High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,001–4,050 of 36,503
Raritäten der Klaviermusikpiano-festival-husum.com
Other · Germany
43High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website represents the 'Raritäten der Klaviermusik' piano festival, a niche cultural event held annually in Husum, Germany, since 1987. It focuses on rare piano music outside the standard repertoire, offering concerts, exhibitions, and live CD productions. The site is bilingual and professionally designed, targeting classical music enthusiasts and cultural tourists. Technically, it is built on WordPress with the Divi theme and uses common web technologies such as jQuery and Google Fonts. The hosting and domain registration are consistent with the festival's German cultural identity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy and cookie policy present but no explicit consent mechanism. Contact information is clearly provided, enhancing business credibility.
Metall Impex GmbHmetall-impex.com
Manufacturing · Germany
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Metall Impex GmbH is an established German company specializing in international trading of metals, non-ferrous metals, and raw materials. Founded in 1982 and based in Munich, the company focuses on supplying steel products and raw materials globally, supporting customers with marketing, logistics, and product financing solutions. The website reflects a professional B2B trading business with a clear market position in the manufacturing sector. Technically, the website is built on WordPress using well-known plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the website is trustworthy and compliant with GDPR, though it lacks explicit security policies and incident response contacts.
BEOS AGgiesserei-garching.de
Real Estate · Germany
48High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website represents a real estate project called GIESSEREI Garching, managed by BEOS AG, offering flexible and sustainable office and commercial spaces near Munich. The business targets companies seeking innovative hybrid workspace solutions in a prime location with strong infrastructure. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Matomo analytics. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain and hosting setup are consistent and legitimate, supporting the business credibility.
Business Campus Management GmbHbusinesscampus.de
Real Estate · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Business Campus Management GmbH operates multifunctional office and business parks in Munich and surrounding areas, focusing on sustainable commercial real estate development and management. The company is part of the DV Immobilien Gruppe, a well-established real estate group with nearly 50 years of experience. Their business model centers on long-term portfolio growth, on-site management, and innovative real estate concepts targeting businesses seeking office and commercial spaces. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses the Contao CMS platform with common JavaScript libraries such as jQuery and Colorbox. It is moderately performant and mobile-optimized, with basic accessibility and SEO features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not published. Analytics usage includes Google Analytics with user consent. Overall, the website is trustworthy, compliant with GDPR, and free from blocking or WAF challenges. The domain registration aligns with the business group, supporting legitimacy. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to improve security maturity and transparency.
Adldinger Unternehmensgruppeadldinger.de
Real Estate · Germany
49High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Adldinger Unternehmensgruppe is a German construction and real estate company focused on building with tradition and solutions for the future. The website presents a professional and consistent brand image targeting general public and business clients in the real estate sector. The technical infrastructure is modern, leveraging Webflow CMS, JavaScript libraries such as Swiper.js, and third-party services like Cookiebot for cookie consent and Google Analytics for user tracking. Hosting is provided by rzone.de, consistent with the domain's WHOIS data. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. The website is accessible without WAF or security challenges, and no suspicious WHOIS patterns were detected, supporting the domain's legitimacy. Overall, the site scores moderately high in business credibility and technical implementation but should enhance privacy compliance and security best practices.
State Portal Mecklenburg-Vorpommernsea-your-future.de
Education · Germany
49High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website www.sea-your-future.de serves as an official educational portal promoting university studies in Mecklenburg-Vorpommern, Germany. It is operated by the State Portal Mecklenburg-Vorpommern and targets prospective students, especially international ones, offering comprehensive information about study programs, universities, and regional advantages. The portal integrates official university partners and provides resources such as study course search and news about academic prizes. Technically, the site is built on TYPO3 CMS with modern web technologies including jQuery, Typekit fonts, and embedded video content. It features a cookie consent mechanism compliant with GDPR and uses email obfuscation techniques to protect contact information. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit security policies. Overall, the site is professional, trustworthy, and well-structured, with good content quality and user experience.
- Sseabirds.de GmbH
drohnenführerschein.eu
Transportation · Germany
45High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website drohnenführerschein.eu represents seabirds.de GmbH, a German company specializing in drone pilot training and certification recognized by the Luftfahrt-Bundesamt. The company offers a range of educational services including theoretical and practical courses, official EU drone pilot license preparation, and consulting for drone operations. The site is professionally designed with clear navigation and relevant content targeting both private individuals and businesses interested in drone operation compliance and training. Technically, the site uses established libraries such as jQuery, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. Security posture is moderate with HTTPS implied but lacks explicit security headers and advanced form protections. Privacy compliance is basic with cookie consent and privacy policy present but no detailed security or incident response policies are found. Overall, the site is trustworthy and legitimate with clear business contact information and official certifications.
DCF Verlag GmbHunternehmerjournal.de
Media · Germany
43High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
UnternehmerJournal is a German online media platform dedicated to the Mittelstand business sector, providing news, interviews, and expert advice tailored for business executives and entrepreneurs. The platform is operated by DCF Verlag GmbH and positions itself as a niche media outlet for the digital German Mittelstand, emphasizing quality content and business insights. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Iubenda for cookie compliance, ensuring a good level of digital maturity and user experience. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.
Wagner-Bazin WBwagner-bazin-wb.com
Other · France
40High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Wagner-Bazin WB is a professional cycling team based in France, providing news, team information, race calendars, and merchandise through their official website. The site targets cycling enthusiasts and supporters, offering a well-structured and visually consistent platform. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Brevo. The site is mobile-optimized and SEO-friendly, with a moderate performance profile. Security-wise, HTTPS is enforced and cookie consent is managed via Axeptio, but there is a lack of visible security headers and no explicit privacy policy or terms of service pages, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and social media presence suggest a legitimate operation. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.
Deutsche Stiftung Denkmalschutzdenkmalschutz.de
Non-profit · Germany
49High
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
The Deutsche Stiftung Denkmalschutz website represents a well-established non-profit organization dedicated to the preservation of cultural heritage and monuments in Germany. The site provides comprehensive information about their mission, projects, events, and donation opportunities, positioning them as the largest private initiative in their sector. The website is built on TYPO3 CMS, featuring modern design elements and good mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supported by recognized donation seals and transparent reporting.
- Großmarkt Rostock GmbH
rostocker-weihnachtsmarkt.de
Hospitality · Germany
47High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The Rostocker Weihnachtsmarkt website represents the largest Christmas market in Northern Germany, organized by Großmarkt Rostock GmbH. It serves a broad audience including visitors, families, vendors, and travel organizers by providing detailed event information, attractions, special actions, and an online shop for exclusive products. The business holds a strong market position as a leading regional event in the hospitality and retail sectors. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, hosted by Alfahosting, and includes a cookie consent mechanism and Google Analytics with privacy features enabled. Security posture is moderate with HTTPS enabled and privacy compliance evident, though improvements in security headers and incident response documentation are recommended. Overall, the site is professional, trustworthy, and well-structured, supporting a positive user experience.
- TTuristička zajednica Zagrebačke županije
locator-tzzz.com
Government · Croatia
40High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.locator-tzzz.com serves as an interactive tourism portal for Zagrebačka županija (Zagreb County) in Croatia. It is operated by the Turistička zajednica Zagrebačke županije, a public non-profit organization focused on promoting tourism within the region. The site offers an interactive map, listings of points of interest, accommodations, events, and cycling routes, targeting tourists and visitors interested in exploring the area. The business model is non-commercial, aiming to support regional tourism development. Technically, the website employs a range of established web technologies including Google Maps API, jQuery, Bootstrap, and various UI libraries to provide a responsive and interactive user experience. The site is moderately optimized for mobile devices and has a clear navigation structure. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate, with room for improvement in SEO and accessibility. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of CSRF tokens in forms is a positive sign, but the absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness despite the professional appearance of the site. Overall, the website provides valuable regional tourism information but suffers from significant security and compliance gaps. The unclear domain registration status is a critical risk factor. Strategic improvements in security posture, privacy compliance, and domain registration transparency are recommended to enhance trust and protect users.
- DMK Vall 042 d.o.o.
okusi.hr
Hospitality · Croatia
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Okusi hrvatske tradicije is a Croatian tourism and gastronomy promotion platform operated by DMK Vall 042 d.o.o., focusing on showcasing traditional Croatian cuisine, wines, and local agricultural products. The website targets tourists and gastronomy enthusiasts interested in authentic Croatian culinary experiences. It collaborates with local and county tourist boards to enrich the tourism offer with gastronomic content. Technically, the website is built on Joomla CMS using Bootstrap 3 and FontAwesome, with moderate performance and good mobile optimization. Security posture is moderate with no detected security headers or privacy policies, and SSL status is unknown from the provided data. Contact information is clearly provided, and social media presence includes Facebook and YouTube. Overall, the site is professional and trustworthy but lacks formal privacy and security disclosures.
Hospitality · Croatia
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Visit Zagreb County is the official tourism portal for the Zagreb County region in Croatia, managed by the Turistička zajednica Zagrebačke županije. The website serves as a comprehensive guide for tourists, offering information on cultural events, gastronomy, active holidays, health tourism, and sustainable tourism initiatives. It targets visitors interested in exploring the natural beauty and cultural heritage of the Zagreb County area. The business operates as a regional tourism authority, promoting local attractions and events to enhance tourism in the region. Technically, the website is built on WordPress using the Elementor page builder, with jQuery and several plugins for spam protection and accessibility. The hosting provider is Plus Hosting Grupa d.o.o., a Croatian hosting company. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured content. From a security perspective, the site uses HTTPS and includes spam protection and an accessibility widget. However, it lacks important security headers and a cookie consent mechanism, which are recommended for compliance with EU regulations. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie banner or detailed security policies. Overall, the website is trustworthy and professionally maintained, with a clear focus on tourism promotion. Strategic improvements in security headers, privacy compliance, and contact information visibility would enhance its security posture and user trust.
seabirds.de GmbHseabirds.de
Transportation · Germany
48High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
seabirds.de GmbH operates a specialized flight school and charter service based at Flugplatz Oldenburg-Hatten, Germany. The company offers pilot training including PPL and LAPL licenses, sightseeing flights, and aircraft chartering. The website is professionally designed with clear navigation and relevant content targeting aviation students and enthusiasts. Technically, the site uses Bootstrap and jQuery with integrations for Google Analytics and Facebook SDK, though it employs an outdated jQuery version which poses some security risks. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is addressed with a cookie consent banner and a privacy policy linked in the imprint. Overall, the site is trustworthy and well-positioned locally but could improve technical security and transparency.
KLISABklisab.com
Retail · Croatia
47High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
KLISAB is a Croatian fashion brand specializing in modern clothing and accessories for men and women, founded in 2020 by designers Tomislav Kliškinić and Marko Šabarić. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting fashion-conscious consumers primarily in Croatia. The website presents a professional and consistent brand image with clear navigation and good mobile optimization. Technical infrastructure leverages popular WordPress plugins and themes, including GDPR-compliant cookie consent mechanisms and analytics integrations such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled and domain registration transparency, though improvements in DNSSEC and security headers are recommended. Overall, the site is trustworthy and compliant with privacy regulations, supporting a positive user experience.
Stena Projectsstena-projects.eu
Real Estate · Croatia
44High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Stena Projects is a Croatian-based company specializing in the design and manufacture of handcrafted interior and exterior decorative elements, including stone and wood wall claddings, 3D decorations, decorative columns, and custom projects. The company targets customers seeking elegant and modern design solutions that blend art and nature. Their market position is that of a niche provider with a focus on quality and craftsmanship. Technically, the website is built on WordPress using modern plugins such as WPBakery and Slider Revolution, with multilingual support via WPML. The site is hosted by a Croatian hosting provider, Plus Hosting Grupa d.o.o., and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in privacy and security documentation.
Kazalište Ulyssesulysses.hr
Hospitality · Croatia
42High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Kazalište Ulysses is a well-established theatre company based in Zagreb, Croatia, with a domain registered since 2001. The company offers theatrical performances, concerts, and cultural events, targeting a general audience interested in arts and culture. Their website is built on WordPress, utilizing common plugins for event management, multilingual support, and newsletter subscriptions. The site is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website reflects a credible and trustworthy cultural institution with active content and community engagement.
Teatar uz moreteataruzmore.com
Hospitality · Croatia
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Teatar uz more is a cultural theater festival based in Croatia, established in 2021, focusing on organizing theater events and performances primarily in Split and surrounding regions. The website serves as a platform for event scheduling, ticket sales, and festival information targeting theater enthusiasts and the general public interested in cultural events. The business operates on a small scale with a clear regional focus. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Contact Form 7, and Revolution Slider, indicating a mature but standard digital infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and some advanced security headers, suggesting room for improvement. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism in Croatian language, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-positioned within its niche cultural sector.
Kerekesh Teatarkerekesh.hr
Other · Croatia
48High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Kerekesh Teatar is a Croatian theatre company specializing in comedic and cultural performances, with a strong regional presence and active event scheduling. The website serves as a portal for event information, ticket sales, and company background, targeting a general audience interested in theatre arts. Technically, the site is built on WordPress with modern plugins and libraries, including Google Analytics and GDPR compliance tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent, though improvements could be made in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business.
Obiteljski centarobiteljski.hr
Government · Croatia
47High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Obiteljski centar is a Croatian public institution dedicated to providing counseling services and programs aimed at children, youth, parents, and families. The organization operates with a mission to support personal growth, strengthen family relationships, and foster community engagement. Their services are offered free of charge, emphasizing accessibility and social welfare. The website reflects a well-established entity with a domain age consistent with its founding year of 2013. The content is professionally presented in Croatian, targeting local audiences in need of social and family support services. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. The site is mobile optimized and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. While the hosting provider is not explicitly identified, the site uses HTTPS with a good SSL configuration, contributing to secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of a security policy or incident response page suggests room for enhancement in security transparency. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and a clear focus on social services. Recommendations include implementing additional security headers, publishing security policies, and maintaining regular updates to WordPress and plugins to sustain security posture.
Scenoteka Zagrebscenoteka.hr
Hospitality · Croatia
48High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Scenoteka Zagreb is a cultural and theatrical venue located in the heart of Zagreb, Croatia, offering a platform for independent theater productions, stand-up comedy, and other performing arts. The organization focuses on providing accessible cultural experiences and operates through event organization, ticket sales, and venue rental. The website reflects a well-established regional cultural institution with a clear target audience of theater enthusiasts and local community members. Technically, the website is built on WordPress using modern themes and plugins, ensuring a responsive and visually appealing user experience. The presence of structured data and social media integration enhances its digital maturity. Security-wise, the site enforces HTTPS and includes GDPR-compliant cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the organization's cultural mission effectively.
- Pozitivan ritam
pozitivanritam.hr
Media · Croatia
45High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pozitivan ritam is a Croatian independent media and event organization specializing in music festivals, club events, and independent music production and distribution. The website showcases a variety of music-related content including festival announcements, club event schedules, and record label news, targeting music enthusiasts primarily in Croatia and the surrounding region. The business operates multiple music venues and organizes notable festivals such as Sea Sound Festival and Martinska Punk, positioning itself as a key player in the regional independent music scene. Technically, the website is built on Drupal CMS with a modern tech stack including jQuery, Font Awesome, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized with good navigation and content quality, although some accessibility features are basic. Performance is moderate, with standard use of third-party scripts and advertising networks. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, but could improve by adding additional security headers and tightening CSP rules. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a GDPR-compliant cookie consent banner and a privacy policy page in Croatian. However, no terms of service or explicit contact information for security or incident response was found. Overall, the website presents a professional and trustworthy front for a small independent music business. The lack of WHOIS data due to privacy protection is typical and justified for this business type. Recommendations include enhancing security headers, publishing terms of service, and providing clearer contact information to improve trust and compliance.
- Cesarica [ Glazbena nagrada publike ]
cesarica.org
Media
47High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Cesarica.org is a music award platform focused on audience choice awards, primarily serving a regional music community. The website is built on WordPress using Elementor and optimized with Yoast SEO and WPRocket, indicating a moderate level of digital maturity. The technical infrastructure is standard for small to medium-sized event or media websites, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, and no visible privacy or cookie policies, which are critical for compliance and trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures to improve user trust and regulatory compliance.
Muzej Sveti Ivan Zelinamuzej-zelina.hr
Government · Croatia
46High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Muzej Sveti Ivan Zelina is a small, government-affiliated cultural institution dedicated to preserving and showcasing the heritage of Sveti Ivan Zelina, Croatia. The website provides detailed information about the museum's history, collections, events, and projects, targeting local visitors, tourists, and cultural enthusiasts. The digital presence is supported by a moderate technology stack including jQuery, Bootstrap, and various UI libraries, with Google Analytics for visitor tracking. The site is mobile responsive and includes accessibility features, enhancing user experience. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a formal privacy policy, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and consistency with the museum's identity. Overall, the website is professional and trustworthy but could benefit from enhanced privacy and security practices.
Grad Sveti Ivan Zelinazelina.hr
Government · Croatia
49High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.zelina.hr/portal serves as the official municipal portal for the city of Sveti Ivan Zelina in Croatia. It provides a broad range of public information including local government structure, public tenders, news, events, and citizen services. The site targets residents and stakeholders of the municipality, offering them access to official announcements and resources. The business model is that of a government public service platform, with a focus on transparency and community engagement. The domain is well-established since 2001, reinforcing its credibility as an official source. Technically, the site is built on Joomla CMS with several common web technologies such as jQuery, MooTools, Bootstrap, and UIkit frameworks. It uses K2 for content management and RokSprocket for interactive features like slideshows. The site is moderately performant, mobile-optimized, and includes accessibility features such as dyslexia-friendly fonts and contrast controls. SEO and metadata are properly implemented, including Open Graph and Twitter cards. From a security perspective, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism with opt-in functionality. CSRF tokens are present, and no sensitive data is exposed in the HTML. However, security headers like CSP and HSTS are not detected, and there is no published security policy or incident response contact information. Google Analytics is used for visitor tracking, with moderate user tracking levels and good privacy compliance. Overall, the website demonstrates a solid security posture and good privacy compliance for a government portal. The domain WHOIS data aligns well with the website content and geographic location, indicating high legitimacy. No critical vulnerabilities or suspicious content were found. Strategic recommendations include adding security headers, publishing a security policy, and providing incident response contacts to enhance trust and security maturity.
MAS Blaník, z. s.masblanik.cz
Non-profit · Czech Republic
44High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
MAS Blaník is a Czech non-profit organization dedicated to regional development, supporting local agriculture, education, and social services in the Blaník region. The website serves as an official portal providing information about projects, events, and community initiatives, with visible EU co-financing support. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, incorporating modern JavaScript libraries and responsive design. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust verification, though the website content and social presence support legitimacy. Overall, the site is well-structured and professional but could improve privacy compliance and security transparency.
EDUin, o. p. s.eduina.cz
Education · Czech Republic
38High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
EDUína is a Czech non-profit organization focused on recognizing and awarding innovative projects in formal and informal education. The organization has been active for over 10 years, celebrating educational achievements and honoring significant contributors to Czech education. The website reflects a well-structured digital presence with clear branding, contact information, and social media integration. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing. The absence of WHOIS data is a concern for domain legitimacy verification but does not detract from the professional presentation and trust signals on the site. Overall, EDUína presents a credible and professional front for its educational award activities.
Landesportal Mecklenburg-Vorpommernstudieren-mit-meerwert.de
Education · Germany
48High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website 'Studieren mit Meerwert' serves as a comprehensive regional education portal promoting universities and study programs in Mecklenburg-Vorpommern, Germany. It targets prospective and current students, including international visitors, by providing detailed information about study opportunities, campus life, and career prospects. The platform is operated under the Landesportal Mecklenburg-Vorpommern, reflecting a public sector educational initiative with a strong regional focus. Technically, the site is built on TYPO3 CMS and employs modern web technologies such as jQuery, YouTube iframe API, and Typekit fonts. It features a responsive design with good accessibility and SEO practices. Cookie consent is implemented with an opt-in mechanism, ensuring GDPR compliance. The site integrates social media channels and interactive elements like study program search and multimedia galleries. From a security perspective, the website uses HTTPS and obfuscates email addresses to prevent spam. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or malicious content were detected. The WHOIS data aligns with the website's regional educational purpose, showing consistent domain usage and hosting. Overall, the website demonstrates a high level of professionalism, content quality, and user experience, with minor recommendations to enhance security headers and publish vulnerability disclosure information.
Dimedia internet tehnologije d.o.o.dimedia.hr
Technology · Croatia
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Dimedia internet tehnologije d.o.o. is a Croatian technology company specializing in custom software development, mobile applications, web design, and internet marketing services. Established in 2010, the company targets businesses seeking comprehensive digital solutions to enhance their online presence and operational efficiency. Their market position is supported by a portfolio of clients across real estate, tourism, and corporate sectors, demonstrating a solid foothold in the regional IT services market. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA, ensuring basic security and user engagement features. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Hosting and domain registration are consistent with the company's Croatian location, enhancing trust. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic with presence of privacy and cookie policies, but no explicit GDPR compliance statements or data retention policies were found. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business credibility profile. Strategic improvements in security policy transparency and accessibility would further enhance their posture.
pxMEDIA.de GmbHpxmedia.de
Media · Germany
45High
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
pxMEDIA.de GmbH is a specialized online marketing agency based in Germany, focusing on systematic personnel recruiting, employer branding, and customer acquisition for ambitious medium-sized enterprises. The company positions itself as a partner for sustainable business success, offering consulting, conception, implementation, and ongoing support services. Their market niche is well-defined, targeting the medium-sized business sector with tailored digital marketing solutions. The website demonstrates a professional and consistent brand image, supported by award recognition and client testimonials. Technically, the site is built on WordPress with modern plugins and integrations such as Wistia for video hosting and Google Maps API for location services. Hosting is provided by Alfahosting, a reputable German hosting provider. Security posture is solid with HTTPS enforced and CAPTCHA protection on forms, though explicit security headers and incident response policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is well-designed, mobile-optimized, and trustworthy, with no signs of suspicious or adult content.
Philippe Wagnerphilippe-wagner.fr
Retail · France
46High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Philippe Wagner is a French artisanal charcuterie producer specializing in 100% natural ingredients and traditional recipes. The company is part of a group including André Bazin and Wagner-Bazin WB, emphasizing quality French meat certified VPF – VBF. The website presents a professional image with good content quality, focusing on product offerings, recipes, and company news. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted by OVH, and uses modern plugins and Google Tag Manager for analytics. Security posture is adequate with HTTPS and domain protections but lacks explicit privacy and cookie policies and some security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements include publishing privacy and cookie policies, enhancing security headers, and adding incident response information.
321 MED GmbH321med4.com
Healthcare · Germany
49High
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
321 MED GmbH operates a specialized healthcare software platform focused on digitizing and automating patient reception and administrative workflows for medical practices, clinics, and related healthcare facilities. The company has established a strong market presence in Germany with over 3,500 healthcare providers and 5 million patients served. Their flagship product, the Online-Rezeption, offers a comprehensive suite of features including appointment management, digital check-in, AI-powered telephone assistance, and workflow automation, tailored specifically for healthcare environments. The website is professionally designed, content-rich, and well-branded, reflecting a mature and credible business.
Registry Services, LLCuipm.tv
Media · United States
44High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
UIPM TV is a specialized media streaming platform dedicated to broadcasting live and recorded events related to Modern Pentathlon and associated sports disciplines such as Biathle, Triathle, Laser Run, and Obstacle events. The platform targets sports enthusiasts and fans of these niche sports, providing official content likely authorized by the governing body UIPM. The website is built on WordPress using the Divi theme, integrating Dailymotion's API for video streaming and Matomo for analytics, reflecting a moderate level of digital maturity and technical infrastructure. Security measures include HTTPS, reCAPTCHA for form protection, and GDPR cookie consent mechanisms, although some security best practices like DNSSEC and security headers are missing. The domain registration is consistent and legitimate, registered with OVH sas and publicly associated with Registry Services, LLC. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which impacts privacy compliance and business credibility scores. Overall, the site is functional, professionally designed, and serves its niche audience effectively but would benefit from enhanced security and compliance documentation.
Other
42High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The analyzed domain currently serves a Chrome internal error page indicating that the website content is inaccessible or blocked. No meaningful business or contact information is available on the page. The site lacks privacy, cookie, and terms of service policies, and no external links or social media profiles are present. Technically, the page is a browser error page with embedded Chromium scripts and styles, not a functional website. Security posture is minimal with no visible HTTPS or security headers. WHOIS data is privacy protected or unavailable, limiting trust assessment. Overall, the domain appears non-functional or blocked, resulting in a very low trust and quality score.
Provident Photographyprovidentphotos.com
Other · United States
47High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Provident Photography is a small, locally focused photography business based in Hastings, Nebraska, specializing in business headshots, senior portraits, family and children photography, sports, and school photos. The website presents a professional image with clear service offerings and customer testimonials, positioning the company as a trusted local provider. The technical infrastructure is built on WordPress with modern plugins and libraries such as jQuery, Font Awesome, and Owl Carousel, supporting a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.
Fonds Le Saintfondslesaint.org
Non-profit · France
40High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Fonds Le Saint is a small non-profit organization based in Bourg-Blanc near Brest, France, focused on promoting nutrition education and making sports accessible to children with disabilities. Established in 2015, the foundation supports local community initiatives and collaborates with sports clubs and educational programs. The website reflects a clear mission and target audience, emphasizing social impact and community engagement. Technically, the website is built on Joomla CMS with UIkit framework and uses common web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and presents a professional design with good navigation and content relevance. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks important security headers, which could be enhanced to improve protection against common web threats. Privacy and cookie policies are not present, indicating compliance gaps with GDPR and related regulations. WHOIS data is unavailable due to query restrictions, limiting domain trust verification. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved security practices and privacy compliance to strengthen its digital maturity and user trust.
- KKARLINSKI
karlinski-grafikdesign.de
Other · Germany
39High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
KARLINSKI is a small, self-employed graphic design business based in Mecklenburg, Germany, offering a range of creative services including logo design, corporate identity, print and web design, and production support. The website serves as a professional portfolio and contact point, targeting local businesses, cultural institutions, and agencies. The technical infrastructure is based on WordPress with common plugins for SEO and contact forms, hosted on kasserver.com. While the site is functional and well-structured with good content quality and GDPR-compliant privacy and cookie policies, it uses outdated WordPress and plugin versions, which pose potential security risks. No advanced security policies or incident response mechanisms are evident. Overall, the site is trustworthy and professional but would benefit from technical updates and enhanced security measures.
Peene Kies GmbHpeenekies.de
Energy · Germany
45High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Peene Kies GmbH is a medium-sized German company specializing in the extraction, processing, and supply of surface mineral raw materials, primarily serving the construction and energy sectors in Northeast Germany. The company positions itself as a market leader with a long history dating back to 1923. Their website reflects a professional business model focused on sustainable production of building materials and renewable energy solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers could be improved. No vulnerabilities or suspicious elements were detected. Overall, the website is trustworthy and compliant with GDPR, though direct contact details like emails and phone numbers are not explicitly listed, relying instead on contact forms. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen trust and compliance.
Government · Croatia
49High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hrvatski zavod za zapošljavanje (HZZ) is the Croatian national public employment service, providing a wide range of services including job seeker registration, employer job postings, career development tools, labor market statistics, and specialized programs for retirees and persons with disabilities. The website serves as a comprehensive portal for employment-related information and services targeted at Croatian citizens and employers. It maintains a strong market position as the official government agency responsible for labor market facilitation in Croatia. Technically, the website is built on WordPress with multilingual support via WPML, and uses modern web technologies such as Swiper.js for sliders, Complianz for GDPR cookie consent, and PushAlert for notifications. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Analytics and marketing tools are implemented with privacy compliance in mind. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, security headers are not explicitly detected in the HTML content, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the Croatian government entity, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its public service mission effectively. Strategic improvements could include publishing explicit security policies, enhancing security headers, and adding vulnerability disclosure information to further strengthen trust and security posture.
- HAMAG BICRO
hamagbicro.hr
Government · Croatia
48High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
HAMAG BICRO is a Croatian government agency dedicated to supporting small businesses and investments. The agency provides comprehensive assistance to entrepreneurs throughout all stages of business development, from idea research and development to commercialization and market placement. The website reflects a national-level institution with a focus on fostering economic growth and innovation in Croatia. Technically, the website is built on WordPress with SEO optimization plugins, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and presents content in Croatian, targeting local entrepreneurs. Security posture shows room for improvement, with no detected security headers and missing privacy and cookie policies, which are critical for GDPR compliance. Overall, the domain registration and WHOIS data align well with the agency's profile, confirming legitimacy. Strategic recommendations include enhancing security headers, adding privacy and cookie policies with consent mechanisms, and publishing clear contact and incident response information to improve trust and compliance.
Microformats – building blocks for data-rich web pagesmicroformats.org
Technology
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Microformats.org is a niche community-driven website focused on the promotion and education of microformats, a set of open data formats for marking up structured data on web pages. The site serves web developers and the IndieWeb community by providing specifications, blog posts, and resources related to microformats. It operates on a WordPress CMS hosted by Linode and has been active since 2005, indicating a mature presence in its domain. The content is technical and educational, targeting a specialized audience interested in semantic web technologies. From a technical perspective, the website uses a standard WordPress setup with JavaScript and CSS for frontend functionality. While the site is accessible and functional, it shows signs of moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site uses Google Analytics for tracking but lacks visible privacy and cookie policies, which may impact compliance with data protection regulations. Security-wise, the site enforces HTTPS but lacks important security headers such as Content-Security-Policy and HSTS. DNSSEC is not enabled for the domain. No contact or incident response information is provided, which limits transparency and readiness for security issues. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the security posture is moderate but could benefit from enhancements. The overall risk assessment suggests the site is legitimate and trustworthy within its niche but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence. Strategic recommendations include implementing security headers, enabling DNSSEC, publishing privacy and cookie policies, and providing clear contact and incident response information.
- SStefan Röske
filmbildung-brandenburg.de
Education · Germany
42High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.filmbildung-brandenburg.de represents a small educational service provider, Stefan Röske, specializing in film and media education workshops and digital literacy. The business targets educators and learners interested in practical media applications such as podcasts, explainer videos, and digital tools. The website is built on WordPress and hosted likely on a German hosting provider, with a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, only a contact form. Security posture is basic with HTTPS enabled but missing security headers and incident response information. WHOIS data is minimal and lacks registrant transparency, which slightly reduces trustworthiness. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.
Bike Kitchen Brnobikekitchenbrno.cz
Transportation · Czech Republic
40High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Bike Kitchen Brno is a small community-driven non-profit organization based in the Czech Republic focused on providing an open bicycle repair workshop and fostering social engagement around cycling culture. The website serves as a hub for community events, educational programs, and environmental initiatives. The organization benefits from EU grant support, indicating some level of external validation and funding. Technically, the website is built on WordPress with common plugins and uses HTTPS with a good SSL configuration, though some libraries like jQuery are outdated, posing potential security risks. The site lacks formal privacy and cookie policies, which is a compliance gap especially under GDPR. Security posture is moderate with some best practices implemented but missing key headers and vulnerability disclosures. Overall, the site is functional, well-branded, and serves its community purpose effectively but would benefit from improved compliance and security hardening.
Arbeiterwohlfahrt Rostockawo-rostock.de
Non-profit · Germany
49High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Arbeiterwohlfahrt Rostock is a well-established non-profit social welfare organization based in Germany, providing a wide range of social services including care for the elderly, child and youth support, social psychiatry, migration assistance, and volunteer opportunities. The organization operates with a clear mission to promote social justice and community support in the Rostock region. Their website reflects a professional and consistent brand presence, with comprehensive information about their services and career opportunities. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and interactive content, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent management, but lacks a formal published security policy or vulnerability disclosure, which could be improved. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it a reliable source for users seeking social services or employment with AWO Rostock.
- Borealis
borealis.agency
Technology · Croatia
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Borealis is a Croatia-based digital agency specializing in the creation of custom digital products including complex web applications, e-commerce platforms, multimedia applications, and promotional games. The company emphasizes long-term client relationships and serves a global clientele with a comprehensive service offering from concept through post-launch support. Their website reflects a professional and modern digital presence built on WordPress, with integration of Google Tag Manager and reCAPTCHA for analytics and security. While the site is well-designed and content-rich, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS and form protection, but could be improved by adding security headers and formal incident response disclosures. Overall, Borealis presents as a credible and established digital agency with a solid market position and trustworthy online presence.
- DDěti Země
detizeme.cz
Non-profit · Czech Republic
44High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Děti Země is a Czech non-profit environmental organization focused on protecting nature and human living environments, emphasizing regional work and advocacy. The website serves as an informational platform presenting news, campaigns, and organizational programs. The technical infrastructure is basic, relying on traditional HTML, CSS, and JavaScript without modern CMS or frameworks, and lacks mobile optimization. Security posture is weak with no visible HTTPS enforcement or security headers, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is limited to an email address and a Facebook page, reflecting a small-sized NGO profile. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.
- BBrno na kole
brnonakole.cz
Transportation · Czech Republic
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Brno na kole is a well-established non-profit organization dedicated to promoting cycling and improving cycling infrastructure in Brno, Czech Republic. The website serves as a hub for cycling maps, news, analyses, and community events, targeting local cyclists and urban mobility advocates. The organization has a clear market position as a local advocacy group with a strong community presence and active social media engagement. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, integrating modern JavaScript libraries such as jQuery and OpenLayers for map functionalities. Hosting is provided by Websupport, a reputable provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics, but lacks important security headers and explicit privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a domain age appropriate for the organization's history. Overall, the website is professional, trustworthy, and content-rich but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.
Rozhlednovým rájem - Rozhledny ČR | Rozhlednovým rájemrozhlednovymrajem.cz
Other · Czech Republic
45High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Rozhlednovým rájem is a Czech language website serving as a unique catalog of observation towers across the Czech Republic, providing descriptions, photo galleries, and additional information to visitors interested in these landmarks. The website targets general audiences including tourists and photography enthusiasts. The business model appears to be informational and possibly tourism-related, focusing on content aggregation rather than direct sales or services. The site was first published in 2011, indicating a long-standing presence in its niche. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for search engine optimization, Contact Form 7 for user interaction, and Google reCAPTCHA v3 for spam prevention. The site loads with moderate performance and is mobile optimized with good SEO practices in place. Security posture is solid with HTTPS enabled and reCAPTCHA integration, though it lacks some advanced security headers and policies. No WHOIS data is available, which limits the ability to fully verify domain legitimacy and ownership details. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is functional, professional, and safe for general audiences but would benefit from enhanced transparency and security practices.
- V-Press s.r.o.
ivelo.cz
Media · Czech Republic
46High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
iVelo.cz is a Czech media publisher specializing in cycling-related content, including magazines such as Velo, 53 x 11, and Elektrokola. The website serves as a comprehensive portal for cycling enthusiasts, offering news, product reviews, training tips, and an e-commerce platform for subscriptions and cycling products. The company behind the site is V-Press s.r.o., a medium-sized entity based in Beroun, Czech Republic. The site enjoys a strong market position within the Czech cycling community and maintains consistent branding and professional content quality. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities. It leverages modern web technologies including jQuery, Google Tag Manager, and YouTube API integrations. The site is mobile-optimized with good SEO practices and moderate performance. Security is well implemented with HTTPS, multiple security headers, and cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the site demonstrates a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of a public security policy and incident response information suggests room for improvement in transparency and preparedness. The missing WHOIS data for the domain is a notable concern, reducing trust slightly, though the website content and business information appear legitimate. Overall, iVelo.cz presents a professional, secure, and user-friendly platform for cycling enthusiasts in the Czech Republic. Strategic recommendations include publishing a formal security policy, enhancing incident response visibility, and verifying domain registration details to strengthen trust and compliance.