Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
39,901–39,950 of 99,067
App Developer Groupappdevelopergroup.co
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
App Developer Group is a small technology company specializing in custom software development for ecommerce businesses, primarily focusing on Shopify and related platforms. Their offerings include custom theme development, app creation, and ecommerce website solutions designed to help small businesses thrive. The company showcases multiple ecommerce apps with demos and external links, indicating an active product portfolio and engagement with the ecommerce ecosystem. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries, with integrations for marketing and analytics tools such as Facebook Pixel and Mailchimp. The site is mobile-optimized and demonstrates good design and navigation, although accessibility features are basic. Performance is moderate, and SEO optimization is good based on meta tags and structured content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. No incident response or vulnerability disclosure information is provided, representing an area for improvement. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website is professional and functional with moderate security posture and compliance gaps. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance trust and reduce risk.
RELEVANT DIGITAL OYrelevant-digital.com
Technology · Finland
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Relevant Digital Oy operates a sophisticated SaaS platform called Relevant Yield, designed for digital ad sellers and publishers worldwide. The platform integrates advanced modules for ad revenue reporting, real-time analytics, and header bidding management, enhanced by an AI assistant to optimize ad sales. The company positions itself as a leader in the digital advertising technology sector, serving a global clientele with modular and scalable solutions. Their website reflects a professional and consistent brand image, supported by client testimonials and industry memberships, indicating strong market credibility. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including Google Analytics 4, Google Tag Manager, and FontAwesome. The site is mobile-optimized and demonstrates good SEO practices, although some technical debt is noted with the use of an outdated jQuery version. Security practices include HTTPS enforcement and consent management for analytics, but lack explicit security headers and published security policies. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy or privacy protection usage. The lack of explicit privacy and cookie policies, as well as incident response information, suggests areas for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation. Strategically, the company should prioritize publishing comprehensive privacy and security policies, update legacy libraries, and clarify domain registration details to strengthen trust and compliance. These steps will enhance their security posture and business credibility in a competitive ad tech market.
Technology · Russia
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
WebProverka.com is a Russian-language social network and website review platform operating since 2009. It provides a large catalog of websites with user-generated reviews, ratings, and a community focused on combating online fraud. The platform incentivizes user engagement through monetary bonuses for site visits and offers paid services for website owners to increase visibility. Technically, the site uses legacy technologies such as jQuery 1.5.1 and integrates Yandex analytics and advertising services. While the domain registration is stable and consistent with the business claims, the site lacks modern security headers and privacy compliance mechanisms, which are areas for improvement. Overall, the platform serves a niche audience in the Russian internet space with moderate technical maturity and a solid business presence.
- Cryptomus
cryptomus.com
Finance
72Medium
NIS2 40 · GDPR 70
NIS2 40 · GDPR 70
Cryptomus is a cryptocurrency exchange and payment platform offering a variety of services including a payment gateway, wallet, staking for rewards, P2P exchange, and a cryptocurrency converter supporting multiple currencies. The platform targets cryptocurrency traders and users seeking low fees and a comprehensive crypto service ecosystem. Their market position is supported by trust signals such as Certik certification and positive Trustpilot reviews, indicating a reputable presence in the crypto finance sector. Technically, the website is built on modern frameworks such as Next.js and React, with mobile optimization and integration of Google Tag Manager and reCAPTCHA for analytics and security. However, some areas such as explicit privacy and cookie policies are missing, which impacts privacy compliance scores. Security posture is generally good with HTTPS and some best practices but lacks explicit security headers and incident response disclosures. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.
Finance · United Arab Emirates
58Medium
NIS2 20 · GDPR 68
NIS2 20 · GDPR 68
Crypto-control.org is a Russian-language online platform specializing in monitoring currency exchange rates, particularly for cryptocurrencies and fiat currencies. The service provides users with up-to-date information on exchange offers from verified and reliable exchangers, enabling quick and safe currency conversions. The website targets users interested in finding the best exchange rates and operates primarily in the finance and technology sectors. The business is relatively new, founded in 2024, and is hosted with reputable DNS services such as Cloudflare, with domain registration managed by 1API GmbH. The company is based in Dubai, UAE, as indicated by the contact address.
Обменный пункт электронных валютcoin-bank.co
Finance · Russia
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Coin-bank.co is a Russian-language online electronic currency exchange platform operating since 2016. It offers automated, anonymous, and secure exchange services for a wide range of cryptocurrencies and fiat currencies, targeting primarily Russian-speaking users interested in crypto and electronic payments. The platform supports multiple payment systems and banking options, providing discounts, a partner program, and investment opportunities in the exchange service. Technically, the site is built on WordPress with jQuery and uses HTTPS with CAPTCHA protections on forms, indicating a moderate level of digital maturity. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for compliance and security. The security posture is adequate but could be improved with better header implementation and incident response transparency. Overall, the site is trustworthy with good business credibility, supported by user reviews and partnerships with reputable review and monitoring platforms.
- P
Finance · Russia
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Perfect-change.com is an automated online currency exchange service specializing in cryptocurrencies such as Bitcoin, Litecoin, Ethereum, and stablecoins like Tether (TRC20, ERC20, BEP20). The platform also supports fiat currency exchanges via bank cards and transfers, targeting primarily Russian-speaking users. Founded in 2017, the service emphasizes fast, anonymous, and secure transactions with a flexible discount and partner program to enhance user benefits. The website is built on WordPress, leveraging common web technologies like jQuery and Bootstrap for responsive design and user experience. Hosting is provided by Beget, a known hosting provider, with domain registration through NameCheap, Inc. The domain is well-established with a long expiry date and clientTransferProhibited status, indicating stable ownership. Security measures include SSL encryption and captcha protections on forms, though some advanced security headers and DNSSEC are not implemented. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to web forms without direct emails or phone numbers. The site integrates partner and review platforms to build trust and credibility. Overall, the platform presents a professional and functional service with moderate technical and security maturity.
BigBanKbigbank.top
Finance · United States
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BigBanK operates as an electronic currency exchange service primarily targeting Russian-speaking users with English language support. The website offers automated currency exchange services, user account management including registration and login, and wallet management features. The business appears to be a small-sized entity founded in 2022, operating in the finance sector with a focus on electronic and cryptocurrency exchanges. The market position is niche, serving users needing currency exchange services with a digital-first approach. Technically, the website is built on WordPress with a reliance on jQuery libraries and integrates third-party services such as Google Fonts, Yandex Metrika, Google Analytics, and JivoSite for live chat support. The site is mobile-optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website is functional and moderately trustworthy but would benefit from enhanced security and privacy practices.
Finance · Iceland
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website i-obmen.bz operates as an automated cryptocurrency and electronic currency exchange platform primarily targeting Russian-speaking users. It offers a wide range of currency exchange options including popular cryptocurrencies such as Bitcoin, Ethereum, and Tether, as well as various Russian and Kazakhstani banking options. The business appears to be medium-sized, founded in 2017, and maintains partnerships with several exchange monitoring and financial service websites. The domain is registered with privacy protection, which is common in the financial sector to protect registrant data. The website content is comprehensive and professionally presented with good navigation and user experience.
- Domains By Proxy, LLC
cryptohome.me
Finance · United States
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CryptoHome.Me is an established online cryptocurrency exchange platform primarily targeting Russian-speaking users. It offers a wide range of cryptocurrency and fiat exchange services, including popular cryptocurrencies like Bitcoin, Ethereum, and Tether, and supports multiple Russian banking options such as Sberbank, Tinkoff, and Alfa-Bank. The platform emphasizes speed, confidentiality, and customer support, with loyalty and affiliate programs to enhance user engagement. Technically, the website is built on WordPress with jQuery libraries and is hosted with DNS services via Cloudflare, ensuring moderate performance and basic mobile optimization. Security-wise, the site enforces HTTPS and uses SSL for data transmission but lacks comprehensive security headers and cookie consent mechanisms, which are areas for improvement. The WHOIS data shows privacy protection typical for crypto services, with a domain age consistent with a mature business. Overall, the site is functional, trustworthy, and positioned well in its niche but could enhance compliance and security posture.
Technology · Russia
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
UpToLike is a Russian-based technology service specializing in social media engagement tools, primarily offering social media buttons and widgets that enable website owners to integrate social sharing features easily. The service has been operational since 2012 and is used by a significant number of websites, indicating a strong market presence in the Russian-speaking web ecosystem. The website is built using AngularJS and integrates third-party analytics and login services, reflecting a moderate level of technical maturity. However, the absence of privacy and cookie policies and limited security headers indicate areas for compliance and security improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.
- Archiui
archiui.com
Technology · Italy
75Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Archiui is a specialized software platform focused on the digitalization, cataloging, management, and valorization of historical and cultural archives for institutions, companies, and public entities primarily in Italy. The platform offers modular, customizable solutions with integrated services including digital preservation, online publication, and advanced search capabilities. It is supported by Promemoria Group, a recognized partner in cultural heritage digital services. The website demonstrates a mature digital presence with modern technologies such as Nuxt.js and Vue.js, and strong SEO and accessibility features. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the professional content and association with Promemoria mitigate immediate trust issues. Overall, Archiui presents as a credible and professional service provider in the archival technology sector.
Non-profit
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Red Alas is a non-profit collaborative network initiated in 2015 by LIBERA Associazioni, focusing on social justice, human rights, and anti-corruption efforts across Latin America. The platform serves as an information hub and coordination space for over 70 organizations across 13 countries, providing news, initiatives, and advocacy resources. The website is professionally designed with good content quality and clear navigation, targeting civil society organizations and activists in Latin America. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, Font Awesome, and Owl Carousel, ensuring a responsive and user-friendly experience. Hosting and domain registration are consistent with the business profile, though no explicit CMS or hosting provider details are evident. Performance is moderate with room for optimization. From a security perspective, the site uses domain transfer and update protection but lacks DNSSEC and visible security headers. HTTPS status is unknown from the provided data but presumed enabled. Cookie consent is implemented with GDPR compliance in mind, and Google Analytics is disabled by default pending user consent, reflecting good privacy practices. However, no formal security policies or incident response contacts are published. Overall, Red Alas presents a trustworthy and professional online presence for a regional non-profit network. Strategic improvements in security headers, DNSSEC, and publishing clear security and incident response policies would enhance trust and compliance.
PLACE: Paix et Libération en Afriqueplaceafrica.org
Non-profit
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
PLACE: Paix et Libération en Afrique is a recently launched African network focused on peace and liberation through change and engagement, promoted by Libera. Associazioni, nomi e numeri contro le mafie. The website serves as a digital presence for this non-profit collaboration platform, launched in 2023. The site currently displays minimal content indicating ongoing work, with no direct contact or policy pages accessible. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS infrastructure with good SEO foundations. Security posture is moderate with HTTPS enabled but lacking security headers and privacy policies. The absence of WHOIS data and registrant information reduces trustworthiness, though the site content and structured data suggest legitimacy. Overall, the site requires further development to improve content richness, compliance, and trust signals.
- CCHANCE - Civil Hub Against orgaNised Crime in Europe
chance.international
Non-profit
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
CHANCE - Civil Hub Against orgaNised Crime in Europe is a European civil society network focused on combating organised crime, mafias, and corruption through cooperation among associations, activists, and institutions. Founded in 2019 and promoted by the Libera association, it operates across Europe to promote social justice, education, and awareness. The website reflects a professional non-profit organization with clear advocacy goals and a strong partnership ecosystem. Technically, the site is built on WordPress with Elementor, using modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie management. Overall, the site is trustworthy and credible, though WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization.
Rete dei Numeri Parinumeripari.org
Non-profit · Italy
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Rete dei Numeri Pari is a small Italian non-profit organization focused on social activism, peace, and anti-war initiatives. Their website serves as a platform for disseminating information, promoting social campaigns, and publishing documents and analyses related to their agenda. The site targets Italian-speaking activists and the general public interested in social justice and peace. Technically, the website is built on WordPress using popular plugins such as Elementor and Smart Slider 3, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is supported by accessible privacy and cookie policies, though cookie consent mechanisms are not implemented. Overall, the website is professional and trustworthy with moderate business credibility and good content quality.
Libera Terraliberaterra.it
Non-profit · Italy
55Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Libera Terra is a well-established Italian non-profit organization dedicated to managing lands confiscated from mafia groups and promoting social justice through sustainable agriculture. The website reflects a mature digital presence built on WordPress with Elementor, featuring good design quality and clear navigation. Privacy compliance is robust, leveraging Iubenda and Cookiebot for GDPR and cookie consent management. Security posture is solid with HTTPS and DNSSEC enabled, though additional security headers and explicit incident response policies could enhance protection. Overall, the site is trustworthy, professional, and aligned with the organization's mission.
Libera. Associazioni, nomi e numeri contro le mafie ETSliberainformazione.org
Non-profit · Italy
61Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Liberainformazione.org is a non-profit electronic newspaper dedicated to providing information and advocacy focused on legality and anti-mafia efforts in Italy. It operates under the auspices of Libera, a well-known Italian association against organized crime. The website offers news articles, dossiers, and special reports targeting an Italian audience interested in social justice, legal matters, and anti-mafia activism. The organization is medium-sized and founded around 2020, with a clear editorial leadership and a mission to inform and engage the public on these critical issues. Technically, the website is built on WordPress with a suite of plugins for SEO, search functionality, and social media integration. It uses HTTPS and common web technologies such as jQuery and Facebook SDK. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices implemented. Accessibility features are basic but present. From a security perspective, the site uses HTTPS but lacks visible advanced security headers, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. However, the WHOIS data for the domain is missing or malformed, which reduces trust from a domain registration standpoint but does not necessarily indicate malicious intent. Overall, Liberainformazione.org presents a trustworthy, content-rich platform serving a niche non-profit sector. Strategic recommendations include enhancing security headers, improving mobile responsiveness, and publishing explicit security and incident response policies to strengthen trust and compliance.
Sevendata S.p.A.shinystat.com
Technology · Italy
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
ShinyStat, operated by Sevendata S.p.A., is a medium-sized Italian technology company specializing in web analytics and on-site marketing automation solutions. Their offerings include real-time analytics platforms, marketing automation software tailored for B2B and e-commerce, data management platforms, and consulting services. The company targets businesses seeking to optimize online performance through data-driven insights and personalized marketing. The website is professionally designed, mobile-optimized, and provides comprehensive product information and client references, indicating a mature digital presence. Technically, the website is built on the SilverStripe CMS framework, utilizing modern frontend technologies such as Bootstrap 4.6 and FontAwesome icons, with asynchronous loading of tracking scripts to optimize performance. The site is served over HTTPS with good SSL configuration, though security headers are not explicitly detected in the HTML source. The site demonstrates good SEO and accessibility practices, though some improvements in security headers and explicit cookie consent mechanisms could enhance compliance. From a security perspective, the site shows no signs of WAF blocking or content restrictions, and no vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. However, the WHOIS lookup for the domain returned no registration data, which is unusual and reduces trustworthiness from a domain registration perspective. This discrepancy should be investigated further to confirm domain legitimacy. Overall, ShinyStat presents a professional and trustworthy online presence with strong business credibility and technical implementation. The main risk lies in the lack of WHOIS data, which could be due to privacy protection or a domain registration issue. Strategic recommendations include verifying domain registration status, enhancing security headers, and implementing explicit cookie consent mechanisms to further strengthen privacy compliance and security posture.
- CCAPTCHA check
actionnetwork.org
Other
69Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website actionnetwork.org is currently inaccessible due to a Cloudflare CAPTCHA challenge page, which blocks access to the actual site content. This prevents a full analysis of the business, services, and compliance posture. The domain is well-established, created in 1998, and registered through NameCheap with Cloudflare nameservers, indicating a legitimate and mature web presence. The technical infrastructure includes Cloudflare for security and Google reCAPTCHA for bot mitigation. However, no business or contact information, privacy policies, or terms of service are visible on the blocked page. Security headers and other best practices cannot be assessed due to the lack of accessible content. Overall, the site appears to be protected by strong security mechanisms but lacks publicly accessible information for detailed evaluation.
Hospitality · Switzerland
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website tripadvisor.ch is currently inaccessible due to a CAPTCHA challenge page served by a third-party CAPTCHA delivery service, indicating the presence of a Web Application Firewall or bot mitigation system. This prevents extraction of meaningful content, metadata, or business information from the site. Consequently, no privacy policies, contact information, or security policies are detectable in the provided HTML content. The site appears to be related to the hospitality industry, likely a regional version of the Tripadvisor platform, but no direct business details or technical infrastructure information can be confirmed from the data provided. The security posture cannot be fully assessed due to lack of access to actual site content and headers. Overall, the site is protected by security mechanisms that block automated access, which limits the ability to perform a comprehensive analysis.
- AAudiA6
audia6.best
Finance · Russia
71Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
AudiA6 operates an online automated currency exchange platform primarily targeting Russian-speaking users worldwide. The website offers a broad range of electronic and fiat currency exchange services with significant reserves and user testimonials supporting its market presence. The platform integrates modern web technologies including Bootstrap, jQuery, and service workers to provide a responsive and functional user experience. Analytics are handled via Yandex Metrika, and live support is provided through TalkMe chat integration. Security posture is moderate with HTTPS enforced but lacking advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent implemented but no detailed GDPR statements. WHOIS data is consistent and transparent, supporting legitimacy. Overall, the site is functional and trustworthy for its niche but could improve security and compliance documentation.
Turnitin, LLCithenticate.com
Education
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
iThenticate, operated by Turnitin, LLC, is a leading plagiarism detection software provider trusted by top publishers, researchers, and academic institutions worldwide. The platform offers advanced similarity checking, AI writing detection, and document collaboration tools, integrated with major scholarly content databases and Crossref. The website demonstrates a mature digital presence with professional design, clear navigation, and mobile optimization, leveraging HubSpot CMS and Google Analytics for marketing and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. The absence of WHOIS data introduces some uncertainty in domain legitimacy, but the strong brand association with Turnitin mitigates concerns. Overall, the site is well-positioned in the education and publishing sectors, providing essential SaaS services for academic integrity.
- VVigiles Fire Protection
vigilesfireprotection.com
Energy · United States
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Vigiles Fire Protection is a small professional fire protection service provider based in Southern California, specializing in fire risk analysis, fire retardant application, debris removal, and fire extinguisher services. The company emphasizes high-quality equipment and personalized client service. The website is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC, featuring a professional design with good mobile optimization and basic SEO. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy and cookie policies are absent, and WHOIS data shows inconsistencies with a future domain creation date, which raises trust concerns. Overall, the website presents a legitimate business with room for improvement in security and compliance.
- AAmerican Fire Cache
americanfirecache.com
Energy · United States
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
American Fire Cache operates as a specialized retailer and training provider focused on wildland firefighting gear and equipment. The company targets firefighting professionals and departments, offering both ecommerce sales and NWCG training services. The website presents a professional and consistent brand image with clear contact information and business hours, supporting its niche market position. Technically, the site uses modern JavaScript modules, a Vue.js framework, and Craft CMS with CSRF protections, indicating a moderate level of digital maturity and security awareness. However, the absence of explicit privacy, cookie, and terms of service policies, combined with missing WHOIS registration data, introduces concerns regarding compliance and domain legitimacy. Overall, the site is functional, secure in transport, and well-structured but would benefit from enhanced transparency and policy disclosures.
- SSafeware
safewareinc.com
Government
63Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Safeware is a specialized provider of safety and security solutions primarily targeting first responders, schools, and government agencies. The company positions itself as a leader in its niche, offering contract pricing to its clients. The website reflects a professional and focused business model, catering to institutional clients with a clear emphasis on safety and security products and services. The digital presence is built on a modern WordPress platform using Elementor and NitroPack, ensuring good performance and mobile optimization. Analytics are managed via Google Tag Manager, indicating a moderate level of user tracking. Security posture is adequate with HTTPS enabled, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data and privacy-related policies suggests areas for compliance enhancement. Overall, the website is professional and trustworthy but would benefit from improved transparency and security best practices.
- HHugeDomains.com
total-safety.com
E-commerce
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HugeDomains.com operates as a premium domain marketplace specializing in the sale of high-value domain names such as Total-Safety.com. Established since 2005, the company targets entrepreneurs, businesses, and domain investors seeking credible and memorable web addresses. The platform offers flexible purchasing options including outright buy and payment plans, supported by trust signals like a 30-day money back guarantee and customer testimonials. Technically, the website employs modern JavaScript libraries, Google Analytics, and Google reCAPTCHA Enterprise to ensure user engagement tracking and bot protection. The site is secured with HTTPS and SSL encryption, complemented by a cookie consent mechanism indicating GDPR compliance. However, explicit security headers are not evident, and no dedicated security or incident response policies are published. Overall, the website presents a professional and trustworthy front with moderate to good technical maturity and security posture.
Chesapeaketestchesapeakefirerescue.com
Other
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website 'Chesapeake Fire and Rescue' appears to be a small business focused on the sales and demonstration of Holmatro extrication equipment targeted at first responders and fire departments. The site is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and basic mobile optimization. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Security posture is weak, with no detected security headers or SSL configuration details, and no privacy or cookie policies are present, which may expose the business to compliance risks. Overall, the website provides minimal business information and lacks contact details, limiting trust and credibility from a user perspective.
- SSC-Networks GmbH
evalanche.cloud
Technology · Germany
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Evalanche.cloud is the login portal for the Evalanche marketing automation platform operated by SC-Networks GmbH, a German technology company founded in 2016. The platform targets marketing professionals and businesses seeking advanced marketing automation solutions. The website serves primarily as an access point for registered users rather than a public-facing marketing site. The technical infrastructure is based on standard web technologies with hosting inferred to be on Amazon AWS. The login form includes basic security features such as HTTPS and input protections but lacks visible advanced security headers and DNSSEC is not enabled. Privacy and cookie policies are not present on the login page, limiting compliance visibility. Overall, the domain registration and WHOIS data are consistent and legitimate, supporting the business credibility.
- EEvalanche Status
evalanche.services
Technology
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Evalanche.services operates as a status monitoring website primarily focused on providing real-time system status updates and announcements related to its email and web services. The site lists multiple instances and mail servers with performance indicators, targeting existing customers and users of Evalanche's platform. The content is technical and operational, with no commercial or marketing content visible. The website is in German and serves as a communication channel for maintenance and outage notifications. From a technical perspective, the website is simple, built with basic HTML and CSS, and lacks advanced frameworks or CMS. It shows moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No external scripts, analytics, or tracking technologies were detected, indicating minimal data collection and user tracking. Security posture is limited based on the available data. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are published, which impacts compliance and trust. The WHOIS data is minimal and privacy-protected, which is common but reduces transparency. No contact or incident response information is provided, limiting user support options. Overall, the website serves its purpose as a status page but lacks comprehensive security, privacy, and business credibility features. Strategic improvements in security headers, HTTPS enforcement, privacy policies, and contact information would enhance trust and compliance.
John Wolfe Comptonjohnwolfecompton.com
Media · United States
72Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
John Wolfe Compton is a small, professional creative agency based in Encinitas, California, specializing in branding, marketing, advertising, and digital content creation for small to medium sized businesses primarily on the West Coast. The company blends big-agency expertise with indie pricing, offering a comprehensive suite of services including strategy, content creation, social media marketing, SEO/SEM, and advertising. Their market position is that of a niche, trusted agency with a strong portfolio and verified client reviews. Technically, the website is built on WordPress using the Salient theme and WPBakery page builder, integrating multiple analytics and marketing tools such as Google Analytics, Matomo, Mailchimp, and Klaviyo. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.
PREMIUM EXCHANGER DSO-FZCO-20984premiumexchanger.com
Technology · United Arab Emirates
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
PremiumExchanger.com is a specialized provider of professional e-currency exchanger scripts and automated exchange solutions, serving a niche market of cryptocurrency and e-currency exchange businesses. Established in 2015 and operating from Dubai, UAE, the company has built a reputation with over 250 exchangers on BestChange, offering multilanguage interfaces, security features, and a variety of modules to enhance exchange operations. The website reflects a mature business with a clear focus on software licensing and support services for financial technology providers. Technically, the website is built on WordPress CMS with a modern but somewhat traditional tech stack relying heavily on jQuery libraries and external analytics tools such as Google Analytics and Yandex Metrika. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Hosting and DNS services leverage Cloudflare, although DNSSEC is not enabled, representing a minor security gap. Security posture is reasonably strong from a software perspective, with multiple built-in protections against common web attacks and transaction security measures. However, the website lacks formal published security policies, incident response contacts, and security headers, which are important for trust and compliance. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the website is functional, professional, and trustworthy within its niche but would benefit from enhanced privacy compliance and formal security documentation to improve its risk profile and customer confidence.
alexcashalexcash.io
Finance · Indonesia
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
AlexCash is a newly established cryptocurrency exchange platform founded in 2024, offering fast and secure digital asset exchange services globally. The platform emphasizes 24/7 availability, personal customer support, and transparent exchange terms. Technically, the website is built on a modern Angular framework with Material Design components, hosted behind Cloudflare DNS services, and includes standard security features such as HTTPS and CSRF tokens. However, it lacks advanced security headers like Content Security Policy and DNSSEC, and does not provide a public privacy policy or incident response contacts, which are important for compliance and trust. The business credibility is moderate due to the recent domain registration by a private individual in Indonesia, while the website content and partner ecosystem are primarily Russian-language focused. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.
iEXExchanger FZCOgoldengatex.net
Finance
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Goldengatex is a newly launched financial service website focused on providing instant transfer capabilities, powered by iEXExchanger FZCO technology. The website is technically modern, utilizing Angular and Material Design components, hosted with Cloudflare DNS services. However, the site lacks critical compliance documents such as privacy and cookie policies, and does not provide contact or incident response information, which limits trust and transparency. Security posture is basic with no DNSSEC enabled and no visible security headers, indicating room for improvement in protecting user data and enhancing trust. Overall, the site is functional but minimalistic, suitable for a startup or new service but requiring enhancements for broader market acceptance and regulatory compliance.
FastWMfastwm.biz
Finance · Russia
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
FastWM.biz is an online financial exchange platform specializing in cryptocurrency and fiat currency conversions, operating primarily in Russia. The platform offers 24/7 fast and secure currency exchange services targeting individual and business clients who require reliable and quick transactions. The website integrates modern web technologies such as Alpine.js and Livewire, and uses Cloudflare DNS for hosting and security. It also incorporates Google Sign-In for authentication and Yandex Metrika for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks comprehensive security headers and published privacy or cookie policies, which are critical for compliance and trust. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
iEXExchanger FZCOlightobmen.cash
Finance · United Arab Emirates
71Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
LightObmen is an online electronic currency exchange platform primarily serving Russian-speaking customers. The business operates under the company iEXExchanger FZCO, based in the United Arab Emirates, and offers currency exchange services with a focus on electronic and cryptocurrency transactions. The website is professionally designed using modern web technologies including Angular and Material Design, and incorporates live chat support via Tawk.to. The platform is integrated with multiple partner and review aggregator sites, enhancing its market presence and trustworthiness. Security posture is solid with HTTPS, CSRF protection, and security headers implemented, though formal security policies and incident response contacts are not publicly available. Privacy compliance is basic, with cookie consent mechanisms present but limited GDPR indicators. Overall, the website is functional, secure, and credible for its business scope.
- IiEXExchanger FZCO
brabus.exchange
Finance
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BRABUS Exchange operates as a cryptocurrency exchange platform offering fast, reliable, and secure digital asset trading services. The website presents a professional interface built on modern web technologies such as Angular and Material Design, supporting a good user experience and mobile optimization. The platform emphasizes instant transactions and competitive rates, targeting cryptocurrency traders and users seeking efficient exchange services. Partnerships with multiple exchange rate comparison and review platforms enhance its market presence and trustworthiness. However, the absence of WHOIS data due to unsupported TLD limits domain transparency. Security measures like HTTPS, CSRF tokens, and reCAPTCHA are implemented, but explicit privacy and cookie consent mechanisms are lacking, indicating room for compliance improvement.
iEXExchanger FZCOcitybit.pro
Finance
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CityBit is a professional exchange platform developed by iEXExchanger FZCO, likely focused on cryptocurrency or digital asset trading. The website uses modern Angular framework with Material Design components, indicating a contemporary technical infrastructure. The platform appears targeted at financial professionals and traders seeking exchange services. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable, suggesting privacy protection which is common in financial services but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced compliance and security disclosures.
iEXExchanger FZCObitwisex.io
Finance · Iceland
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
BITWISEX is an online cryptocurrency exchange service primarily targeting Russian and Asian markets, offering fast and reliable exchange of BTC, ETH, and USDT. The platform is built on the iEXExchanger FZCO technology stack and provides a professional user experience with multi-language support and integration of popular payment systems. The technical infrastructure includes modern web technologies and analytics tools such as Yandex Metrika and JivoSite chat. Security posture is moderate with HTTPS enabled and some security headers present, but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with privacy-protected WHOIS registration and presence of privacy and terms pages, but missing cookie consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency.
iEXExchanger FZCOcrypto-zapravka.com
Finance · United Arab Emirates
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CryptoZapravka is an online cryptocurrency exchange service operated by iEXExchanger FZCO, founded in 2023 and targeting primarily Russian-speaking users. The platform offers fast and secure electronic currency exchange services including buying, selling, and exchanging cryptocurrencies such as Bitcoin and USDT. Positioned as a transparent and commission-free service, it leverages partnerships with reputable exchange aggregators to enhance market presence. The website is professionally designed with good SEO and mobile optimization, providing a user-friendly experience.
iEXExchanger FZCOmafincash.com
Finance
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MafinCash operates as a cryptocurrency and P2P electronic money exchange platform, targeting users interested in digital currency trading and electronic money transactions. The business appears to be a niche player in the finance and technology sectors, with a focus on providing exchange services. The website is built using modern frontend technologies such as Angular and Material Design, indicating a moderate level of digital maturity. However, the domain is very recently registered in 2024, which may suggest a new project or rebranding despite the business founding year of 2019. Security posture is limited with no detected security headers or published security policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the website is accessible and functional but lacks critical compliance and security documentation.
iEXExchanger FZCOjarvisexchange.com
Finance · United Arab Emirates
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
JARVIS Exchange, operated by iEXExchanger FZCO, is a cryptocurrency and fiat currency exchange platform primarily targeting Russian-speaking users. The platform offers services including crypto-to-fiat exchange, mass payments, and API integration, positioning itself as a reliable and established player with over 3 years of operation and positive user feedback. The website is built on a modern Angular framework, leveraging Cloudflare DNS and Google Fonts, and includes interactive features such as a live chat widget and Telegram support bot. Security measures include HTTPS enforcement, CSRF tokens, and domain transfer protection, although DNSSEC is not enabled and no explicit incident response contacts are publicly listed. Overall, the platform demonstrates a moderate to good security posture and technical maturity, with room for improvement in transparency and DNS security. The website content is professional, well-structured, and free from adult or questionable content, making it suitable for a general audience interested in cryptocurrency exchange services.
Finance · Switzerland
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.comparis.ch is currently inaccessible due to a CAPTCHA challenge page, which blocks access to the full content. As a result, detailed analysis of business operations, contact information, and security posture is not possible. The site appears to be protected by a bot mitigation service, indicating a focus on security but limiting external visibility. Without access to substantive content, no conclusions about the company's market position, services, or compliance can be drawn. The technical infrastructure includes third-party CAPTCHA scripts, but no other technologies or CMS details are visible. Security headers and SSL configuration cannot be assessed from the provided data. Overall, the site is currently in a blocked state, preventing comprehensive evaluation.
Other
50Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website crxzone.com is currently inaccessible, returning a 403 Forbidden error which blocks any content retrieval or analysis. The domain is registered with GoDaddy.com, LLC since 2014 and is active without privacy protection, indicating a legitimate registration. However, the lack of accessible content prevents any meaningful assessment of the business, its services, or its market position. The technical infrastructure cannot be fully evaluated due to the blocked content, but the absence of DNSSEC and unknown SSL status suggest potential security improvements. The security posture is weak given the lack of accessible content and no visible security policies or headers. Overall, the site appears either non-operational or intentionally restricted, resulting in a low trust and quality score.
- Danesco Trading Ltd.
multirates.org
Finance
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
MultiRates is an online platform specializing in monitoring currency exchangers to provide users with the best exchange rates from various exchange points. The service primarily targets Russian-speaking users interested in electronic money and cryptocurrency exchanges. The platform leverages modern web technologies such as Nuxt.js and integrates analytics tools like Yandex Metrika and Google Analytics to track user interactions and improve service quality. The website is professionally designed with good navigation and mobile optimization, offering a positive user experience. Security measures include HTTPS enforcement and domain registration protections, although there is room for improvement in DNS security and security headers. Privacy and cookie policies are absent, which may impact compliance and user trust. Overall, the website presents a moderate risk profile with a solid foundation but requires enhancements in privacy compliance and security best practices.
Finance
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website e-mon.cc operates as a Russian-language online monitoring platform specializing in electronic money and cryptocurrency exchange rates. It provides users with tools to find the most advantageous exchange rates, access to exchange points, cashback offers, and partner programs. The business model is that of an aggregator and monitoring service targeting users interested in financial exchanges, particularly in the crypto and e-money sectors. The domain was registered in 2021, consistent with a relatively new but focused service offering. Technically, the site employs modern frontend libraries such as jQuery UI, Bootstrap, and FontAwesome, and uses Cloudflare DNS services, indicating a moderate level of digital maturity and performance optimization. Analytics integration with Yandex.Metrika and Top100.ru suggests moderate user tracking practices.
RatesGururates.guru
Finance
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
RatesGuru operates as an online exchange analyzer platform specializing in providing users with interactive and real-time analysis of electronic currency exchangers and exchange rates. The platform offers a comprehensive set of services including exchanger reputation monitoring, cashback programs, affiliate partnerships, and trading tools. It targets users involved in cryptocurrency trading and electronic money exchange, positioning itself as a leading service in Europe with a large selection of exchangers and advanced features. The website content is professionally presented with good navigation and mobile optimization, supporting multiple languages.
Bestemoneys.combestemoneys.com
Finance
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Bestemoneys.com is a niche web portal established in 2009 that provides a comprehensive database and information about e-currencies, crypto coins, trading platforms, and related investment programs. The site targets users interested in e-currency services and crypto trading, offering affiliate programs and advertising opportunities as primary revenue streams. The website's market position is that of a specialized directory and informational resource within the finance and crypto sectors. Technically, the site uses legacy technologies such as jQuery 1.6.1 and lacks modern security features like HTTPS enforcement and DNSSEC. The design is basic with limited mobile optimization and accessibility features. Security posture is weak due to missing security headers, outdated libraries, and no visible SSL usage. Privacy compliance is poor with no privacy or cookie policies present. Overall, the site demonstrates moderate trustworthiness based on domain age and business focus but requires significant improvements in security and compliance to enhance credibility and user safety.
- Allchange
allchange.org
Finance
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Allchange.org is a Russian-language online platform specializing in monitoring currency exchangers, including cryptocurrency and fiat currency exchange services. The website provides users with up-to-date exchange rates, user reviews, and ratings for over 400 exchangers, positioning itself as a niche leader in the currency exchange monitoring market. Founded in 2019, the platform targets users seeking reliable and current information on currency exchange services. Technically, the website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, hosted with Cloudflare DNS services, and demonstrates moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and some advanced security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Contact information is limited to contact forms and a Telegram support link, with no explicit company emails or phone numbers published. Overall, the website is professional and trustworthy within its niche but could improve in privacy compliance and security practices.
- kv edupool AG
kv-edupool.ch
Education · Switzerland
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
kv edupool AG is a Swiss vocational education provider specializing in commercial and administrative training programs. The company offers a range of courses including payroll, personalwesen, marketing, real estate management, and project management, targeting students and professionals seeking recognized certifications in Switzerland. The website is well-structured, multilingual, and professionally designed, reflecting a mature digital presence. Technically, the site uses Umbraco CMS and integrates multiple modern analytics and advertising tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, with a moderate level of user tracking. Security posture is strong with HTTPS enforced and nonce attributes on scripts, though security headers could be improved. Privacy compliance is robust with a clear GDPR-compliant privacy policy and cookie consent mechanism. The domain registration details align well with the business identity, supporting legitimacy. Overall, the website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance.