Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
44,301–44,350 of 99,066
- HHannah Hoffman
hannahhoffman.la
—
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
- FFootnote
footnotemag.com
Media
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Footnote is a niche artistic journal focused on fostering creative exchange among writers, photographers, and artists globally. Launching its first issue in November 2024, it offers a high-quality print publication with international distribution. The website reflects a small but professional operation with a clear editorial vision and consistent branding. Technically, the site uses basic modern web technologies including jQuery and custom scripts, hosted on One.com. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal with a privacy policy present but no cookie consent or terms of service. Contact information is limited to email addresses and social media links, with no phone or physical address provided. Overall, the site is trustworthy and professionally presented but could enhance security and privacy practices.
MO architecturesmoarchitectures.com
Real Estate · France
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MO architectures is a small regional architecture agency specializing in construction and renovation projects in the South Landes region of France, including Capbreton, Hossegor, and surrounding areas. The website presents a professional portfolio of architectural projects with a clean, modern design built on the Webflow platform. The technical infrastructure leverages modern front-end libraries such as GSAP, Splide.js, and Lenis for smooth animations and user experience enhancements. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response information. Privacy compliance is basic with a cookie consent mechanism and legal mentions page present, but no detailed GDPR compliance or data protection officer information found. Overall, the website is functional and professional but would benefit from enhanced security practices and clearer contact information to improve trust and compliance.
Néographe factoryneographefactory.com
Technology · France
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Néographe factory is a French freelance digital design and branding service provider specializing in UI web design, branding, mentoring, and coaching for startups, founders, and small to medium enterprises. The website presents a professional and creative portfolio with strong social media presence and customer testimonials, positioning the business as a niche player in the digital design market. Technically, the site is built on Webflow with modern JavaScript libraries and offers good mobile optimization and user experience. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy compliance documentation. The domain WHOIS data is unavailable, which slightly reduces trust but is not uncommon for small businesses. Overall, the site is professional and trustworthy but would benefit from improved privacy and security disclosures.
Belgrainbelgrain.fr
Retail · France
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Belgrain is a small specialty coffee roaster and retailer based in Marseille, France, offering artisanal roasted coffee sourced from Colombia, Brazil, and Kenya. The company targets coffee enthusiasts and professionals through its e-commerce platform built on Webflow, integrating Stripe for payments and Google Tag Manager for analytics. The website is professionally designed with good content quality and user experience, optimized for mobile devices. Security posture is adequate with HTTPS and secure payment processing, but lacks some security headers and visible privacy compliance documentation. The absence of WHOIS data limits domain trust assessment, but the overall digital presence suggests a legitimate business. Strategic improvements include adding privacy and cookie policies, enhancing security headers, and publishing a vulnerability disclosure policy to strengthen trust and compliance.
Fragmafragma.solutions
Energy · France
74Medium
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
Fragma is a French company specializing in managing and financing energy transition projects for enterprises. Their website presents a professional and well-structured platform offering decarbonation strategies, project management, and guaranteed financing solutions. The company positions itself as a single interlocutor for clients, simplifying the complex process of energy renovation and compliance with energy efficiency regulations. The website is built on modern technologies including Webflow CMS and Weglot for multilingual support, with a focus on user experience and clear navigation. Security posture is adequate with HTTPS enforced, though additional security headers and explicit security policies could enhance trust. The absence of WHOIS data due to privacy protection limits domain trust analysis, but the website content and design indicate a legitimate and professional business. Overall, the site is safe, business-focused, and compliant with privacy regulations.
Spaagspaag.fr
Other · France
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Spaag is a French consulting firm specializing in growth marketing, targeting both B2B and B2C companies. The company offers strategic consulting, operational support, creative services, and training. The website is professionally designed using Webflow and incorporates modern web technologies such as Google Tag Manager and Lottie animations. However, the absence of WHOIS registration data and lack of visible privacy and cookie policies reduce the overall trustworthiness and compliance posture. Security headers and incident response information are also missing, indicating room for improvement in security maturity. Overall, the website presents a credible business presence but would benefit from enhanced transparency and security measures.
Smile Conseilsmileconseil.com
Media
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Smile Conseil is a creative agency founded in 2016, focused on collaborating with major brands and web talents in the new pop culture space. The website showcases their key services including influence, production, events, and a 360-degree approach to campaigns. The site is built on Webflow and uses modern JavaScript libraries such as GSAP, Lenis, and Splide.js to deliver a visually engaging and interactive user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership verification. Security posture is weak due to lack of security headers and privacy policies, and no contact information is provided for direct communication or incident response. Overall, while the site is professionally designed and content-rich, the lack of transparency and security best practices presents risks that should be addressed.
CLACclacyourbrand.com
Other · France
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
CLAC is a French branding consultancy targeting bold entrepreneurs and CEOs seeking impactful brand strategies and design. The website presents a professional, well-branded digital presence with multimedia content, client testimonials, and partner logos from reputable companies. Technically, the site is built on Webflow with modern libraries like Swiper.js and includes Google Tag Manager for analytics and a cookie consent mechanism, indicating good digital maturity. Security posture is solid with HTTPS and cookie consent, though explicit security headers and incident response policies are absent. WHOIS data is unavailable, which lowers domain trust but the website content and client references mitigate concerns. Overall, CLAC demonstrates a strong market position in branding services with a focus on clarity, impact, and bold communication.
Flaireflaire-recruiting.com
Technology · France
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Flaire is a specialized recruitment agency focusing on Tech, AI, Data, and Product talent acquisition for startups and scale-ups primarily in Europe and the USA. The company positions itself as a trusted partner for innovative tech companies seeking exceptional talent with a personalized and efficient recruitment methodology. The website demonstrates a professional and modern digital presence built on Webflow, featuring detailed service descriptions, client partnerships, and team profiles. Technically, the website leverages modern web technologies including Webflow CMS, jQuery, and Google Fonts, hosted on Webflow's CDN infrastructure. The site is well-optimized for mobile and desktop with good SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and business operations appear credible and professional. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, Flaire presents as a credible, niche recruitment firm with a strong digital footprint, though improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.
Treize grammes13g.fr
Other · France
55Medium
NIS2 22 · GDPR 10
NIS2 22 · GDPR 10
Treize grammes is a French digital branding agency specializing in brand creation, rebranding, visual identity, brand strategy, and custom website and web app development. The agency positions itself as a creative partner that transforms business ambitions into bold brands, targeting businesses seeking to enhance their digital presence and brand impact. The website reflects a professional and creative approach with a focus on digital marketing and branding services. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Tag Manager for analytics, Swiper.js for interactive elements, and Lottie animations for enhanced user experience. The site is mobile-optimized and demonstrates good performance and SEO practices, although accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. No WHOIS data is available, indicating domain privacy protection, which is common for small agencies but reduces transparency. No contact emails or phone numbers are found, limiting direct communication channels. Overall, the website is professional and functional but would benefit from enhanced privacy compliance, clearer contact information, and improved security headers to strengthen trust and regulatory adherence.
Accueilriad-instant-t.com
Hospitality · Morocco
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.riad-instant-t.com represents a small hospitality business offering authentic riad accommodation in Marrakech, Morocco. It targets tourists seeking a traditional Moroccan experience with services including lodging, meals, transfers, and activity organization. The site is built on the Webflow platform using modern web technologies and provides a visually appealing and content-rich experience primarily in French. However, the absence of privacy and cookie policies, lack of explicit contact information, and missing WHOIS registration data reduce the overall trust and compliance posture. Security headers and incident response information are also absent, indicating room for improvement in security maturity. Overall, the site is functional and professional but requires enhancements in compliance, security, and transparency to improve risk posture and user trust.
GUILLAUME MBgmbgraphic.com
Media
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.gmbgraphic.com represents a professional graphic designer named Guillaume MB, specializing in title sequences, poster design, branding, and art direction primarily for music videos, short films, and visual projects. The site showcases a portfolio of creative works and emphasizes collaboration with artists and filmmakers to deliver impactful visual storytelling. The business model is freelance and commission-based, targeting creative professionals and artists. Technically, the site is built on Webflow CMS, uses modern JavaScript libraries including jQuery and Video.js, and is hosted likely on Webflow's platform. The site is mobile optimized with good design quality and moderate performance. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which impacts compliance and trust. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the site is functional and professional but would benefit from enhanced security practices and compliance documentation.
Triplettatriplettapizza.com
Hospitality · France
67Medium
NIS2 22 · GDPR 35
NIS2 22 · GDPR 35
Tripletta is a French multi-location pizzeria chain offering authentic pizza recipes and a unique neighborhood ambiance across several cities including Lille, Bordeaux, Versailles, Montrouge, Rennes, Toulouse, Lyon, Marseille, and Paris. The website is professionally designed using Webflow CMS and integrates Stripe for payment processing, indicating a modern digital infrastructure. However, the absence of WHOIS data raises concerns about domain registration legitimacy. The site lacks essential privacy and cookie policies, and no explicit contact information is provided, which impacts trust and compliance. Security posture is moderate with no detected security headers or vulnerabilities but also no critical issues. Overall, the website presents a good user experience and content quality but requires improvements in privacy compliance and business transparency.
BOLDEN FILMSboldenfilms.com
Media · France
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
BOLDEN FILMS is an international creative agency specializing in bold and conscious video production with a strong focus on eco-socio-production to reduce carbon footprint. The company offers a comprehensive range of services including creative direction, strategy, production, and sustainable impact assessment. Their market positioning targets brands seeking innovative and environmentally responsible audiovisual content. Technically, the website is built on Webflow CMS with modern JavaScript and CSS, optimized for performance and mobile devices, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and contact information appear professional and trustworthy. Overall, the site demonstrates a mature digital presence but would benefit from enhanced security and compliance transparency.
Other
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website startupstage.app is currently inaccessible, returning a 404 error page indicating that the deployment cannot be found. There is no accessible content, metadata, or business information available on the site. The hosting platform is identified as Vercel based on the error page branding. Due to the lack of content, no meaningful assessment of the business, its market position, or services can be made. The technical infrastructure appears minimal with no detectable technologies or frameworks beyond the hosting provider. Security posture is poor with no evidence of HTTPS, security headers, or privacy policies. Overall, the site appears inactive or misconfigured, resulting in a low trust and credibility score.
Technology · United States
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Dev Hunt is a niche technology platform launched in 2023 that serves as a launchpad and community voting site for new developer tools. It targets developers and technology professionals seeking to discover and evaluate new software tools. The platform leverages modern web technologies including Next.js, React, and Cloudflare DNS/CDN, and integrates analytics services such as Microsoft Clarity and Usermaven. The site demonstrates good mobile optimization, fast performance, and a professional design consistent with its developer audience. Security posture is adequate with HTTPS and domain status protections, but lacks advanced DNS security (DNSSEC) and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Business credibility is moderate with no direct contact information but a clear market focus and community engagement. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.
Top AI toolstopai.tools
Technology
70Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
TopAI.tools is a specialized online directory that curates and catalogs a vast collection of AI-powered tools, currently listing over 19,000 entries. The platform aims to democratize access to artificial intelligence by helping users discover the best AI applications for various tasks, enhancing productivity in both professional and personal contexts. The business operates primarily as a referral and discovery service, offering user accounts for personalized recommendations, bookmarking, and collections. Technically, the website is built on a modern stack including Bootstrap for responsive design, Firebase for backend services, and Cloudflare for DNS and security. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though it lacks advanced DNS security features like DNSSEC and does not publish detailed security policies or incident response contacts. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences, with room for improvement in privacy and security transparency.
- Microlaunch
microlaunch.net
Technology
67Medium
NIS2 55 · GDPR 85
NIS2 55 · GDPR 85
Microlaunch is a technology startup platform founded in 2024 that provides a unique launchpad for makers and startups to distribute their tech products, gather feedback, and make initial sales. The platform positions itself as a community-driven marketplace and launch service, targeting early-stage tech entrepreneurs and product creators. Technically, the website is built using modern web technologies including Next.js and Cloudflare Workers, ensuring fast performance and good mobile optimization. The security posture is solid with HTTPS enforced and standard security headers, though DNSSEC is not enabled and no explicit security policy is published. Privacy compliance is addressed with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the platform demonstrates a professional and trustworthy online presence with consistent branding and active community engagement.
- 中中国建造师网
dgzxj.com
Education · China
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
中国建造师网 is a specialized online education platform focused on providing comprehensive resources for construction certification exams in China, including exam schedules, study materials, and score inquiries. The platform targets construction professionals and candidates preparing for various engineering and construction certifications, positioning itself as a key domestic player in this niche educational market. The website content is well-structured, regularly updated, and tailored to the needs of its audience, reflecting a medium-sized business with a clear focus on education within China. Technically, the website employs a traditional web stack including jQuery and Bootstrap, ensuring responsive design and moderate performance. While the site is mobile-optimized and SEO-friendly, it lacks advanced security headers and DNSSEC, which are areas for improvement. The domain is newly registered in 2025, consistent with the business timeline and content focus. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers, which lowers its security posture. No privacy or cookie policies are present, indicating compliance gaps with privacy regulations. Contact information is limited to phone numbers and contact forms, with no explicit incident response or vulnerability disclosure channels. Overall, the website is professional and trustworthy for its intended educational purpose but would benefit from enhanced security measures and privacy compliance to improve user trust and regulatory adherence.
- SStomach Health--Stomach Disease Information
stomachillness.com
Healthcare
57Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.stomachillness.com is an informational health site focused on stomach diseases and related medical topics, primarily presented in French with multilingual navigation options. It serves a general audience seeking educational content about stomach health, symptoms, and treatments. The business model appears to be content-driven, possibly supported by advertising or affiliate links, with no clear commercial transactions or services offered directly on the site. Technically, the site is built with basic HTML and CSS, lacking modern frameworks or CMS indications. There is no evidence of advanced analytics, tracking, or security headers. Mobile optimization and accessibility are basic, and SEO practices appear minimal. The site does not provide privacy, cookie, or terms of service policies, nor does it offer contact or incident response information, which limits trust and compliance. From a security perspective, the absence of WHOIS registration data is a significant concern, suggesting possible domain registration issues or privacy protection that is not justified by the business type. No HTTPS/SSL information was found in the provided data, which is a critical security gap. The site lacks security best practices such as security headers and secure forms. No vulnerabilities were explicitly detected, but the lack of security controls and transparency reduces the overall security posture. Overall, the website presents moderate content quality but suffers from critical security and compliance deficiencies. The domain legitimacy is questionable due to missing WHOIS data. Strategic improvements in security, privacy compliance, and transparency are essential to enhance trustworthiness and user safety.
- LLove Beauty
verylovebeauty.com
Other
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Love Beauty' operates as a multilingual informational platform focused on beauty, health, wellness, fitness, and family topics. It primarily targets a general audience interested in lifestyle and wellness content, monetizing through Google AdSense advertising. The site structure is basic with moderate branding consistency and content quality rated as basic. Technically, the site uses standard HTML, CSS, and JavaScript with Google advertising scripts and AMP auto ads, but lacks advanced frameworks or CMS identification. Security posture is basic with HTTPS enabled but no security headers detected and no visible forms to assess input security. Privacy and cookie policies are absent, and no contact or business registration information is provided, which impacts trust and compliance. WHOIS data is unavailable, indicating possible domain registration issues or privacy protection, which further reduces legitimacy. Overall, the site is functional but lacks professional security and compliance maturity.
- 生生活百科網
8585.online
Other
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website '生活百科網' is a small-scale lifestyle informational platform primarily targeting Chinese-speaking users interested in health, home decoration, nutrition, and cultural customs. It offers a variety of articles and tips aimed at promoting healthy living and practical household knowledge. The business model appears to be content publishing supported by advertising, specifically Google Adsense. The site lacks explicit business or company information, contact details, and formal policies, which limits its credibility and trustworthiness. Technically, the website uses standard HTML, CSS, and JavaScript with Google Adsense scripts for monetization. There is no evidence of a CMS or advanced frameworks. The site shows basic mobile optimization and navigation but lacks modern security headers and privacy compliance mechanisms. Performance is moderate with no major errors detected. From a security perspective, the site does not enforce HTTPS visibly in the content, nor does it implement security headers such as Content-Security-Policy or X-Frame-Options. There is no privacy policy or cookie consent mechanism, which raises compliance concerns. No contact information or incident response channels are provided, limiting the ability to report security issues. No vulnerabilities or malware indicators were found in the content. Overall, the website is safe for general audiences but scores low on privacy compliance and security posture. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.
- HHealth Sciences
222health.com
Healthcare
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.222health.com serves as a health sciences informational portal offering a broad range of articles and resources on topics such as alternative medicine, cancer, mental health, dental health, and public health safety. It targets a general audience seeking health-related knowledge and advice. The business model appears to be content publishing without evident commercial transactions or user engagement features. The site holds a niche position in the health information sector but lacks clear business identity or contact details. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. The site is moderately optimized for mobile and SEO but does not implement advanced accessibility or performance enhancements. No analytics or tracking technologies were detected, indicating minimal user data collection. From a security perspective, the site lacks HTTPS enforcement and security headers, exposing it to potential risks. No privacy, cookie, or terms of service policies are present, which raises compliance concerns, especially regarding GDPR. The absence of WHOIS registration data further undermines trust and legitimacy. Overall, the security posture is weak, and the site would benefit from implementing standard web security and privacy practices. The overall risk assessment suggests moderate operational risk due to missing security controls and unclear domain legitimacy. Strategic recommendations include securing the site with HTTPS, publishing privacy and cookie policies, adding verifiable contact information, and improving technical SEO and accessibility to enhance user trust and compliance.
- SSalud y Enfermedad
fdctimes.com
Healthcare
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Salud y Enfermedad' is a Spanish-language health information portal providing articles and educational content on a variety of health topics including alternative medicine, cancer, dental health, nutrition, and family health. The site targets Spanish-speaking individuals seeking general health knowledge. The business model appears to be content publishing without evident monetization or e-commerce features. The domain is registered since 2015 and hosted via Cloudflare, indicating a stable but basic technical infrastructure. The site uses simple HTML and CSS without advanced frameworks or CMS, resulting in basic mobile optimization and accessibility. Security posture is minimal with no DNSSEC, no security headers, and no visible privacy or cookie policies, which poses compliance and trust challenges. No contact or incident response information is provided, limiting user trust and security transparency. Overall, the site is functional but lacks modern security and privacy features.
- AAlyssa Kapito
alyssakapito.com
Other · United States
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website alyssakapito.com appears to represent an individual or brand named Alyssa Kapito, likely focused on art or design, as indicated by the gallery and studio navigation and the main image content. The site is built using modern web technologies including Next.js and Sanity CMS, providing a responsive and visually oriented user experience. However, the content is minimal and lacks detailed business or contact information, which limits its commercial or professional impact. From a technical perspective, the site uses a modern React-based framework with server-side rendering capabilities, ensuring good performance and mobile optimization. There is no evidence of analytics or tracking scripts, which may reflect a privacy-conscious approach or a minimal digital footprint. Security headers and SSL configuration details were not available, but the site is served over HTTPS as implied by the image URLs. The security posture is moderate but limited by the absence of privacy policies, cookie consent mechanisms, and contact information for incident response or data protection officers. The WHOIS data query returned no registration information, suggesting the domain may be unregistered, expired, or privacy-protected, which raises concerns about legitimacy and trustworthiness. No signs of malicious content or adult material were found, and the site appears safe for general audiences. Overall, the site functions as a basic portfolio or brand presence with room for improvement in compliance, security transparency, and business credibility. Strategic recommendations include adding privacy and cookie policies, publishing contact details, implementing security headers, and clarifying domain registration status to enhance trust.
- MMONOLIF
monolif.co
Technology · United Kingdom
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
MONOLIF is a small creative micro-studio based in Bristol, UK, specializing in bespoke website design and digital experiences tailored primarily for startups and entrepreneurs. The company emphasizes a fast, sophisticated, and unique approach to crafting online identities that resonate with their clients' innovative ethos. Their portfolio showcases a range of projects including web design, branding, product design, and creative direction, highlighting their niche market position as a boutique digital agency. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Vercel, and managed with Sanity CMS, reflecting a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though the absence of explicit privacy and cookie policies indicates room for compliance improvement. The WHOIS data is fully redacted, a common practice for small studios to protect privacy, which slightly impacts transparency but is justified given the business type. Overall, MONOLIF presents a professional, trustworthy, and technically sound digital presence with minor gaps in privacy compliance.
- KKrinsky Design
krinskydesign.com
Real Estate · United States
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Krinsky Design is a boutique creative design studio specializing in bespoke branding and marketing solutions for luxury real estate and premium brands primarily in New York and South Florida. The company positions itself as a niche agency delivering strategic branding, identity design, and marketing collateral with a focus on high-end clientele. Their website showcases a professional portfolio of projects and clear contact information, supporting their market presence as a specialized boutique agency. Technically, the website is built on a modern stack including Next.js and Sanity CMS, optimized for performance and mobile responsiveness. The site uses modern JavaScript frameworks and multimedia content effectively, providing a fast and engaging user experience. However, some security best practices such as security headers and privacy policies are missing, which could be improved to enhance trust and compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The absence of privacy and cookie policies, as well as missing WHOIS data, slightly reduce the overall trustworthiness. No WAF or blocking mechanisms were detected, indicating full accessibility. The domain WHOIS data is missing, which is inconsistent with the business's claimed founding date, suggesting possible privacy protection or recent domain registration. Overall, the website is professional and well-designed but would benefit from improved privacy compliance and security headers. The domain registration inconsistency warrants further verification to ensure legitimacy and trust. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing vulnerability disclosure information to strengthen security posture and compliance.
- KKieran Parker
kprkr.co
Technology · United Kingdom
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
KPRKR is the personal website of Kieran Parker, a seasoned Product Designer specializing in early-stage startup product development. The site highlights his experience, client portfolio, and unique business model offering equity or revenue share partnerships. Technically, the site is built on modern frameworks such as Next.js and Sanity.io, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. The WHOIS data is fully redacted, typical for personal domains, and does not raise immediate trust concerns given the professional presentation. Overall, the site serves as a credible portfolio and contact point for potential clients.
- EErin Fleming
erinfleming.design
Technology · United States
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Erin Fleming is a digital designer specializing in clean, modern, and minimal website design, focusing on simplicity and user experience. The website serves as a professional portfolio showcasing a variety of live and conceptual projects primarily in UI and UX design. The target audience includes potential clients, collaborators, and employers in the creative and digital design sectors. The business operates as a small-scale, personal design service entity with a strong emphasis on aesthetic quality and usability. Technically, the website is built using modern web technologies including Next.js and Sanity CMS, ensuring fast performance and excellent mobile optimization. The use of Fathom Analytics indicates a privacy-conscious approach to user tracking. However, the absence of explicit privacy and cookie policies suggests room for improvement in compliance and transparency. The site is well-structured with clear navigation and professional branding consistency. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for a personal portfolio site. Overall, the site demonstrates a good security posture but would benefit from enhanced compliance documentation and security best practices. The overall risk is low given the nature of the site and its content. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and considering a vulnerability disclosure policy to enhance trust and compliance.
- OOver-Stimulated
over-stimulated.com
Technology
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Over-Stimulated is a small, independent design engineering studio specializing in bridging the gap between creative vision and technical execution for web projects. Led by founder Will Thomson, the studio partners with creative studios and founders to deliver precise and high-quality web solutions. The company emphasizes attention to detail, aesthetics, and performance, positioning itself as a niche player in the technology and design services sector. The website reflects a modern, professional digital presence built with Next.js and React, incorporating advanced media playback and minimal tracking via Fathom Analytics. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. The absence of WHOIS data raises some concerns about domain registration transparency, though the site content and external partnerships suggest legitimate business operations. Strategic recommendations include enhancing privacy compliance, adding security policies, and verifying domain registration details to improve trust and compliance.
- OOtherdays® Studio
otherdays.studio
Technology
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Otherdays® Studio is a strategic design studio focused on partnering with venture capitalists and mission-driven startups to build brands and software that bridge technology with humanity. The company positions itself as a niche design partner aiming to support founders and investors in creating long-term impact through strategic design collaborations. The business appears to be recently founded in 2024 and operates within the technology sector, targeting startups and investors with a focus on mission-driven projects. Technically, the website is built using modern frameworks such as Next.js and React, with content managed via Sanity CMS. However, the site currently suffers from a client-side application error that prevents full content access, limiting the ability to assess performance, mobile optimization, and accessibility. Security posture is weak due to lack of visible security headers and absence of privacy or cookie policies. WHOIS data is unavailable due to privacy protections and malformed queries, which reduces trust but is consistent with a new small business protecting its registrant information. Overall, the website is not fully functional and lacks critical compliance and security features, resulting in a low trust and quality score.
Media · China
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.iqshw.com operates as a Chinese-language content portal focused on QQ-related activities, software downloads, and lifestyle information. It targets QQ users and internet activity participants, providing news, tips, and promotional event details. The site appears to be a niche media outlet with a small-scale operation, founded around 2015, and primarily serving a Chinese audience. Technically, the site uses legacy JavaScript libraries such as jQuery 1.8.3 and a CMS likely to be EmpireCMS. The design and content quality are good, but mobile optimization and accessibility are basic. Security posture is moderate, with no visible HTTPS enforcement or security headers, and outdated libraries pose potential risks. Privacy compliance is poor, with no visible privacy or cookie policies. The domain WHOIS data is missing or unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain registration transparency.
- 1115源码网
115s.com
Technology · China
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
115源码网 is a Chinese-language platform offering a large collection of free source code downloads, including PHP, Java, game servers, and website templates, alongside technical tutorials covering various programming languages and development topics. The site targets developers, programmers, and technology enthusiasts seeking free resources and educational content. It operates a freemium model with VIP memberships that provide enhanced download limits and access. Technically, the website is built on WordPress using the ripro-v2 theme, leveraging Bootstrap and jQuery for frontend functionality. The site is mobile-optimized and regularly updated with new content. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance policies. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy, although the site content and operation appear professional and active. No WAF or blocking mechanisms were detected, allowing full content access.
- 源码资源网
563133.com
Technology · China
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website '源码资源网' is a Chinese-language platform specializing in the distribution and sharing of source code, software tools, video tutorials, and website templates. It targets developers, programmers, and hobbyists interested in software development resources. The site positions itself as a niche resource hub within the domestic Chinese market, offering a variety of downloadable content including commercial and game source codes. Technically, the site uses a combination of HTML5, CSS3, JavaScript libraries such as jQuery and clipboard.js, and likely a PHP-based backend framework (ThinkPHP). The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site uses HTTPS but lacks important security headers and formal privacy or cookie policies, which impacts compliance and trust. The domain WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and domain transparency.
搜库资源网soku.wang
Education · China
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
搜库资源网 is a well-established Chinese virtual resource download platform offering a wide range of downloadable content including website source codes, game source codes, educational materials for primary and secondary schools, online earning courses, and movie commentary scripts. The platform targets Chinese-speaking users interested in these digital resources and operates a membership system with free and paid content. Technically, the website is built on the Z-BlogPHP CMS platform, utilizing common JavaScript libraries such as jQuery, Swiper, and Prism for enhanced user experience. The site is mobile-optimized and features a structured navigation system with categorized content. Security-wise, the site uses HTTPS but lacks visible advanced security headers, which presents an area for improvement. The absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Overall, the site is content-rich and functional but would benefit from enhanced security practices and clearer privacy compliance mechanisms.
- 神神農中藥網
yesae.com
Healthcare
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website '神農中藥網' is a Traditional Chinese Medicine informational portal providing extensive content on herbal medicines, medicinal names, Chinese patent medicines, prescriptions, folk remedies, medicinal diets, and medicinal wine formulas. It targets Chinese-speaking audiences interested in traditional health practices. The site appears to be a niche content provider without clear business registration or contact information, focusing on knowledge dissemination rather than commercial transactions. Technically, the site is built with basic HTML, CSS, and JavaScript, lacking modern frameworks or CMS platforms. It uses Google Adsense for advertising but does not implement advanced analytics or tracking. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and absence of privacy or cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the active content. Overall, the site is safe for general audiences but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness.
- 阳阳光健身网
52122.com
Other · China
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
阳光健身网 is a Chinese fitness and wellness content website established in 2010, providing articles and tutorials on various fitness topics including martial arts, yoga, outdoor sports, and general health. The site targets a general audience interested in fitness and wellness, offering informational content without commercial complexity. Technically, the site uses basic HTML, CSS, and JavaScript with Cloudflare DNS services but lacks modern CMS or advanced frameworks. Security posture is basic with HTTPS enabled but missing important security headers and cookie consent mechanisms. Privacy compliance is minimal with only a basic copyright page referencing privacy. Overall, the site is functional but could benefit from modernization and enhanced security and privacy practices.
- SSağlığı ve Hastalıkları
globalbizfin.com
Healthcare · Turkey
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Sağlığı ve Hastalıkları' is a Turkish-language health information portal offering articles on various health topics including alternative medicine, cancer, dental health, diet, family health, mental health, and public health safety. It targets Turkish-speaking individuals seeking health knowledge and advice. The business model appears to be content publishing without evident commercial transactions or services. The site is small in scale and niche-focused within the healthcare industry. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No hosting provider or infrastructure details are evident. Security posture is weak, with no HTTPS confirmation, no security headers, and no privacy or cookie policies. The site lacks contact information and incident response details, limiting trust and compliance. Security evaluation highlights the absence of HTTPS and privacy compliance as critical weaknesses. The missing WHOIS registration data further undermines domain legitimacy and trustworthiness. No signs of malware or adult content were found, but the site does not follow best practices for user data protection or transparency. Overall, the site presents low risk content but suffers from poor security and compliance maturity. Strategic improvements in HTTPS deployment, privacy policy publication, and domain registration transparency are recommended to enhance trust and security posture.
- HHälsa och Sjukdom
sjukdom.online
Healthcare · Sweden
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Hälsa och Sjukdom is a Swedish language health information website providing articles and resources on various health topics including alternative medicine, cancer, family health, mental health, and nutrition. The site targets Swedish-speaking individuals seeking general health knowledge. The business model appears to be content publishing without direct commercial transactions or services. Technically, the website uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is minimal with no visible security headers or privacy policies, and no HTTPS confirmation in the provided data. The site lacks contact information and compliance documentation, which reduces trustworthiness and business credibility. Overall, the site is safe for general audiences but requires significant improvements in privacy, security, and business transparency to enhance its professional standing.
- GGesundheitsratgeber
alskrankheit.net
Healthcare
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.alskrankheit.net operates as a German-language health information portal offering a wide range of articles on topics such as alternative medicine, cancer, mental health, dental care, and public health. It targets a general audience seeking health advice and information. The site structure is straightforward with multiple categorized sections, but the overall design and content quality are basic and lack professional polish. Technically, the site uses simple HTML and CSS without advanced frameworks or CMS detected. There is no evidence of HTTPS or security headers, which poses a risk to user data security and trust. The absence of privacy, cookie, and terms of service policies further indicates low compliance with modern data protection standards. The WHOIS data is missing or indicates the domain is not registered, which is a significant red flag for legitimacy and trustworthiness. No contact information or social media presence is provided, limiting user engagement and support options.
- GGezondheid en ziekte
gezond.win
Healthcare
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Gezond.win is a Dutch language health information website providing a broad range of articles and resources on health topics such as alternative medicine, cancer, dental health, diet, family health, mental health, and public health safety. The site targets Dutch-speaking individuals seeking health education and information. It operates as a content provider without evident commercial transactions or services. Technically, the site is built with basic HTML and CSS, includes an AddThis sharing tool, and is moderately optimized for mobile and SEO. Security posture is minimal with no advanced headers or policies detected, and no contact or privacy policies are present, which limits compliance and trust. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness. Overall, the site is functional but basic in design and security.
- SSalute e malattia
itsalute.com
Healthcare · Italy
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.itsalute.com is an Italian language health information portal providing articles and insights on various health topics including alternative medicine, cancer, nutrition, family health, and public health safety. It targets the general Italian-speaking public seeking health-related knowledge. The site structure is basic with a simple HTML/CSS design and limited interactive features. There is no evidence of advanced CMS or modern frameworks. The site lacks privacy, cookie, and terms of service policies, and no contact or social media information is provided, which limits business credibility and user trust. Technically, the site uses standard HTML and CSS with minimal JavaScript. There is no indication of HTTPS enforcement or security headers in the provided data, which poses security risks. The WHOIS lookup failed to retrieve domain registration details, raising concerns about domain legitimacy and ownership transparency. No analytics or advertising scripts were detected, suggesting minimal tracking or marketing infrastructure. From a security perspective, the absence of HTTPS and security headers, combined with missing privacy and contact information, indicates a low security posture. The site does not demonstrate compliance with GDPR or other privacy regulations. No incident response or vulnerability disclosure information is available. Overall, the site is functional but lacks critical security and compliance features. The overall risk assessment is moderate to high due to missing domain registration data and weak security practices. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, publishing clear contact and incident response information, and improving security headers to enhance trust and compliance.
- IInformação em Saúde
365saude.com.br
Healthcare · Brazil
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.365saude.com.br is a Portuguese language health information portal providing a variety of articles and educational content on health topics such as cancer, alternative medicine, dental health, nutrition, family health, and more. It targets the general Portuguese-speaking public interested in health and wellness information. The business model is primarily content publishing and information dissemination, positioning itself as a niche health knowledge resource in Brazil. The site is small in scale with basic content quality and moderate branding consistency. Technically, the site uses standard web technologies including HTML, CSS, and JavaScript, with Google Tag Manager and Google Analytics for tracking. It is hosted behind Cloudflare DNS services, ensuring HTTPS availability and some level of protection. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. No CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy, cookie, or terms of service policies. No contact or incident response information is available, and no forms are present to assess input security. Google Analytics tracking is implemented, but privacy compliance is poor due to missing policies and consent mechanisms. Overall, the security posture is moderate but could be improved significantly. The overall risk assessment indicates a functional but basic health information site with moderate trustworthiness. Strategic recommendations include implementing privacy and cookie policies, adding security headers, providing contact and incident response information, and improving mobile and accessibility features to enhance user trust and compliance.
- 【【锦宁宝宝网】是妈妈们育儿与亲子交流的社区!_原济南宝宝网
jnbaobao.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
锦宁宝宝网 is a Chinese-language parenting and childcare community website offering a variety of articles and resources for mothers and parents, focusing on pregnancy, newborn care, and child development. The site targets a regional/local audience interested in parenting knowledge and community interaction. Technically, the website is built with basic HTML, CSS, and JavaScript, lacking modern frameworks or CMS indications. The site is accessible without WAF or security challenges but shows limited technical sophistication and lacks HTTPS confirmation in the provided data. Security posture is weak due to missing HTTPS, security headers, and privacy compliance documents. No contact or incident response information is available, reducing trust and business credibility. Overall, the site provides relevant content but requires significant improvements in security, privacy, and technical modernization to enhance trustworthiness and compliance.
Other
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website hbmami.com is currently inaccessible, serving only a 503 Service Unavailable error page likely due to Cloudflare protection or site downtime. No business information, contact details, or content is available to assess the company's operations, market position, or services. The domain is registered with Cloudflare, Inc. since 2015, indicating a stable registration but no further legitimacy signals can be derived from the site content. Technically, the site lacks any detectable technologies, metadata, or SEO elements, and no security headers or SSL details are provided. The security posture is weak due to lack of accessible content and missing security best practices. Overall, the site cannot be properly evaluated for business credibility or compliance due to its unavailability.
- 中中品网
peelcn.com
Other · China
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
中品网 (www.peelcn.com) is a Chinese lifestyle content website offering practical and interesting knowledge on daily life, home care, clothing maintenance, safety, and automotive topics. The site targets a general audience interested in lifestyle tips and informational content. Technically, the site uses a custom CMS with JavaScript, jQuery, and analytics tools like 51.la and Cloudflare Insights. It is hosted behind Cloudflare CDN with HTTPS enabled, providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or incident response policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the site is content-rich and professionally presented but would benefit from improved privacy compliance and clearer business contact information.
- 中中尚网
yeelcn.com
Media · China
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
中尚网 is a Chinese women's fashion and lifestyle media portal providing comprehensive content on fashion, beauty, entertainment, and health targeted at Chinese-speaking female audiences. The website offers a broad range of articles and features covering trending topics in women's fashion, skincare, makeup, and emotional well-being, positioning itself as a reputable source in the Chinese female lifestyle media sector. Technically, the site uses a custom CMS with common JavaScript libraries such as jQuery and lazy loading for images, and integrates analytics services from Baidu and 51.la. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structure appear professional and consistent with a legitimate media business. Overall, the site is functional and content-rich but requires improvements in privacy compliance, security best practices, and domain registration transparency to enhance trust and regulatory adherence.
- 中中当网
deelcn.com
Technology · China
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.deelcn.com, branded as 中当网, operates as a Chinese software and game download platform offering a wide range of free PC and mobile applications, including games and technical articles. It targets computer and mobile enthusiasts seeking green, safe, and cracked software with a clean user experience. The site is moderately sized with a consistent brand presence and good content quality. Technically, it employs standard web technologies such as HTML5, CSS, JavaScript, jQuery, and uses Cloudflare CDN and analytics services like 51.la and Cloudflare Insights. The site is mobile-optimized and has good SEO and navigation structure. Security-wise, it enforces HTTPS and includes several security headers, but lacks visible privacy and cookie consent mechanisms and does not provide explicit security incident response or vulnerability disclosure information. WHOIS data is unavailable, which raises some legitimacy concerns but the active and professional nature of the site mitigates this somewhat. Overall, the site scores moderately well in content quality, technical implementation, and security posture but has room for improvement in privacy compliance and business credibility.
- 无锡中正锅炉有限公司
wxzzgl.com
Energy · China
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
无锡中正锅炉有限公司是一家专注于工业锅炉制造的中型企业,拥有超过36年的行业经验,主要产品包括燃气锅炉、蒸汽锅炉、生物质锅炉等。公司持有多项国家及国际认证,具备较强的制造资质和行业地位。网站内容丰富,面向工业客户,提供详细产品信息和客户案例,支持在线咨询和电话销售热线。技术基础包括多种现代网页技术和多渠道数据分析工具,网站设计专业且移动优化良好。安全方面,网站使用HTTPS,但缺少安全头信息和隐私政策,存在一定合规风险。WHOIS信息缺失降低了域名透明度和信任度,建议加强域名注册信息管理和隐私合规。整体网站表现良好,适合工业客户使用,但需完善安全和隐私合规措施以提升信任和合规水平。