Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
44,401–44,450 of 99,066
JIDDOjiddo.ca
Retail · Canada
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
JIDDO is a small retail business specializing in Arabic specialty teas, offering a variety of black and green tea blends with Middle Eastern flavors. The website is professionally designed using modern web technologies including Webflow CMS, AWS hosting for media, and analytics tools such as Google Tag Manager and Microsoft Clarity. The site provides a good user experience with clear navigation and mobile optimization. Security posture is strong with HTTPS enabled and no exposed sensitive data, though security headers could be improved. Privacy compliance is lacking due to absence of privacy and cookie policies. WHOIS data is not publicly available, indicating privacy protection, which is common for small retail businesses. Overall, the site appears legitimate and trustworthy but would benefit from enhanced privacy disclosures and security best practices.
Blurr Bureaublurrbureau.com
Media · Australia
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Blurr Bureau is a creative design and venture studio founded in 2019, operating globally with offices in Melbourne and New York. The company specializes in building brands that connect purpose with profit, offering services such as brand and packaging design, website development, brand experience, and advisory. Their client portfolio includes notable brands like Pepsi Co., Mercedes-Benz, and Live Nation, positioning them as a reputable player in the media and creative industry. The website reflects a professional and modern digital presence built on WordPress, optimized for performance and mobile responsiveness. Technical infrastructure includes use of jQuery, Google Analytics, Ninja Forms, and WP Rocket for caching and optimization, hosted by Bluehost Inc. Security posture is generally good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, representing areas for improvement. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet GDPR and other regulations. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.
- Allan Pooley
allanpooley.com
Technology
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Allan Pooley is a design-focused freelance web developer specializing in building beautiful, performant, and interactive web experiences. The website showcases a professional portfolio with collaborations with various design studios and commercial clients, highlighting expertise in modern web technologies such as TypeScript, React, NextJS, and headless Shopify development. The business operates as a small freelance entity targeting clients seeking bespoke web development services. Technically, the website is built on a modern stack with good performance and mobile optimization, hosted likely on Vercel. Security posture is generally good with HTTPS enforced and script isolation techniques, but lacks some security headers and formal privacy and cookie policies. The absence of WHOIS registration data raises some legitimacy concerns, though the active and professional website content supports the business's authenticity. Overall, the site is well-designed and trustworthy but would benefit from enhanced privacy compliance and security best practices.
Bed Intentionsbedintentions.com
E-commerce · Australia
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Bed Intentions is a niche e-commerce brand specializing in modern wellness and personal pleasure products, targeting an adult audience. The company operates primarily through a Shopify-based online store, leveraging a variety of marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Okendo Reviews to enhance customer engagement and track performance. The website is professionally designed with good content quality and consistent branding, catering to a mature market segment with adult-oriented products.
Koru Design S.r.l.korudesign.it
E-commerce · Italy
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Koru Design S.r.l. is a newly established Italian company specializing in sustainable, artisanal furniture sold primarily through an e-commerce platform. The company emphasizes quality craftsmanship, eco-conscious materials, and minimalist design inspired by Japanese, Scandinavian, and Mediterranean aesthetics. Their market position targets discerning consumers seeking durable and environmentally responsible furniture. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, integrated with Shopify for e-commerce functionality and Sanity.io for content management. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, DNSSEC, and cookie consent management, though explicit security headers and incident response policies are absent. Overall, the domain registration aligns well with the business claims, indicating legitimacy. The website is professional, trustworthy, and privacy compliant, with room for improvement in security transparency and contact options.
- OOutkast Studio
outkast.studio
Technology · United States
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Outkast Studio is a small, specialized web development studio focused on partnering with top designers and agencies to deliver high-quality, creative web development solutions. Their business model centers on providing development-only services, emphasizing interaction design and automation development. The company leverages modern technologies such as Next.JS, React, GSAP, and Sanity CMS, hosted primarily on Vercel, ensuring a fast and responsive user experience. The website demonstrates excellent design quality and professionalism, supported by strong testimonials and a curated portfolio of partner projects. However, the absence of publicly available WHOIS data due to privacy protection is noted but justified given the business type. Technically, the website is built on a modern stack with good SEO and mobile optimization. The use of privacy-focused analytics (Fathom) indicates a moderate approach to user tracking. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the lack of explicit security headers and privacy/cookie policies represents areas for improvement. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and compliance. Overall, Outkast Studio presents a credible and professional digital presence with a strong focus on technical excellence and client collaboration. Strategic improvements in privacy compliance and security transparency would further strengthen their risk posture and market trust.
- FFood Additives
cdysgs.com
Other
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website cdysgs.com serves as an educational resource focused on food additives, ingredients, and color additives, providing detailed information referencing regulatory bodies such as the FDA and IFIC. It targets a general audience interested in food safety and nutrition, offering multilingual content and linking to partner informational sites. The business model is primarily informational with no evident commercial transactions or user data collection. Technically, the site is hosted on Cloudflare with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for security improvements. The site is basic in design and mobile optimization but provides relevant and well-structured content. Security posture is moderate with no detected vulnerabilities but missing key policies and contact information, which impacts compliance and trust. Overall, the site is legitimate and stable with a domain age consistent with its content and purpose.
- 养养生知识堂>>饮食养生,四季养生,健康养生,美容养生,中医养生小常识
85505.com
Healthcare · China
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.85505.com operates as a Chinese health and wellness knowledge portal, focusing on traditional Chinese medicine, dietary health, fitness, and disease prevention. It targets a general audience interested in health maintenance and lifestyle improvement, primarily within the Henan region of China. The site offers a variety of articles and resources but lacks modern digital maturity features such as HTTPS, privacy policies, and advanced analytics. Technically, the site is built on basic HTML and JavaScript without evidence of modern frameworks or CMS platforms. The performance and mobile optimization are basic, with no detected security headers or SSL encryption, indicating a weak security posture. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security-wise, the site lacks critical protections such as HTTPS and privacy compliance mechanisms, exposing users to potential risks. No incident response or vulnerability disclosure information is available. The overall risk is moderate due to the nature of content but diminished trustworthiness due to missing domain registration data and security best practices. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and clarifying domain registration information to enhance trust and compliance.
- FFood & Drink
drinkfood.biz
Other
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.drinkfood.biz is a multilingual content platform focused on food and drink recipes, offering articles in multiple languages covering various cuisines and cooking techniques. The site targets a general audience interested in cooking and food preparation, providing recipe content without apparent commercial transactions or direct business services. Technically, the site uses basic HTML and CSS with no detected advanced frameworks or CMS, and the design and navigation are functional but basic. There is no evidence of HTTPS or security headers from the provided data, and no privacy or cookie policies are present, indicating a low level of privacy compliance and security posture. The absence of WHOIS data and contact information reduces the business credibility and trustworthiness of the site. Overall, the site appears to be a small-scale content publisher with limited technical and security maturity.
- DDanmark HEALTH AND DISEASE
winesino.com
Healthcare
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website winesino.com operates as a multilingual health information portal, aggregating articles related to health and disease across various languages and regional domains. It targets a general audience seeking health-related knowledge rather than providing commercial services. The business model appears to be content publishing and dissemination without direct user engagement or e-commerce. The domain is well-established since 2015, indicating a stable presence in its niche. Technically, the site uses basic HTML and CSS with Cloudflare DNS services but lacks advanced frameworks or CMS indicators. The site shows moderate performance and basic mobile optimization but lacks modern SEO and accessibility features. No analytics or tracking technologies are detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers, DNSSEC is not enabled, and there is no explicit confirmation of HTTPS usage in the provided data. No privacy or cookie policies are present, and no contact or incident response information is available, indicating low privacy compliance and limited security posture. The domain registration is transparent and consistent with the website content, supporting moderate legitimacy. Overall, the website is functional as an informational resource but requires significant improvements in privacy compliance, security best practices, and business transparency to enhance trust and user confidence.
- 快快乐旅行网
kllvx.com
Hospitality · China
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
快乐旅行网 is a Chinese-language travel information website providing content such as travel news, tourist attraction introductions, travelogues, and cultural customs. The site targets Chinese-speaking travelers interested in domestic and international tourism. The business model appears to be content-driven with user registration and membership features, positioning itself as a niche travel portal. Technically, the site uses classic ASP technology with basic HTML and CSS, lacking modern frameworks or CMS. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak, with no HTTPS enforcement or security headers detected, and outdated technology increasing risk. Privacy and cookie policies are absent, and WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.
Pagypagy.co
Technology · Iceland
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Pagy is a technology startup offering a free and easy-to-use drag-and-drop website builder platform that enables users to create responsive websites quickly without coding. The platform targets individuals and small businesses seeking simple website creation with features like templates, custom domains, forms, and media embedding. The business operates on a freemium SaaS model with tiered subscription plans. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Vercel, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the website builder market.
- DataFast
datafa.st
Technology
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
DataFast is a newly launched SaaS analytics platform designed specifically for entrepreneurs and startups to track user journeys, conversions, and revenue attribution with simplicity and actionable insights. The website presents a professional and modern interface built on Next.js and React, optimized for performance and mobile responsiveness. User testimonials and social media endorsements provide strong trust signals, positioning DataFast as a competitive alternative to established analytics tools. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is good with HTTPS and domain protections but could be improved with additional security headers and published policies. Overall, DataFast shows strong business credibility and technical maturity for a startup but should address compliance and security transparency to enhance trust and regulatory adherence.
StealthModegostealthmode.com
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
StealthMode is a small technology-focused business offering a SaaS platform for automated cold outreach campaigns targeting B2B customers. The service provides daily updated email lists sourced from recent Product Hunt launches and enables stealth-mode emailing with personalized templates. The website is built on a modern Next.js and React stack, optimized for mobile and SEO, and includes basic analytics via Umami. However, the absence of privacy, cookie, and terms policies, combined with missing WHOIS domain registration data, raises concerns about compliance and legitimacy. Security posture is moderate with HTTPS but lacks security headers and incident response information. Overall, the business appears professional but would benefit from enhanced transparency and compliance documentation.
- TweetDetective
tweetdetective.com
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
TweetDetective is a specialized technology company offering an AI-powered tool designed to detect AI-generated text on Twitter. Their primary service is delivered via a Chrome extension that provides real-time analysis and probability scores for tweets, helping users discern authentic content from AI-generated text. The company targets Twitter users, professionals, and authenticity-conscious individuals, positioning itself as a niche player in the AI detection market. The business model is subscription-based, with clear pricing and a focus on user-friendly, fast, and accurate detection capabilities. Technically, the website is built on a modern stack including Next.js and React, with Tailwind CSS for styling. It integrates multiple analytics platforms such as Google Analytics, Plausible, and Umami, indicating a mature approach to user behavior tracking and performance monitoring. The site is well-optimized for mobile devices, has good SEO practices, and offers a clean, professional user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting good security hygiene. However, it lacks a cookie consent banner despite using tracking scripts, and no explicit security or incident response policies are published. The absence of WHOIS data for the domain is a notable anomaly, which may affect trustworthiness assessments. Overall, the security posture is solid but could be improved with enhanced privacy compliance and transparency. The overall risk assessment suggests a generally trustworthy and professional service with minor compliance gaps. Strategic recommendations include implementing a cookie consent mechanism, publishing a security policy or incident response page, and clarifying domain registration details to enhance trust and compliance.
- Emoji Generator AI
emojigeneratorai.com
Technology
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Emoji Generator AI is a technology-focused company offering an AI-powered emoji creation platform that enables users to generate unique and personalized emojis quickly. The website is professionally designed, targeting a general audience interested in custom emoji design, with a business model based on free trials and paid plans. The platform supports multiple emoji styles and customization options, positioning itself as a niche player in the AI creative tools market. Technically, the site uses modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects like cookie consent and incident response policies are missing. The absence of WHOIS data raises concerns about domain legitimacy, which impacts overall trustworthiness despite the professional presentation. Strategic improvements in privacy compliance and transparency would enhance credibility and user trust.
LaunchSquadlaunchsquad.club
Technology
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
LaunchSquad is a niche technology platform offering curated alternatives to Product Hunt for startups and entrepreneurs looking to launch their products. The website aggregates various launch platforms, directories, and communities, providing affiliate discounts and promotional badges to enhance launch credibility. The business model centers on referral marketing and community engagement, targeting startup founders and product launchers. Technically, the site is built on a modern React and Next.js stack, delivering a responsive and well-structured user experience with good SEO and mobile optimization. Security posture is solid with HTTPS and standard security headers, though privacy compliance could be improved by adding cookie consent mechanisms. The absence of public WHOIS data reduces transparency but is typical for small startups using privacy protection. Overall, the platform presents a professional and trustworthy service in its niche.
- AI Directories
thedirectori.es
Technology
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
AI Directories is a specialized service platform that helps AI product creators and startups launch their products across over 100 AI-focused directories. The service aims to increase domain authority, secure valuable backlinks, and improve SEO performance for its clients. Founded in 2023, the company operates a subscription and one-time payment model, targeting indie makers and startups seeking to boost online visibility and traffic. The website is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Payment processing is handled via Stripe, and analytics are collected using Microsoft Clarity. Security posture is strong with HTTPS and security headers implemented, though the site lacks explicit cookie consent and detailed security policies. Overall, the business demonstrates a high level of professionalism and trustworthiness with transparent WHOIS data and active social media presence.
AI Product Hiveaiproducthive.com
Technology
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
AI Product Hive is a technology-focused community platform primarily serving product managers, developers, designers, and product teams interested in AI. The platform operates as a Slack-based community with over 1000 AI professionals, positioning itself as a niche network for AI product professionals. The website is built on WordPress using the Kadence theme and blocks, hosted on Linode, and employs SEO best practices with Yoast SEO. However, Google Analytics is installed but not configured, indicating incomplete analytics setup. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is accessible without WAF or blocking mechanisms, with good design and user experience but needs improvements in privacy and security practices.
ShipFastshipfa.st
Technology
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
ShipFast is a technology startup offering a NextJS boilerplate designed to accelerate the launch of SaaS products and web applications. Positioned as a comprehensive developer tool, it integrates payment processing, email transactional services, user authentication, SEO, and UI components, targeting indie makers and startup founders. The product leverages modern web technologies and AI compatibility to enhance developer productivity and speed to market. The website demonstrates strong digital maturity with excellent design, mobile optimization, and SEO practices. Security posture is solid with HTTPS and domain privacy protection, though explicit security policies and cookie consent mechanisms are absent. Overall, ShipFast presents a credible and professional offering with a growing user base and community engagement.
CleanSnapcleansnap.co
Technology
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CleanSnap is a small technology startup offering a free online tool designed to beautify and enhance screenshots by adding backgrounds, text, emojis, and other effects. The website positions itself as a niche solution for users seeking clean and professional images of their screenshots, targeting a general audience including social media users and content creators. The business model appears to be freemium or free with potential viral growth through sharing. Technically, the site is built on modern frameworks such as Next.js and React, with Tailwind CSS for styling, and integrates analytics and advertising scripts from Umami, Ahrefs, and TinyAdz. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate; HTTPS is implied but no explicit security headers are detected, and no privacy or cookie policies are present, which is a compliance gap. WHOIS data is fully redacted, indicating privacy protection, which is common for startups but reduces transparency. Overall, the site is functional, safe, and professional but would benefit from improved privacy compliance and security hardening.
Most Based AI Tools & Tools Directory - BasedToolsbasedtools.ai
Technology
69Medium
NIS2 65 · GDPR 70
NIS2 65 · GDPR 70
BasedTools.ai operates as a leading AI tools directory, offering a comprehensive catalog of over 12,000 AI websites and tools. The platform targets AI enthusiasts, developers, and businesses seeking to discover and compare AI products. It positions itself as a community-driven hub with features such as product submissions and a Discord community for engagement. Technically, the website is built using modern web technologies including Next.js and React, ensuring a responsive and user-friendly experience. The site integrates privacy-conscious analytics via Plausible and maintains HTTPS for secure communications. However, the absence of visible security headers and privacy policies indicates areas for improvement in compliance and security transparency. The WHOIS data is privacy protected, which is typical for such platforms, and no suspicious indicators were found. Overall, the website demonstrates a solid technical foundation and market presence but would benefit from enhanced privacy and security disclosures.
OpenToolsopentools.ai
Technology · United States
66Medium
NIS2 55 · GDPR 53
NIS2 55 · GDPR 53
OpenTools.ai is a technology platform providing a comprehensive directory and ranking of over 10,000 AI tools, curated by a large community of users. The website targets a broad audience interested in discovering and comparing AI tools, positioning itself as a leading resource with millions of monthly visitors. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS and CDN services, and integrates analytics tools like PostHog and Google Tag Manager. The site demonstrates good performance, mobile optimization, and SEO practices. However, it lacks visible privacy and cookie policies, security headers, and direct contact information, which are areas for improvement. The domain is relatively new, registered in 2023 with privacy protection, which is typical for tech startups. Overall, the security posture is moderate with room for enhancements in policy transparency and security best practices.
- PPascal Poredda
notion-crm-export.com
Technology
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website notion-crm-export.com offers a specialized service enabling users to export their Notion CRM data, including sub-page comments, into CSV format for integration with platforms such as Airtable, Hubspot, Zendesk, and Salesforce. The business is positioned as a niche SaaS provider with a focus on data migration and integration for Notion CRM users. The company appears to be newly established in 2024, with clear pricing plans and a small business profile. Technically, the site is built on a modern stack using Next.js and React, with good performance, mobile optimization, and accessibility. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.
Infacturainfactura.com
Technology · Spain
74Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Infactura is a newly launched Spanish technology company offering an online invoicing platform tailored for freelancers and small to medium-sized enterprises. The service emphasizes quick, legally compliant invoice generation with customization options and easy distribution. Positioned as a modern, user-friendly SaaS solution, Infactura targets growing brands and agencies seeking to optimize their billing processes. The website reflects a professional and consistent brand image with a strong focus on usability and compliance. Technically, the website is built on a modern React and Next.js stack, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The integration of analytics and marketing tools like Google Tag Manager, Umami Analytics, and Crisp Chat indicates a mature digital infrastructure. SEO and accessibility practices are well implemented, supporting good discoverability and user experience. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks explicit security headers and formal security or incident response policies on the site. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. The domain is very new, which may affect perceived trust but aligns with the business launch timeline. Overall, Infactura presents a secure, professional, and user-centric platform with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.
Technology
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Gowls is a small technology company offering a SaaS platform focused on personal productivity and goal tracking. The website positions itself as a motivational tool to help users align daily actions with long-term goals, targeting individuals seeking better focus and achievement. The business model is centered on providing an integrated solution for goal management without complexity or stress. Technically, the site is built with modern frameworks such as Next.js and React, hosted on Vercel, and includes analytics via Google Tag Manager and Vercel Analytics. The website is fast, mobile-optimized, and well-structured, providing a good user experience. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks important security headers and published policies, which lowers its security posture. The absence of WHOIS data due to privacy protection limits trust and transparency, although the site itself appears professional and legitimate. Overall, the risk is moderate with recommendations to improve transparency, security headers, and privacy compliance.
- Nuxt SaaS Kit
nuxtsaaskit.com
Technology
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Nuxt SaaS Kit is a technology-focused product offering a fullstack starter kit built on Nuxt.js to accelerate SaaS application development. It targets developers and startups aiming to save time on setup by providing essential features such as authentication, database configuration, transactional emails, payment integration, and SEO-ready landing pages. The website demonstrates a modern technical infrastructure leveraging popular frameworks and tools like Vue.js, TypeScript, Supabase, and Tailwind CSS, hosted behind Cloudflare DNS and CDN services. Security posture is generally good with HTTPS enabled and domain transfer protections, though there is room for improvement in security headers and published policies. Privacy compliance is minimal with no visible privacy or cookie policies, which could be a concern for GDPR compliance. Overall, the site is professional, well-designed, and trustworthy, but would benefit from enhanced transparency and formalized security and privacy documentation.
- Cheskodev - Fullstack dev
chesko.dev
Technology
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website chesko.dev is a personal portfolio site for a full-stack developer named Chesko. It showcases a variety of projects including web applications, Chrome extensions, and tools built using modern technologies such as React, Node.js, TypeScript, and Solidity. The site targets potential clients, employers, and the tech community, positioning itself as a professional individual developer portfolio. The business model is primarily personal branding to attract freelance or employment opportunities. Technically, the site is built with Astro framework and hosted on Netlify, leveraging a modern tech stack with good performance and mobile optimization. However, there are no detected privacy or cookie policies, and no contact information is explicitly provided, which limits trust and compliance. Security posture is moderate with no visible security headers or explicit policies, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is safe, professional, and well-designed but could improve in privacy compliance and security best practices.
Unstuckd - Marketing Therapy for Businessesunstuckd.com
Other
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Unstuckd is a newly launched online platform offering marketing consultation services targeted at startups and small businesses. The core offering is a 60-minute session with verified professional marketers to provide on-demand advice and problem-solving assistance. The website positions itself as a niche service provider in the marketing consultation space, focusing on helping startups move forward with expert guidance. The business model revolves around direct consultation bookings, catering primarily to early-stage companies seeking marketing expertise. Technically, the website is built using Framer, a modern site generator, and integrates popular analytics tools such as Google Analytics and Umami Analytics. The site is hosted on a domain registered with GoDaddy and uses HTTPS, ensuring secure communication. The design is professional and mobile-optimized, with good SEO practices evident from meta tags and Open Graph data. However, accessibility features are basic, and performance is moderate. From a security perspective, the site benefits from HTTPS but lacks advanced security headers and DNSSEC, which could enhance its security posture. No privacy or cookie policies are present, indicating gaps in compliance with data protection regulations such as GDPR. Contact information and incident response details are also absent, limiting transparency and trust. The domain is very new, consistent with the recent launch of the business, and no suspicious WHOIS patterns were detected. Overall, Unstuckd presents as a legitimate, small-scale professional service startup with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
SaasUpsaasup.agency
Other · Canada
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
SaasUp is a newly established creative design and strategy agency based in Toronto, Canada, founded in 2024. The company focuses on providing strategic brand design, custom website development, and marketing materials primarily targeting businesses in Canada and the US. Positioned as a regional brand agency, SaasUp aims to help businesses stand out through creative and strategic services. The website is built using Framer, a modern web design platform, and incorporates tracking technologies such as Google Analytics and Facebook Pixel to monitor user engagement and marketing effectiveness. The site demonstrates good design quality, mobile optimization, and SEO practices, though it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced security. Overall, the website is professional and business-oriented with no signs of adult or questionable content, making it safe for general audiences.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain usedea.com is newly registered and currently does not host any accessible website content, returning a 404 NOT_FOUND error page. There is no business information, branding, or services described on the site. The lack of content and policies indicates the website is either under development or inactive. Technically, the domain is registered via Cloudflare with basic DNS setup but lacks DNSSEC and security headers. No HTTPS status could be confirmed from the HTML content alone. Security posture is minimal with no visible protections or compliance indicators. Overall, the site presents a high risk due to lack of transparency and content, and it is not currently suitable for business or user engagement.
MicroWidgetsmicrowidgets.dev
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MicroWidgets is a small technology company offering a SaaS platform that enables developers and website owners to easily integrate dynamic, auto-updating widgets such as GitHub activity feeds, Stripe payment user counts, and customizable website banners. Positioned as a niche provider, MicroWidgets focuses on simplifying routine website enhancements to save developers time and improve user engagement. The website demonstrates a professional and modern design built on a robust technical stack including Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, well-branded, and provides clear business and contact information, supported by transparent WHOIS data indicating legitimacy.
JustDeployjustdeploy.tech
Technology · Iceland
64Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
JustDeploy is a technology startup founded in 2024 that offers an automated deployment solution for applications on user-owned VPS or servers. The service emphasizes cost control, avoiding vendor lock-in, and simplifying server setup and app deployment with automation tools. The website is professionally designed using modern frameworks like Next.js and React, providing a fast, mobile-optimized user experience. Security posture is good with HTTPS and no exposed sensitive data, but lacks some advanced security headers and published policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business presents a credible and trustworthy profile with clear pricing, customer testimonials, and a focus on developer and startup audiences.
- NN/A
duostories.org
Education · Germany
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Duostories.org is a community-driven educational project launched in 2022 that supplements Duolingo language courses with community-translated stories. It targets language learners seeking additional practice materials beyond the official Duolingo platform. The project operates transparently with open source code repositories and an active Discord community for collaboration and support. Technically, the website is built using modern web technologies including React and Next.js, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is safe, trustworthy, and well-positioned as a niche educational supplement, though it lacks formal business contact details and advanced compliance features.
- Chatclient
chatclient.ai
Technology · United States
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Chatclient is a technology startup founded in 2023 that offers a SaaS platform enabling businesses to build custom AI agents trained on their own data. The platform focuses on enhancing customer support, lead generation, and user engagement through AI chatbots that can be embedded on websites and integrated with popular tools like Zapier, Slack, and WhatsApp. The company targets small to medium businesses seeking AI-powered customer interaction solutions. Technically, the website is built using modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics and marketing tools including Google Analytics and Facebook SDK. The site is well-designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS and domain registration protections but lacks some security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data shows privacy protection typical for startups, with no suspicious patterns detected. Overall, Chatclient presents a credible and professional online presence with moderate privacy compliance and a solid technical foundation.
Notamifynotamify.com
Transportation
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Notamify is a specialized aviation technology company offering AI-powered NOTAM decoding and briefing services to pilots and aviation professionals. The platform simplifies complex NOTAM data into actionable summaries, enhancing preflight planning efficiency. Their offerings include a real-time monitoring dashboard, email briefings, and an API for integration, positioning them as a niche player in the aviation safety and flight planning sector. Technically, the website is built on modern frameworks like Next.js and React, with Cloudflare DNS and analytics tools such as Google Analytics and PostHog, reflecting a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS and domain protection flags, though improvements like enabling DNSSEC and publishing security policies are recommended. Overall, the website is professional, trustworthy, and well-aligned with its business goals, though contact information and privacy compliance could be enhanced for greater user assurance.
- PPowerful football stats & livescores | MakeYourStats
makeyourstats.com
Other
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
MakeYourStats is a small online platform providing football statistics and live scores targeting football fans, sports analysts, and bettors. The website uses Bootstrap 4.3.1 for its frontend and integrates OneSignal for push notifications. The domain is registered with GoDaddy and uses Cloudflare DNS, but DNSSEC is not enabled. The site has a basic design and content quality with no detected privacy or cookie policies, and no contact information is provided. Security posture is minimal with no security headers detected and no visible incident response or vulnerability disclosure policies.
Language Map 🗺️🗣️languagemap.world
Technology
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Language Map is a recently launched technology-focused website (established in 2023) that offers users an interactive platform to explore and visualize the connections between languages they speak. The site targets a general audience interested in language and cultural exploration. The business model and market position are not explicitly detailed, but the service appears to be a niche educational or cultural tool. Technically, the website is built using modern frameworks such as SvelteKit and is hosted with Cloudflare DNS services, indicating a contemporary and scalable infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, which is a compliance gap. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.
- SeeYourBabyAI
seeyourbaby.ai
Technology · Iceland
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
SeeYourBabyAI is a technology startup founded in 2024 that offers an AI-powered platform to predict and generate realistic images of future babies based on photos of parents. The service targets couples and parents curious about their future child's appearance, delivering high-quality baby photos via email for a one-time fee. The website is built on WordPress using Elementor and Gravity Forms, integrating modern marketing and analytics tools such as Facebook Pixel, Google Analytics, and Microsoft Clarity. Payment processing is securely outsourced to Stripe, ensuring no payment data is collected on-site. The platform maintains a good level of professionalism with clear privacy and terms policies, though it lacks a cookie consent mechanism. Overall, the site demonstrates a solid technical foundation and a clear business model focused on AI-driven baby image generation.
Fork Inc.fork.ai
Technology · China
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fork.ai is a technology company specializing in B2B lead generation by providing verified emails and contact data for app leads. The company targets businesses seeking to boost cloud growth through targeted prospecting and competitor research. Their platform offers services such as sales prospecting, partnership discovery, and email marketing, positioning them as a niche player in the lead generation market. The website is professionally designed, mobile-optimized, and uses modern web technologies including the Astro framework and Cloudflare hosting. Analytics and marketing tools such as Google Analytics, Plausible, and Intercom are integrated to support business intelligence and customer engagement. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is basic with a privacy policy available but lacking explicit cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website and domain registration data indicate a legitimate, small-sized technology business with moderate trustworthiness and good technical maturity.
PlayPlexplayplex.com
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
PlayPlex is an established online platform specializing in gaming services such as selling game accounts, rank boosting, and rare in-game items. The company targets gamers looking to enhance their gaming experience through expert coaching and premium services. The website demonstrates a solid market position supported by a domain age of over 20 years and positive user reviews. Technically, the site uses modern web technologies including Astro and Svelte frameworks, integrates Stripe for payments, and employs Cloudflare for DNS and likely CDN services. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security practices.
Searchtoplaysearchtoplay.com
Technology
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Searchtoplay is a specialized social platform designed for gamers to discover, track, and share their gaming experiences. It offers a comprehensive set of features including game tracking, rating, logging playthroughs, creating curated lists, and community engagement through reviews and social networking. The platform positions itself as a gaming journal inspired by popular community platforms like Letterboxd and Goodreads, targeting gaming enthusiasts who want to organize and share their gaming journey. Technically, the website leverages modern web technologies such as Ruby on Rails, Hotwire (Turbo and Stimulus), Tailwind CSS, and integrates third-party services like IGDB for game data and Cloudflare for hosting and DNS. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a smooth user experience. Security-wise, the site enforces HTTPS, uses Cloudflare protections, and includes CSRF tokens, but lacks DNSSEC and explicit security or incident response policies. Privacy compliance is basic with standard legal pages present but no cookie consent mechanism or GDPR-specific indicators. Overall, the platform demonstrates a strong technical foundation and business credibility with room for improvement in privacy and security transparency.
Technology
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.19633.com is a Chinese language educational platform focused on JavaScript and related web development technologies such as Node.js, Vue.js, React, and jQuery. It provides a variety of tutorials and technical articles aimed at developers and learners interested in front-end and back-end JavaScript frameworks. The site appears to be a small-scale content provider without visible commercial or enterprise affiliations. Technically, the site uses HTTPS and standard web technologies including JavaScript and Google Adsense for monetization. However, it lacks advanced security headers and does not provide privacy or cookie policies, which impacts its compliance posture. The absence of WHOIS registration data for the domain is a significant concern, reducing trust and raising questions about domain legitimacy. Overall, the site is functional and content-rich but requires improvements in security, privacy compliance, and transparency to enhance trustworthiness.
- 游游戏名字大全
1882.wang
Other
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.1882.wang is a Chinese-language content portal focused on providing a comprehensive collection of game names across various categories such as male, female, couple, family, and humorous game names. It targets Chinese-speaking gamers seeking creative and categorized name suggestions. The business model appears to be content-driven, likely monetized through advertising, with no evident e-commerce or subscription services. The site holds a modest market position as a niche content provider without strong brand recognition or extensive business information disclosed. Technically, the site is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The performance and mobile optimization are moderate to basic, with no advanced SEO or accessibility features observed. The site lacks HTTPS and security headers, indicating a low level of digital maturity and security hardening. From a security perspective, the absence of HTTPS, security headers, privacy policies, and contact information for incident response or data protection officers highlights significant gaps. No WHOIS data is available, raising concerns about domain registration legitimacy. The site is accessible without WAF or blocking mechanisms, but the lack of security best practices and compliance measures poses risks. Overall, the website presents a low trust profile with basic content quality and technical implementation. Strategic improvements in security, privacy compliance, and business transparency are recommended to enhance credibility and user trust.
- 上海鸿儒教育信息咨询有限公司
ygjj.com
Education · China
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
阳光家教网由上海鸿儒教育信息咨询有限公司运营,是一家专注于上海地区的专业家教中介平台,成立于2003年,拥有超过20年的行业经验。网站提供一对一上门家教和在线辅导服务,涵盖从学龄前到大学及资格考试的多种课程,服务对象主要为家长、学生及兼职教师。作为中国规模较大的正规家教网站之一,阳光家教网在市场中具有较高的权威性和良好的口碑。技术上,网站基于ASP.NET框架,使用jQuery等前端技术,性能适中,移动端优化基础,SEO表现良好。安全方面,网站启用了HTTPS,但缺少部分安全头和隐私合规机制,存在改进空间。整体来看,网站内容丰富,设计专业,业务可信,适合目标用户群体使用。
- MfgRobots
mfgrobots.com
Manufacturing
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
MfgRobots is a specialized content website focused on manufacturing technology and industrial sectors, offering multilingual articles and resources related to industrial IoT, materials, equipment maintenance, and programming. The site targets professionals and enthusiasts in manufacturing and industrial automation. It operates primarily as an information publisher with advertising revenue via Google Adsense. Technically, the site uses standard web technologies with Cloudflare DNS and CDN, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy and compliance policies are absent, which is a notable gap. Overall, the site is safe, professional, and moderately trustworthy but would benefit from enhanced security and privacy practices.
- LLose Weight
020fl.com
Other
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.020fl.com is a small-scale content publishing platform focused on weight loss, nutrition, and healthy living. It offers a variety of articles, tips, recipes, and Q&A content aimed at individuals seeking to lose weight or improve their diet. The business model appears to rely primarily on advertising revenue, specifically Google Adsense, with no evident direct sales or subscription services. The site targets a general audience interested in health and wellness topics. From a technical perspective, the website uses basic HTML, CSS, and JavaScript technologies with embedded Google Adsense scripts for monetization. The site is moderately optimized for performance and mobile use but lacks advanced frameworks or CMS indicators. Accessibility and SEO optimizations are basic, and no forms or interactive data collection mechanisms are present on the homepage. Security posture is minimal; while HTTPS is enabled, no security headers such as Content Security Policy or HSTS are detected. The site lacks privacy and cookie policies, GDPR compliance indicators, and contact information, which are critical for trust and regulatory compliance. The WHOIS data for the domain is missing, indicating either an unregistered domain or privacy protection, which raises concerns about legitimacy and transparency. Overall, the website presents safe, general audience content but suffers from low business credibility and security maturity. Strategic improvements in domain registration transparency, security headers, privacy compliance, and contact information are recommended to enhance trust and compliance.
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain 32196.com is registered since 2011 with Cloudflare, Inc. as the registrar and hosting provider. However, the website content is completely inaccessible, returning a standard HTTP 404 Not Found error page with no metadata, structured data, or business information. There are no visible forms, contact details, or social media links, indicating the site is either inactive or under construction. The technical infrastructure is minimal with no advanced technologies or CMS detected. Security posture is basic with SSL enabled but no security headers or DNSSEC. Privacy and compliance policies are absent, and no incident response or vulnerability disclosure information is available. Overall, the website does not provide any meaningful business or security information, resulting in a low trust and credibility score.
- ZZG·Lingua
zgghmh.com
Education
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ZG·Lingua is an educational website focused on linguistic research and language learning resources. It offers a variety of content categories including theoretical and applied linguistics, language types and regions, culture, research, and language tools. The site targets linguistics students, researchers, and language enthusiasts, positioning itself as a niche educational resource. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. The site shows moderate performance and basic mobile optimization but lacks modern technical features and accessibility enhancements. Security posture is weak, with no HTTPS detected, no security headers, and no privacy or cookie policies, which raises compliance and trust concerns. The absence of WHOIS registration data further impacts the domain's legitimacy and trustworthiness. Overall, the site provides basic educational content but requires significant improvements in security, privacy compliance, and technical modernization to enhance credibility and user trust.
- 研研招网
hnqtw.com
Education · China
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
研招网 is a Chinese online educational consultation platform specializing in graduate entrance exam information and services. It provides comprehensive resources including exam schedules, registration guides, training institutions, university and major information, exam materials, score inquiries, and more. The website targets prospective graduate students in China and positions itself as a leading resource in this niche. The business model revolves around providing free informational content and possibly monetizing through partnerships or advertising. Technically, the website uses a traditional web stack with Bootstrap and jQuery, ensuring responsive design and moderate performance. The site is mobile-optimized and structured for good SEO, but lacks advanced accessibility features. Hosting details are not explicit, but the domain is registered with a known Chinese registrar. The site includes multiple internal and external links to related educational and service domains. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy or cookie policies are present, indicating compliance gaps. The WHOIS data shows an unusual domain creation date in the future relative to content timestamps, which raises questions about registration consistency. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and content-rich for its educational purpose but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.