. It provides technical documentation, validators, and schemas primarily targeting developers and technologists interested in these standards. The site has a long history dating back to 2006, with content spanning from 2008 to 2017, indicating a stable presence in its niche. The business model appears informational and community-driven rather than commercial. Technically, the website uses basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced SEO features. No analytics or tracking technologies are present, indicating a minimalistic technical infrastructure. Hosting is likely through the registrar's services or a related UK hosting provider. From a security perspective, no HTTPS status or security headers were identified in the provided data, which is a significant concern. The absence of privacy, cookie, or terms of service policies indicates low privacy compliance. No forms or data collection mechanisms were found, reducing attack surface but also limiting user engagement. The domain WHOIS data is consistent and legitimate, with a long registration history and no privacy protection, supporting trustworthiness. Overall, the website is safe and suitable for general audiences but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and usability.
Technology
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Comprehensive Perl Archive Network (CPAN) is a well-established and authoritative platform hosting a vast collection of Perl modules and distributions. It serves a global community of Perl developers by providing access to over 222,000 modules authored by more than 14,000 contributors. The website is designed primarily as an archive and distribution point, with a focus on technical content and community resources. It is hosted by reputable providers and has been operational since 1995, indicating a strong market position within the Perl programming ecosystem. From a technical perspective, the website employs standard web technologies including HTML5, CSS, JavaScript, and integrates Google Analytics for user tracking. The site is moderately optimized for performance and mobile use, with basic accessibility features. Security practices are adequate but could be improved by implementing security headers, publishing a security policy, and adding a cookie consent mechanism. The absence of WHOIS data limits transparency but does not detract significantly from the site's legitimacy given its long history and hosting arrangements. Security posture is moderate; HTTPS is implied but security headers are not evident. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with no explicit cookie or privacy policies beyond a disclaimer. The site does not provide incident response or vulnerability disclosure information, which could be enhanced to improve trust and compliance. Overall, the website is safe, professional, and trustworthy, with no adult or questionable content. Strategically, CPAN should focus on enhancing privacy compliance, publishing security and incident response policies, and improving technical security measures to maintain its leadership and trust within the developer community.
Python Software Foundationpython.org
Technology
73Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Python.org is the official website of the Python Software Foundation (PSF), a non-profit organization dedicated to promoting and advancing the Python programming language. The site serves a global audience of developers, educators, and businesses by providing downloads, documentation, community resources, and news. It holds a strong market position as the authoritative source for Python-related information and community engagement. Technically, the website employs a mature technology stack including jQuery, Modernizr, and Google Analytics, delivering a fast, accessible, and mobile-optimized experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, though it lacks some advanced security headers and explicit incident response information. The WHOIS data is incomplete and malformed, which slightly impacts trust but is mitigated by the site's well-known brand and content quality. Overall, the site is highly professional, trustworthy, and serves its community effectively.
Other
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at b3mxnuvcer.com is essentially a placeholder or minimal content page displaying only a simple JSON message indicating operational status. There is no identifiable business information, branding, or services described. The technical infrastructure cannot be assessed beyond the minimal HTML content provided, which lacks metadata, scripts, or any modern web technologies. Security posture is indeterminate due to lack of HTTPS and security headers information, but the absence of content and contact details suggests a low maturity level. Overall, the site does not present any meaningful business or security information, resulting in a low trust and legitimacy profile.
ROKT, Inc.aftersell.com
E-commerce
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Aftersell is a specialized ecommerce SaaS platform focused on post-purchase upselling for Shopify merchants, operated under the parent company ROKT, Inc. The website presents a professional and well-branded digital presence with extensive customer testimonials and case studies, positioning itself as a market leader trusted by over 40,000 brands. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and HubSpot forms, ensuring good mobile responsiveness and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises transparency concerns, though the business legitimacy is supported by branding and partner associations. Overall, the site demonstrates a mature digital infrastructure suitable for its business model but would benefit from enhanced security disclosures and domain registration transparency.
The Noun Project, Inc.thenounproject.com
Technology
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The Noun Project, Inc. operates a leading online platform offering over 8 million free and premium SVG and PNG icons and stock photos. Established in 2009, it serves a broad audience including designers, businesses, educators, and app developers. The company maintains a strong market position as a trusted resource for diverse and mission-driven visual assets, supported by partnerships with major brands like Adobe and Canva. Technically, the website leverages modern frameworks such as React and Next.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and domain protections, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is partially addressed with a cookie policy and consent mechanism, but lacks a visible privacy policy and terms of service in the provided content. Overall, the site demonstrates high professionalism, trustworthiness, and user experience, with moderate user tracking via Google Analytics and Tag Manager.
Midboundmidbound.ai
Technology · United States
70Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Midbound is a technology company specializing in person-based marketing solutions that enable sales and marketing teams to identify and engage website visitors with high intent. The platform leverages AI to analyze visitor data, including LinkedIn profiles and company firmographics, to provide actionable insights and optimize ad spend. Positioned as a niche player in the B2B marketing technology space, Midbound offers tiered SaaS subscription plans with a focus on small to medium-sized businesses. The website demonstrates a modern technical infrastructure built on SvelteKit, with integrations such as Cal.com for demo scheduling and Cloudflare for DNS management. The site is well-designed, mobile-optimized, and provides clear navigation and calls to action.
Attributionattributionapp.com
Technology
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Attribution is a technology company specializing in marketing attribution software designed to provide granular insights into customer acquisition costs (CAC), CAC payback, and lifetime value to CAC ratios (LTV:CAC). The platform targets high-growth B2B, SaaS, and e-commerce companies, offering multi-touch attribution and integrations with major marketing and CRM platforms. The website demonstrates a mature digital presence with professional design, extensive use of modern web technologies, and comprehensive customer testimonials, positioning Attribution as a competitive player in the marketing analytics space. Technically, the site is built on WordPress with advanced SEO and user experience optimizations, including interactive animations and responsive design. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and published policies are recommended. The WHOIS data is incomplete, which raises some concerns about domain registration transparency but does not detract significantly from the overall business credibility. Strategic recommendations include enhancing privacy compliance documentation, publishing security policies, and verifying domain registration details to improve trust and compliance.
Deutsche Automobil Treuhand GmbHget-dat-job.de
Transportation · Germany
62Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Deutsche Automobil Treuhand GmbH (DAT) operates as a key data and software service provider within the German automotive industry, offering innovative digital solutions and consulting services. The company positions itself as a talent-centric organization, emphasizing employee development and a strong corporate culture. The website serves as a recruitment platform highlighting job opportunities, company values, and employee benefits. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and integrates a consent management platform (Usercentrics) and self-hosted analytics (Matomo), reflecting a mature digital infrastructure. Security measures include HTTPS, nonce-based Content Security Policy, CAPTCHA protection on forms, and privacy proxy for embedded third-party content, indicating a robust security posture. Overall, the site is professional, GDPR-compliant, and trustworthy, with no critical vulnerabilities detected.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website aero-dynamic.ch currently displays only a generic error message indicating an unexpected error, with no accessible content or metadata. This lack of content prevents meaningful analysis of the business, services, or compliance posture. The absence of contact information, privacy policies, or security headers suggests the site is either under maintenance or inactive. The WHOIS data is privacy protected, limiting transparency about the registrant and domain history. Technically, the site lacks visible modern infrastructure or security best practices, and no analytics or marketing tools are detected. Overall, the digital maturity and security posture are very low, with critical gaps in accessibility, compliance, and trustworthiness.
mediasoupmediasoup.org
Technology
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
mediasoup.org is a technology-focused website offering an advanced WebRTC SFU platform designed for multi-party video conferencing and real-time streaming applications. The platform supports Node.js and Rust environments and provides client libraries for JavaScript and C++. The website targets developers and companies building real-time communication solutions, positioning itself as a niche but technically advanced player in the WebRTC ecosystem. The site content is professional, well-structured, and consistent with its technical audience, though it lacks some standard business and compliance documentation such as privacy and cookie policies. Technically, the site leverages modern programming languages and package managers (npm, cargo) and is hosted by OVH sas, a reputable hosting provider. The website is performant, mobile-optimized, and SEO-friendly with proper metadata and versioning information. However, it lacks explicit security headers and DNSSEC, which could enhance its security posture. No analytics or tracking scripts were detected, indicating a privacy-conscious approach or minimal tracking. From a security perspective, the domain registration is stable and consistent with the business profile, with domain status protections in place. The absence of privacy policies, cookie consent mechanisms, and security incident contact information represents gaps in compliance and security transparency. No vulnerabilities or malicious content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, mediasoup.org presents a solid technical and business foundation with room for improvement in privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and providing clear security incident contacts to enhance trust and compliance.
SP+Bspmaisb.org
Government · Brazil
62Medium
NIS2 22 · GDPR 35
NIS2 22 · GDPR 35
SP+B is a collaborative initiative focused on accelerating sustainable development in São Paulo by co-creating desirable futures for the city. It redefines the concept of smart cities through systemic and collaborative approaches involving multiple stakeholders, including organizations, companies, and individuals. The platform hosts over 200 meetings, engages more than 100 organizations and 250 people, and publishes annual activity reports, indicating an active and engaged community. The website reflects a small-sized non-profit entity founded in 2022, with a clear focus on sustainability and urban innovation.
- Deutsche Zentrale für Tourismus e.V.
germany.travel
Hospitality · Germany
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.germany.travel is the official tourism portal managed by Deutsche Zentrale für Tourismus e.V., focusing on promoting Germany as a travel destination with rich cultural, historical, and natural attractions. The site targets tourists and travelers seeking comprehensive travel information and inspiration for holidays in Germany. It offers multilingual content and detailed articles on various themes such as cities, culture, nature, and royal palaces. Technically, the site employs modern web technologies including Google Tag Manager, jQuery, and Owl Carousel, ensuring a responsive and accessible user experience optimized for mobile devices. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though explicit security headers and incident response information are not evident. The WHOIS data is unavailable or protected, which is common for official tourism domains and does not raise immediate concerns. Overall, the site demonstrates a strong professional presence with good privacy compliance and trustworthy content.
Knight Frank Interior Servicesknightfrankinteriors.com
Real Estate · United Kingdom
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Knight Frank Interior Services is a premium interior design and furnishing service affiliated with Knight Frank, the world's largest independent property consultancy. The company offers high-end services including Signature Interior Architecture & Design, Luxury Interiors & Show Homes, Home Staging, and Design-Led Turnkey Furnishings, targeting luxury property developers and homeowners globally. The website is professionally designed on the Squarespace platform, featuring rich content, strong branding, and active social media channels. Technical infrastructure includes modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and HSTS enabled, cookie consent mechanisms, and no visible vulnerabilities. However, the absence of WHOIS registration data and lack of explicit terms of service or security policy pages present some concerns. Overall, the site demonstrates a solid digital presence with room for improvement in transparency and security documentation.
- KKnight Frank Finance LLP
knightfrankfinance.co.uk
Finance · United Kingdom
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Knight Frank Finance LLP is a UK-based financial advisory and brokerage firm specializing in mortgages, insurance, specialist lending, and wealth management services. The company operates with a strong market position supported by FCA regulation and a broad network of over 180 financial providers. Their website reflects a professional and comprehensive service offering targeting both UK and international clients seeking tailored mortgage and insurance solutions. Technically, the website is built on a custom ASP.NET CMS platform, utilizing modern JavaScript libraries and includes features such as Google reCAPTCHA for form security. The site is mobile optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and input validation on forms, though it lacks some recommended security headers and a cookie consent mechanism. The WHOIS data for the domain is unavailable due to a Nominet UK naming rules error, which is unusual but the website content and FCA registration lend credibility to the business. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional financial services website.
The WP-Buddyrich-snippets.io
Technology · Germany
54Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The website rich-snippets.io represents The WP-Buddy company, offering the SNIP Structured Data and Schema WordPress Plugin. The business is positioned as a leading provider of flexible structured data solutions for WordPress users, targeting developers, SEO professionals, and site owners. The company operates primarily through plugin sales on marketplaces like CodeCanyon and direct sales, supported by training courses and active development. The website content is professional, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with WooCommerce and Yoast SEO integration, leveraging modern JavaScript libraries and analytics tools like Matomo. Security posture is solid with HTTPS and domain protections, though some security headers and explicit policies are missing. Overall, the site is trustworthy, with consistent WHOIS data and positive user feedback. Recommendations include enhancing privacy compliance with cookie consent and publishing security policies to further strengthen trust and compliance.

Technology · United States
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Dotup ICANN Accreditation Consultancy is a small US-based consultancy specializing in assisting hosting companies, domain registrars, ISPs, and domain resellers to achieve ICANN accreditation. The company positions itself as a niche expert in ICANN accreditation services, offering end-to-end consultancy to help clients become accredited registrars. The website is professionally designed using the Wix platform, featuring structured data that clearly identifies the business and its contact information. The technical infrastructure leverages Wix's hosting and builder services, with common marketing and analytics tools such as Facebook Pixel and Google Tag Manager integrated. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks important security headers and visible privacy or cookie policies. Overall, the website is functional, professional, and trustworthy but could improve privacy compliance and security best practices. The domain WHOIS data aligns well with the business claims, supporting legitimacy.
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website lucky247.uk is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business operations, services, or user engagement features. The domain is registered with Safenames Ltd since 2019 and is valid until 2026, indicating a legitimate registration but no active website presence. The lack of accessible content and contact information severely limits the ability to assess the company's market position or technical infrastructure. Security posture cannot be evaluated due to absence of data, but the blocked status suggests server-side restrictions or firewall rules are in place. Overall, the site presents a high risk of being non-operational or under maintenance, and no trust or compliance indicators are available.
Other
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website bingodiamond.com is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information. The lack of accessible content and metadata indicates either a server-side restriction or security mechanism blocking access. The WHOIS data is privacy protected, which limits transparency about the registrant and domain legitimacy. Due to these factors, the website's business operations, market position, and services cannot be assessed. Technically, the site shows no signs of modern infrastructure or security best practices. The security posture is weak due to lack of accessible content and no visible security headers or SSL information. Overall, the site presents a high risk due to lack of transparency and accessibility.
Other
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website glossybingo.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered with SafeNames Ltd. in Ireland since 2012, indicating a mature domain age consistent with an established business. However, the lack of accessible content and absence of metadata, policies, or contact information severely limits the ability to assess the company's market position, services, or technical maturity. The hosting DNS is managed via Amazon AWS DNS services, but no further technical stack details are available due to the blocked content. Security posture cannot be evaluated beyond the domain registration data, and no security headers or SSL configuration details were provided. Overall, the site appears to be blocked or restricted, which significantly impacts trust and usability.
- EERROR: The request could not be satisfied
singbingo.com
Other
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.singbingo.com is currently inaccessible, returning a CloudFront-generated 403 error page indicating that the request is blocked due to possible traffic overload or configuration errors. No website content, metadata, or business information is available for analysis. The domain WHOIS data is missing, suggesting the domain may be unregistered, expired, or otherwise not properly configured. This lack of accessible content and domain registration data severely limits the ability to assess the business, technical infrastructure, or security posture. The site does not present any privacy, cookie, or terms of service policies, nor any contact information or trust indicators. Overall, the website appears non-operational or misconfigured at this time.
Other
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website casinoofdreams.uk is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This prevents any meaningful analysis of the site's content, metadata, or business information. The domain is registered with Safenames Ltd since 2019 and is valid until 2026, indicating a legitimate registration. However, the lack of accessible content and absence of contact or policy information severely limits the ability to assess the business or security posture. Technically, no security headers or HTTPS status could be confirmed, and no scripts or technologies were detected. Overall, the site appears to be either restricted or improperly configured, resulting in a very low trust and security score.
- EERROR: The request could not be satisfied
costagames.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.costagames.com is currently inaccessible due to a CloudFront 403 error indicating the request is blocked or there is a configuration issue. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, expired, or recently deleted. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The site does not present any privacy, cookie, or security policies, and no technical or security headers are detectable. This severely limits the ability to assess the business, technical infrastructure, or security posture. The overall risk is high due to the lack of transparency and accessibility, and the legitimacy of the domain is questionable.
- EERROR: The request could not be satisfied
redbusbingo.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.redbusbingo.com is currently inaccessible, returning a 403 error page generated by Amazon CloudFront. This indicates that the site is either experiencing configuration issues or is blocked due to traffic or security policies. No content, metadata, or business information is available for analysis. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or privacy-protected with no public data. Due to these factors, a comprehensive assessment of the business, technical infrastructure, and security posture is not possible at this time.
- EERROR: The request could not be satisfied
costabingo.com
Other
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain www.costabingo.com currently presents a CloudFront 403 error page indicating that access to the website is blocked or the server is misconfigured. No website content, metadata, or business information is accessible, preventing any meaningful analysis of the company's operations or services. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or otherwise inactive. This lack of registration data combined with the access block raises significant concerns about the legitimacy and operational status of the domain. From a technical perspective, the site is hosted behind Amazon CloudFront, which is currently blocking requests, possibly due to traffic or configuration issues. No information about the technology stack, CMS, or security headers is available. The absence of privacy policies, contact information, or security disclosures further indicates the site is not currently functional or compliant. Security posture is poor due to the inaccessibility and lack of data. Without access to the site, no security best practices can be verified, and no vulnerabilities can be assessed. The domain's legitimacy is questionable given the missing WHOIS data and the blocked status. Overall, the risk level is high, and the domain should be treated with caution until proper registration and website functionality are confirmed.
Other
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website dottybingo.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or technical infrastructure. The domain is registered since 2007 with SafeNames Ltd., indicating a long-standing registration, but the lack of accessible content raises concerns about the current operational status or configuration of the website. Hosting appears to be on Amazon AWS infrastructure based on DNS server information. Security posture cannot be properly assessed due to lack of content and security headers. No privacy, cookie, or terms of service policies are detectable, and no contact information or social media links are available. Overall, the site is effectively blocked from public access, limiting trust and business credibility assessments.
- EERROR: The request could not be satisfied
winkbingo.com
Other
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.winkbingo.com is currently inaccessible due to a CloudFront 403 error indicating the request is blocked, likely due to traffic or configuration issues. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, newly registered, or privacy protected. Due to the lack of accessible content, no metadata, business information, or security policies could be analyzed. The site lacks visible contact details, privacy policies, or terms of service, which are critical for trust and compliance. The technical infrastructure cannot be assessed beyond the presence of CloudFront as a CDN and WAF provider. Overall, the website's security posture and business credibility cannot be reliably evaluated given the blocked status and missing WHOIS data.
- iX Online
ix.co.za
Transportation · South Africa
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
iX Online is a South African digital marketing and web development company specializing in the automotive dealership sector. Established in 2001, it offers a comprehensive suite of services including vehicle stock management, lead generation, SEO, social media marketing, and website design tailored for dealerships. The company holds recognized certifications such as Google Partner and Meta Business Partner, reinforcing its market credibility. Their national footprint and integration with leading dealer accounting systems position them as a key player in the South African automotive digital marketing space. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various marketing and analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and features interactive elements such as forms with CAPTCHA and consent mechanisms, indicating a mature digital infrastructure. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS, uses spam protection on forms, and provides clear privacy and cookie policies compliant with POPIA and GDPR principles. However, explicit security headers are not detected, and incident response information is absent, suggesting areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is justified given the business type. Overall, iX Online demonstrates a strong business and technical foundation with good security and privacy practices. Strategic enhancements in security headers and incident response transparency would further strengthen their posture.