Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
45,701–45,750 of 99,066
Other
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website infinity-bitwave.com is currently a parked domain with no legitimate business content or services offered. It primarily serves as an advertising landing page with embedded third-party ad networks and search widgets. The domain is very recently registered (October 2024) by a registrar company, indicating it is not yet developed into an operational business site. The lack of contact information, privacy and cookie policies, and security best practices further diminish its credibility. Technically, the site uses basic HTML and JavaScript with Google Adsense and related ad services, but lacks HTTPS enforcement and security headers, exposing it to potential risks. Overall, the site is low trust and low value from a business and security perspective.
- ÖBB (Österreichische Bundesbahnen)
wegfinder.at
Transportation · Austria
75Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
wegfinder.at is a comprehensive mobility platform operated under the auspices of ÖBB, Austria's national railway company. The website offers an integrated app solution for booking and managing various transportation modes including trains, buses, taxis, carsharing, bikesharing, and e-scooters across Austria. The platform is positioned as a leading mobility aggregator with strong regional partnerships, providing users with seamless route planning, ticketing, and vehicle rental services. Technically, the site employs modern web technologies such as Bulma CSS, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience across desktop and mobile devices. Security posture is strong with HTTPS enforcement and security headers, though some GDPR compliance aspects like explicit cookie consent could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting the legitimacy and trustworthiness of the site.
- LUCIES
lucies.cz
Other · Czech Republic
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LUCIES is a Czech-based business focused on empowering women entrepreneurs through business coaching, web design services, and an online community. The website offers Showit web templates and mentoring services, positioning itself as a niche provider for female business owners seeking growth and self-discovery. Technically, the site is built on the Showit platform, leveraging modern web technologies including jQuery, Google Fonts, and CookieHub for cookie consent management. The site is mobile optimized and presents a professional design with clear navigation. Security posture is good with HTTPS enabled and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. No blocking or WAF challenges were detected, allowing full content access. The domain is well-established since 2013, registered with a Czech registrar consistent with the business profile. Overall, the website demonstrates moderate to good maturity in content, technical implementation, security, and privacy compliance, suitable for its target audience.
- Systedo Marketing s.r.o.
systedo.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Systedo Marketing s.r.o. is a Czech Republic based performance marketing agency specializing in digital advertising, web and e-shop development, and marketing strategy consulting. They position themselves as a trusted partner for over 100 clients, emphasizing systematic marketing approaches and business growth. The website reflects a professional and modern digital presence built on Webflow, integrating advanced analytics and consent management tools. Security posture is solid with HTTPS and reCAPTCHA protections, though explicit security headers and policies are absent. The lack of WHOIS data reduces domain trust but does not detract from the professional business presentation. Overall, the company demonstrates strong market positioning in the Czech digital marketing sector with credible certifications and client testimonials.
Peter Rigo Photographypeterrigo.com
Hospitality · United States
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Peter Rigo Photography is a specialized fine art wedding photography service focusing on destination weddings and elopements primarily in Prague, Budapest, Tuscany, Italy, and New Jersey, USA. The business has a strong market position in the high-end wedding photography sector, offering personalized services including wedding films, luxury albums, and timeline planning. The website reflects a professional and consistent brand with excellent content quality and clear target audience focus on couples planning destination weddings. Technically, the site is built on WordPress with modern plugins and analytics tools, providing good SEO and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. The domain WHOIS data is consistent and legitimate, supporting business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.
- PPAPOUŠČÍ RÁJ
papousci-raj.cz
Non-profit · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
PAPOUŠČÍ RÁJ is a Czech non-profit organization operating a rescue station dedicated to parrots. The website serves as a platform to provide information about their rescue activities, visitor experiences, sponsorship programs, and financial support options. The organization is officially registered and affiliated with the Czech Ministry of Agriculture, enhancing its credibility. The website is built on the Shoptet e-commerce platform, enabling online reservations and donations. Technically, the site uses standard web technologies including jQuery and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. Security posture is generally good with HTTPS enforced and CSRF protections on forms, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. WHOIS data is unavailable, which limits domain trust verification, but the website content and official registration details support legitimacy. Overall, the site is well-structured, user-friendly, and serves its non-profit mission effectively.
- BEDEA, spol. s.r.o.
bedea.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
BEDEA, spol. s.r.o. is a Czech Republic-based private security and detective agency offering a range of services including property and personal protection, detective work, cash transport, CCTV systems, and canine services. The company holds certifications from the Czech Association of Private Security Services and has a National Security Authority clearance for confidential level operations. Their market position is that of a small, established local security provider with partnerships such as the "KRUH – zásahová služba" project, indicating active engagement in the security sector. The website content is primarily in Czech and targets local businesses and individuals seeking security services. Technically, the website uses basic web technologies including jQuery 3.3.1 and CSS, with a cookie consent banner implemented for compliance. However, there is no evidence of modern CMS usage or advanced frameworks. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but minimal. No social media or direct contact information is provided on the site, which limits user engagement and trust. From a security perspective, the site lacks visible HTTPS enforcement and security headers in the provided data, which are critical for protecting user data and ensuring secure communications. The cookie consent mechanism is a positive compliance indicator, but the absence of privacy and terms of service pages is a compliance gap. WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces trustworthiness. No vulnerabilities or malware indicators were detected in the content. Overall, the website presents a legitimate business with a clear service offering but has notable gaps in security posture, privacy compliance, and transparency. Strategic improvements in HTTPS implementation, security headers, privacy documentation, and contact information publication are recommended to enhance trust and compliance.
Pište bez chybpistebezchyb.cz
Other · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Pište bez chyb is a small Czech proofreading service specializing in grammatical, stylistic, and typographical corrections for a variety of text types including academic papers, books, and web content. The business targets students, authors, and companies requiring professional text correction. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details appear professional and trustworthy. Overall, the site presents a credible small business with room for improvement in privacy compliance and security best practices.
- DDieselservis Kroměříž
dieselservis-kromeriz.cz
Transportation · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Dieselservis Kroměříž is a small local company specializing in servicing diesel fuel injection pumps, injectors, and vehicle diagnostics primarily for the automotive sector in the Czech Republic. Their website presents a clear overview of their services including repair, testing, and maintenance of diesel systems, as well as a 24/7 towing service. The business targets vehicle owners and operators requiring specialized diesel system servicing. Technically, the website is built on an older WordPress platform with Bootstrap and jQuery, providing a functional but somewhat outdated user experience. Security posture is moderate with HTTPS enabled but lacking modern security headers and running outdated software versions, which could expose the site to vulnerabilities. Privacy compliance is low due to absence of privacy and cookie policies. Overall, the site is safe for general audiences and provides sufficient contact information, but improvements in security and privacy practices are recommended.
- IiNELS s.r.o.
inels.com
Technology · Czech Republic
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
iNELS s.r.o. is a Czech manufacturer specializing in smart wiring and smart home control systems, targeting residential, commercial, and hospitality sectors. Their product portfolio includes smart home automation, commercial building control, and hotel retrofit solutions, supported by mobile applications for remote management. The company positions itself as a provider of innovative, time- and cost-saving smart technologies. Technically, the website employs modern JavaScript libraries, Google services for analytics and tag management, and integrates live chat support, indicating a mature digital presence. Security posture is solid with HTTPS enforced and form protections in place, though the absence of explicit security headers and dedicated security/privacy policy pages suggests room for improvement. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional website content and verified contact details mitigate this risk. Overall, the site is well-designed, user-friendly, and trustworthy, with moderate tracking and marketing tools in use.
Elko EPdifferentnow.tech
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
DifferentNow.tech is a Czech technology news and insights platform focused on smart city technologies, architecture, and people. It is powered by the established companies iNELS and ELKO EP, which positions it well within the technology sector in the Czech Republic. The website provides curated content targeting technology enthusiasts and professionals interested in innovations and smart city solutions. The business model centers on content publishing and brand promotion, leveraging the reputation of its parent companies to build trust and authority in its niche. Technically, the website is built on WordPress CMS and employs modern web technologies including Yoast SEO for search optimization, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is mobile-optimized with good accessibility features and a clear navigation structure. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and uses secure external scripts, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible vulnerability disclosure or incident response information, and no cookie consent mechanism is implemented, which may pose compliance risks under GDPR. No exposed sensitive data or vulnerable libraries were detected, indicating a generally sound security posture but with room for enhancement. Overall, the website is professional and trustworthy with moderate risk. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- EELKO EP HOLDING, SE.
elkoep.vn
Technology · Czech Republic
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP HOLDING, SE. is a medium-sized technology company based in the Czech Republic specializing in smart home and building automation solutions, notably through its iNELS product line. The company operates internationally with multiple localized websites and offers a range of products, training, and user support tools. Their market position is that of an established player in the smart technology sector, targeting both business and consumer segments. Technically, the website employs modern JavaScript libraries and frameworks such as Foundation and jQuery, integrates Google Maps API, and uses Smartsupp for live chat support. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements form protection and cookie consent mechanisms but lacks visible security headers and published security policies. Overall, the domain registration and business information are consistent and trustworthy, with no signs of suspicious activity or content.
- SS.C. NOARK ELECTRIC S.R.L.
elko-ep.ro
Technology · Romania
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ELKO EP is a Romanian-based manufacturer specializing in electronic devices, wireless systems, and intelligent wiring solutions. The company operates multiple international websites and subsidiaries, targeting B2B customers such as installers, distributors, and end users interested in smart electrical installations. Their product portfolio includes relays, switches, contactors, and intelligent control systems, supported by configurators and technical support services. The website reflects a medium-sized enterprise with a consistent brand presence and professional content. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Google Analytics, and Smartsupp Live Chat. It is mobile-optimized with good SEO and accessibility basics. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms, reflecting a moderate to good digital maturity level. From a security perspective, the website enforces HTTPS and uses form protection scripts, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for Romanian domains, but the website provides detailed company information consistent with legitimacy. Overall, the website is professional, secure, and compliant with GDPR, with no adult or questionable content. Recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.
- EELKO EP, s.r.o.
elkoep.qa
Manufacturing · Czech Republic
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP, s.r.o. is a Czech Republic based manufacturer specializing in electronic devices, wireless systems, and intelligent wiring solutions primarily for smart homes and commercial buildings. Established in 1993, the company has grown to become a leading producer and seller in its sector, with a strong market presence supported by multiple international websites and product lines such as iNELS. The website reflects a professional business model focused on B2B customers, installers, and end users interested in smart home automation and control systems. Technically, the website employs a modern tech stack including jQuery, Foundation framework, Google Analytics, and Smartsupp live chat, providing a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS usage and form protection but lacks explicit security headers and documented security policies. Privacy compliance is addressed through GDPR-related pages and a consent management script that denies ad and analytics storage by default, indicating a privacy-conscious approach. Overall, the website is trustworthy, well-branded, and professionally maintained, with comprehensive contact information and social media presence.
- EELKO EP
elkoep.rs
Manufacturing · Serbia
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP is a recognized global leader specializing in the development and manufacturing of relay electronic devices, with a strong regional presence in Serbia and multiple international localized websites. Their business model focuses on manufacturing and direct sales of electrical installation systems and relay devices, targeting electrical installers and commercial/residential building managers. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site employs modern JavaScript libraries and frameworks such as Foundation and jQuery, integrates Google Maps API, and uses Smartsupp for live chat support. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and form protection mechanisms, though DNSSEC is not enabled and security headers are not explicitly visible. Privacy compliance is addressed with a privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is comprehensive and consistent with the WHOIS data, supporting business credibility. Overall, the website is safe, professional, and trustworthy with no signs of malicious or adult content.
- EELKO EP España
elkoep.es
Technology · Spain
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ELKO EP España is a manufacturer specializing in electronic devices, wireless systems, and smart electrical installations, targeting both residential and commercial markets. The company maintains a professional and multilingual website with clear product offerings, training events, and downloadable resources. Their market position is supported by a broad international presence and a consistent brand image. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Foundation, integrates Google Maps API, and offers live chat support, indicating a moderate to advanced digital maturity. Security posture is adequate with HTTPS usage and form protection, though explicit security headers and incident response policies are not publicly visible. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional, though WHOIS data unavailability slightly reduces transparency. Strategic improvements in security headers and public security policies would enhance their security stance.
- EELKO EP
elkoep.ua
Technology · Ukraine
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP is a medium-sized Ukrainian technology and manufacturing company specializing in the production of relays and smart home automation systems. The company targets both residential and commercial customers seeking intelligent building automation solutions. Their website reflects a professional and consistent brand presence with multilingual support and a range of product offerings including configurators and training services. The company maintains a solid market position with a clear focus on smart devices and automation technologies. Technically, the website employs a modern tech stack including jQuery, Foundation framework, and various UI libraries, along with integration of Google Maps API and Smartsupp live chat for customer engagement. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Cookie consent mechanisms are implemented, but privacy compliance could be enhanced. From a security perspective, the site uses HTTPS and form protection mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's business claims, supporting legitimacy. Overall, the security posture is moderate with room for improvement in transparency and technical safeguards. The overall risk assessment is low with no critical issues found. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, enhancing privacy compliance, and improving accessibility. These steps will strengthen trust and security culture while supporting compliance with evolving regulations.
- ЕЕЛКО ЕП България ООД
elkoep.bg
Energy · Bulgaria
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ЕЛКО ЕП България ООД is a Bulgarian manufacturer specializing in electronic devices and intelligent wireless control systems for building automation. The company targets both end users and professional installers, offering a range of products including smart home automation, relays, switches, and configurators. Their market position is that of an established regional player with multiple international sites and a strong product portfolio. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery and Foundation, with integrations like Google Maps API and Smartsupp live chat, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements form protection and consent management for analytics and ads, but lacks visible security headers and published privacy or incident response policies, which are areas for improvement. Overall, the website is professional and trustworthy, with clear contact information and social media presence, but could enhance compliance and security transparency.
- EELKO EP Hungary Kft.
elkoep.hu
Manufacturing · Hungary
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ELKO EP Hungary Kft. is a well-established manufacturer and supplier of modern industrial and residential electrical installation solutions, operating for approximately 28 years. The company holds a strong market position in Europe, offering a broad portfolio including relays, switches, magnetic contactors, and smart home systems under the iNELS brand. Their website reflects a professional corporate presence with clear business information, multilingual support, and active customer engagement through newsletters and social media. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Google Maps API, and Zoho SalesIQ for customer interaction. The site is mobile-optimized with good SEO practices and a comprehensive cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS, uses form protection scripts, and provides granular cookie consent options. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website and business demonstrate high trustworthiness and professionalism with minor recommendations to enhance security headers and publish formal security policies. The domain WHOIS data aligns well with the business claims, supporting legitimacy and credibility.
- EELKO EP POLAND Sp. z o.o.
elkoep.pl
Technology · Poland
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ELKO EP POLAND Sp. z o.o. is a medium-sized technology and manufacturing company specializing in electronic devices, wireless systems, and intelligent electrical installations. The company operates primarily in Poland with a strong regional presence and international reach through multiple localized websites. Their business model focuses on manufacturing and distributing smart home and commercial automation products, supported by brands such as iNELS and Different now. The website content is professionally presented in Polish, targeting industrial, commercial, and residential customers interested in smart electrical solutions. Technically, the website employs modern web technologies including jQuery, Foundation framework, Google Analytics, and Smartsupp live chat. It is mobile-optimized with good SEO and basic accessibility features. The site uses HTTPS with a secure SSL configuration and implements consent management for analytics and advertising, reflecting a good level of digital maturity. From a security perspective, the site demonstrates several best practices such as HTTPS enforcement, form protection, and consent management. However, it lacks visible security headers and does not publish explicit security policies or incident response information. The absence of WHOIS data reduces trust signals but is likely due to registry query limitations rather than malicious intent. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to enhance trust and compliance. The company shows a professional online presence with clear contact information and GDPR-compliant privacy and cookie policies.
- ELKO EP SLOVAKIA, s.r.o.
elkoep.sk
Energy · Slovakia
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ELKO EP SLOVAKIA, s.r.o. operates a professional e-commerce platform specializing in electrical components, relay modules, and smart home devices under brands such as ELKO and iNELS. The company targets both wholesale and retail customers primarily in Slovakia, positioning itself as a leading supplier in the energy and smart home sector. The website offers a comprehensive product catalog, customer support, and educational resources, reflecting a mature business model with a medium-sized market presence. Technically, the website is built on the SiteJay 2.0 CMS platform, utilizing modern JavaScript libraries like jQuery, Fancybox, and Slick Carousel. It integrates Google Analytics and Smartsupp Live Chat for analytics and customer engagement. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with asynchronous loading of external scripts enhancing user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no public security policy or incident response information is provided. No vulnerabilities or malicious content were detected, but improvements in security headers and vulnerability disclosure are recommended. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its target audience effectively. Strategic enhancements in security posture and accessibility would further strengthen its digital maturity and risk management.
- EELKO EP UK Ltd.
elkoep.uk
Technology · United Kingdom
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP UK Ltd. is a manufacturer specializing in electronic devices, wireless systems, and intelligent wiring solutions, targeting primarily B2B customers such as electrical contractors and building developers. The company maintains a professional and consistent online presence with multiple country-specific sites, indicating a well-established international footprint. Their website offers comprehensive product information, technical support, and sales contacts, reflecting a mature business model focused on manufacturing and distribution within the technology sector. Technically, the website leverages modern JavaScript libraries and frameworks such as jQuery and Foundation, integrates Google Maps API for location services, and uses Smartsupp for live chat support. The site is mobile-optimized with good SEO practices, although performance is moderate and accessibility could be improved. Analytics are implemented with Google Analytics, but user tracking is minimal and privacy compliance is generally good, with GDPR policies clearly linked. From a security perspective, the site uses HTTPS and implements form protection mechanisms; however, it lacks visible security headers like CSP or HSTS, which are recommended to enhance security posture. No WAF or blocking mechanisms are detected, and no critical vulnerabilities are apparent from the HTML content. The WHOIS data for the domain is unavailable due to the domain name being invalid per Nominet UK rules, which impacts domain legitimacy trust but does not necessarily reflect on the business authenticity. Overall, the website is professional and trustworthy with solid business credibility, but improvements in security headers, cookie policy transparency, and domain registration legitimacy are advised to strengthen trust and compliance.
- EELKO EP, s.r.o.
elkoep.com
Manufacturing · Czech Republic
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ELKO EP, s.r.o. is a Czech Republic-based manufacturer specializing in electronic devices, wireless systems, and intelligent wiring solutions primarily for smart home and building automation markets. The company maintains a professional, multilingual website showcasing its product lines, technical support, and training offerings, positioning itself as a global relay manufacturer with a strong presence in Europe and beyond. The business model focuses on manufacturing and direct sales supported by e-commerce and extensive customer support. Technically, the website employs modern web technologies including jQuery, Foundation framework, Google Analytics, and Smartsupp Live Chat, indicating a mature digital infrastructure. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. The presence of multiple localized domains and partner sites reflects a well-established digital ecosystem. From a security perspective, the site uses HTTPS and implements consent management denying ad and analytics storage by default, which is positive for privacy compliance. However, no explicit privacy or cookie policy pages were found, and no security headers were detected in the provided data, suggesting room for improvement in security hardening. The absence of WHOIS data for the domain is a concern, reducing trustworthiness despite the professional appearance and content. Overall, ELKO EP presents a credible and professional business website with solid technical foundations but would benefit from enhanced transparency in domain registration, explicit privacy policies, and improved security headers to strengthen trust and compliance.
- IiNELS s.r.o.
inels.cz
Technology · Czech Republic
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
iNELS s.r.o. is a Czech manufacturer specializing in intelligent electrical installations and smart home automation solutions. The company targets residential, hotel, and commercial building markets with a comprehensive product portfolio designed to optimize energy use and enhance user convenience. Their website reflects a professional presence with clear business information, contact channels, and e-commerce integration via a partner e-shop. Technically, the site employs modern web technologies including jQuery, Owl Carousel, Google Analytics, and reCAPTCHA, ensuring a functional and user-friendly experience. Security posture is solid with HTTPS enforcement and anti-spam measures, though some security headers are missing and no explicit security policy is published. The absence of WHOIS data is a notable concern for domain legitimacy verification, but the overall digital footprint and business presentation suggest a trustworthy entity. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trust and compliance.
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website inquirygrid.com appears to be a newly registered domain (March 2023) with minimal content primarily consisting of an embedded iframe from an external source. There is no visible business branding, contact information, or policy documentation on the site. The technical infrastructure is basic, with no CMS or modern frameworks detected, and the site lacks standard security headers and DNSSEC. The presence of tracking pixels and obfuscated iframe parameters suggests a focus on data collection or advertising rather than user engagement or service provision. Security posture is weak due to missing headers and DNSSEC, and privacy compliance is poor with no policies found. Overall, the site presents a low trust profile with limited business credibility and poor content quality.
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website advexplore.com presents minimal content primarily consisting of embedded iframes and tracking pixels, with no visible business or contact information. The domain is registered since 2014 via PDR Ltd. without privacy protection, indicating a stable registration but lacking transparency about the business entity. The technical infrastructure appears basic with no detected CMS or modern frameworks, and the site lacks essential security and privacy policies. Security posture is weak due to absence of security headers, DNSSEC, and unclear SSL configuration. Overall, the site seems to function mainly as an advertising or tracking platform rather than a professional business website.
Other · Austria
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website verlauf.at is currently inaccessible to the public, returning a 403 Forbidden error page indicating that access permissions are restricted. Due to this, no meaningful business information, metadata, or content is available for analysis. The site lacks any visible contact information, privacy or cookie policies, or security disclosures. The technical infrastructure cannot be fully assessed as no scripts, frameworks, or hosting details are exposed. The security posture is unknown but likely poor given the absence of HTTPS and security headers in the provided content. Overall, the site appears to be either under restricted access or misconfigured, limiting its usability and trustworthiness.
- IImperial Brands PLC
imperialbrandsplc.com
Other · United Kingdom
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Imperial Brands PLC operates as the fourth largest multinational tobacco company, focusing on tobacco and smoke-free alternatives. The company positions itself as a challenger business within the transforming tobacco industry, targeting adult consumers, investors, and potential employees. Their website provides comprehensive corporate, investor, and career information, reflecting a mature and professional business model with a global presence. The site emphasizes ESG commitments and innovation in next generation products, aligning with modern market trends. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries and tracking tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, with a fast and professional user experience. Privacy and cookie policies are clearly presented with consent mechanisms, indicating good compliance with GDPR and related regulations. Security-wise, the site enforces HTTPS and employs cookie consent but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, but the professional corporate presence and consistent branding support legitimacy. Overall, the website demonstrates a strong security posture with room for improvement in transparency and incident response readiness. The overall risk assessment is low, with recommendations to publish security policies, provide incident response contacts, and implement a security.txt file to enhance trust and compliance. The domain's WHOIS inconsistency should be monitored but does not currently detract significantly from the site's credibility.
- nox ventures
nox-ventures.com
Other · Austria
71Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
nox ventures is a Vienna-based boutique agency specializing in strategic branding, corporate design, and marketing solutions. The company targets businesses and ventures seeking to enhance their brand identity and marketing effectiveness through a combination of strategy, design, and digital marketing services. The website reflects a professional and consistent brand image, leveraging modern WordPress technologies and SEO best practices. The technical infrastructure is solid, with use of Elementor, Yoast SEO, and WP Rocket for performance optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in DNS security and security headers. Privacy compliance is well addressed with clear policies and consent management. Overall, the website presents a trustworthy and credible business presence with moderate risk and good digital maturity.
Sonnleitner Holzhausbauwerke GmbH & Co. KGsonnleitner.de
Real Estate · Germany
52Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Sonnleitner Holzhausbauwerke GmbH & Co. KG is a well-established Bavarian company specializing in ecological and healthy wooden house construction. With over 50 years of experience and more than 3,600 projects completed, the company offers custom wooden houses, modular buildings, commercial and multi-family wooden constructions, and interior design services. Their focus on sustainable materials, premium quality, and healthy living environments positions them as a regional leader in the wooden house market. The website is professionally designed, content-rich, and provides clear contact information and social media presence, enhancing business credibility. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Contao CMS platform. It features responsive design and good SEO practices. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing or not detected, which could be improved to enhance compliance and security posture. The security posture is moderate with HTTPS implied but no visible security headers or incident response information. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is high due to clear company information, certifications, and customer testimonials. Overall, the website is a strong digital asset for Sonnleitner, supporting their market position and customer engagement. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their security and compliance stance.
Ombudsstelle Fertighausombudsstelle-fertighaus.org
Government · Austria
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Ombudsstelle Fertighaus is an independent non-profit organization based in Austria that provides mediation, advisory, and dispute resolution services specifically for the prefabricated house construction sector. The website is professionally designed using WordPress and offers clear information about its team, services, and contact details. It targets homeowners and consumers involved in prefabricated house projects, offering free and neutral support to resolve conflicts. The organization is recognized as an official alternative dispute resolution entity under Austrian law, enhancing its credibility. Technically, the website employs a standard WordPress stack with common plugins such as Contact Form 7 and Revolution Slider. The site is HTTPS enabled and moderately optimized for mobile devices, though it lacks some advanced security headers and cookie consent mechanisms required for full GDPR compliance. Analytics usage includes Google Analytics and WordPress.com stats, indicating moderate user tracking. From a security perspective, the site shows good basic practices with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to a malformed WHOIS response limits domain trust verification. No explicit security or incident response policies are published, and cookie consent is missing, which could be improved to enhance compliance and user trust. Overall, the website presents a trustworthy and professional front for a niche non-profit service. Strategic improvements in security headers, privacy compliance, and domain registration transparency would strengthen its security posture and regulatory adherence.
Österreichischer Fertighausverband (ÖFV)fertighaus-akademie.at
Education · Austria
61Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The Fertighausakademie website represents the official training institution of the Österreichischer Fertighausverband (ÖFV), an independent and state-certified quality association in Austria. The organization focuses on education and training in the prefabricated house construction sector, offering seminars, workshops, and certification courses for professionals such as consultants, site managers, and experts, as well as informational events for consumers. The website is well-branded and targets a German-speaking Austrian audience, emphasizing quality standards like ÖNORM B2310. Technically, the site is built on a modern WordPress platform using Elementor, ensuring good mobile responsiveness and user experience. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
- VV-Net s.r.o.
alkohol-tester.biz
Retail · Czech Republic
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.alkohol-tester.biz operates as a specialized e-commerce platform focused on selling branded and certified alcohol testers and drug testing devices primarily to consumers and small to medium businesses in the Czech Republic and Slovakia. It offers a broad product range with detailed descriptions, calibration services, and customer support, positioning itself as a trusted niche retailer with over 3000 units sold. The business emphasizes product authenticity and after-sales service, including calibration and repair. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Analytics, and Zopim live chat. However, it still contains deprecated Flash content and lacks modern security headers, which could impact user experience and security. The site is accessible over HTTPS but does not provide a comprehensive privacy policy, though it has a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is completely missing, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and content-rich but would benefit from technical and security improvements.
Nejlepší online casino v Českuzahulimeuvidime.cz
Other · Czech Republic
58Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website zahulimeuvidime.cz operates as an online casino affiliate and review platform targeting Czech-speaking adult users interested in online gambling. It provides detailed reviews, bonus offers, and educational content about new Czech online casinos for the year 2025. The site positions itself as a trusted source for casino information with a focus on licensed Czech operators and responsible gambling. Technically, the site is built on WordPress with a modern tech stack including jQuery and various UI libraries, hosted behind Cloudflare DNS with HTTPS enabled. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enforced but lacks visible security headers and explicit security policies. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or GDPR indicators. WHOIS data shows inconsistencies, notably a domain creation date in the future relative to content dates, which raises legitimacy concerns. No direct contact information or incident response channels are provided. Overall, the site is functional and content-rich but would benefit from improved transparency, security hardening, and privacy compliance to enhance trustworthiness.
Nejlepší online kasina v Českuusedmikrasek.cz
Other · Czech Republic
56Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website usedmikrasek.cz is a newly established Czech online platform focused on providing information and reviews about online casino bonuses without deposit, targeting adult gamblers in the Czech Republic. It operates primarily as an affiliate and informational site, offering detailed content on casino bonuses, free spins, and related gambling promotions. The site uses WordPress CMS with common plugins and is hosted behind Cloudflare DNS, ensuring basic security and performance. Structured data is implemented to enhance SEO and content discoverability. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. The site does not expose sensitive data or show signs of malicious activity. Overall, the platform is professionally designed with good content quality and moderate trustworthiness, suitable for its niche audience.
Nové české online casinorcguru.cz
Other · Czech Republic
56Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website rcguru.cz operates as a Czech language online casino review and bonus information platform targeting players interested in Czech online casinos. It provides detailed reviews of top 10 casinos, payment methods, bonus explanations, and user testimonials. The business model appears to be affiliate or informational, focusing on guiding users to various casino platforms. Technically, the site uses standard web technologies with Cloudflare DNS, structured data for SEO, and a responsive design optimized for mobile. Security posture is moderate with no detected WAF or blocking, but lacks explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows inconsistencies, notably a domain creation date in the future relative to content publication, which raises legitimacy concerns. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.
- Ideenreich Websolutions GmbH
web-ideenreich.at
Technology · Austria
55Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Ideenreich Websolutions GmbH is a small Austrian technology company specializing in digital transformation through custom web applications, data analysis, and market research services. The company targets businesses seeking to digitize processes and leverage data insights, positioning itself as a trusted regional provider with a portfolio of reputable clients. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site is built on WordPress with modern frameworks like Vuetify and uses GDPR-compliant cookie management and analytics tools such as Fathom and Matomo. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence suitable for its business scope.
Unique Research GmbHunique-research.at
Other · Austria
65Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Unique Research GmbH is a Vienna-based market and opinion research company specializing in market intelligence services. The company offers data-driven insights and analysis to support business decision-making, targeting organizations seeking validated market data in Austria. The website is professionally designed using the Wix platform, featuring structured data for local business and website schema, but lacks comprehensive privacy and cookie policies. Technically, the site uses modern JavaScript polyfills and Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal incident response information. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security best practices.
whatchado GmbHwhatchado.com
Education · Austria
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
whatchado GmbH operates Europe's largest video job platform, providing job seekers and employers with a unique video-based job search and career orientation experience. The platform offers thousands of job listings, video insights into companies and roles, and matching services to connect candidates with suitable employers. The website is professionally designed, mobile-optimized, and rich in relevant content targeting young professionals and entry-level job seekers primarily in Austria and Germany. Technically, the site leverages modern frameworks like React, integrates Google Analytics and Tag Manager for tracking, and uses Imgix for image delivery, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and provides clear privacy and cookie policies with consent mechanisms, reflecting good compliance with GDPR. However, the absence of WHOIS registration data for the domain www.whatchado.com raises concerns about domain legitimacy, although the website content and business presence appear trustworthy. Overall, the platform presents a strong market position in the career orientation and job search sector with room for improvement in transparency of domain registration and security policy disclosures.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website netpuppgo.com currently presents an empty HTML page with no visible content, metadata, or interactive elements. The domain is registered since 2020 with a reputable registrar and uses Cloudflare nameservers, indicating some level of infrastructure setup. However, the lack of any website content or policies suggests the site is either under construction or abandoned. The technical infrastructure is minimal with no CMS or frameworks detected, and no security headers or privacy compliance measures are in place. The security posture is basic due to HTTPS availability but lacks advanced protections such as DNSSEC or security headers. Overall, the site poses low risk but also low trust and credibility due to absence of content and transparency.
- GGrand Media s.r.o.
grandmedia.cz
Technology · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Grand Media s.r.o. is a Czech-based digital agency specializing in creating high-quality websites, e-shops, and providing comprehensive online marketing services including SEO optimization, PPC advertising, and programming. The company targets businesses and projects seeking to enhance their online presence and grow through digital channels. Their market position is that of a professional local agency with a portfolio of diverse client references, indicating a stable presence in the technology services sector. Technically, the website is built on WordPress 4.9.26 with multiple plugins for enhanced functionality such as Slider Revolution, Contact Form 7, and Google Analytics integration. The site demonstrates good mobile optimization and SEO practices but uses an outdated WordPress version which may pose security risks. The presence of cookie consent and GDPR compliance pages reflects awareness of privacy regulations. From a security perspective, the site uses HTTPS but lacks visible security headers and runs on an older CMS version, which could expose it to vulnerabilities. No critical security issues or exposed sensitive data were detected. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the professional content and clear contact information mitigate this concern. Overall, the website is well-structured, professional, and compliant with privacy norms, but should update its CMS and improve security headers to enhance its security posture and trustworthiness.
- Vavada com
euroutconference.org
Other · Russia
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website rencontresmusicalesirlandaisestocane.com is an online casino promotional platform primarily targeting Russian-speaking users. It offers information about bonuses, promo codes, free spins, and various casino games including slots, live games, tables, and tournaments. The site also promotes sports betting bonuses and maintains an active presence on social media platforms such as Telegram, Instagram, VK, and YouTube. The business model revolves around online gambling with incentives to attract and retain players. The domain WHOIS data shows a suspicious future creation date, which raises concerns about the legitimacy or accuracy of the registration information. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Cloudflare DNS services. The site is mobile-optimized and has good SEO practices but lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC.
- FFarmacia della Bossola
farmaciadellabossola.it
Healthcare · Italy
62Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Farmacia della Bossola is a small, local pharmacy based in Carmagnola, Italy, providing pharmaceutical products, nutritional and cosmetic consultancy, and an online shop with monthly promotions. The business targets the general public seeking healthcare and wellness products, leveraging both physical and digital channels to serve its customers. The website is well-branded and consistent, reflecting a trustworthy healthcare provider with clear contact information and social media presence. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by popular plugins such as Yoast SEO and Complianz for GDPR compliance. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. Hosting appears to be provided by SiteGround, a reputable provider. From a security perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie policies are comprehensive and GDPR compliant, supporting a strong privacy posture. Overall, the website presents a low-risk profile with a good balance of business credibility, technical implementation, and privacy compliance. Strategic improvements in security headers and accessibility could further enhance its security posture and user experience.
PharmaxLab®pharmax-sk.com
Healthcare · Slovakia
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Pharmax-sk.com is an e-commerce website specializing in the sale of anabolic steroids and related pharmaceutical products targeted primarily at athletes and bodybuilders in Slovakia. The site offers a range of injectable and oral steroids, post-cycle therapy products, and growth hormones with a focus on competitive pricing and discreet delivery. The business appears to be newly established in 2024, with a domain age consistent with a startup. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, and is hosted behind Cloudflare DNS, providing basic performance and security benefits. However, the site lacks advanced security headers and privacy policies, which are critical for compliance and trust in pharmaceutical e-commerce. Contact information is provided, including an email and physical address in Bratislava, but no phone number is explicitly listed. The content is adult-oriented due to the nature of the products sold, requiring adult-only access. Overall, the website is functional and professionally designed but requires improvements in privacy compliance and security practices to enhance trust and regulatory adherence.
- Pilové kotouče, nože a kotoučové pily GSP Zborovice
gspzborovice.cz
—
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Other
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website xenony.in is currently a parked domain page with no active business content or services offered. It primarily serves as a placeholder indicating the domain may be for sale, with advertising scripts and links to domain resale services. The technical infrastructure relies on basic HTML, CSS, and JavaScript with third-party advertising and tracking integrations, hosted via Amazon Cloudfront CDN. There is no evidence of a content management system or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie consent mechanisms are implemented. Business credibility is low due to absence of contact information, company details, or trust signals. Overall, the site is minimal and not professionally maintained, serving only as a domain parking page.
- Erste banka Crna Gora
erstebank.me
Finance · Montenegro
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Erste banka Crna Gora is a prominent financial institution serving the Montenegrin market with a broad range of retail banking services including accounts, cards, loans, savings, investments, and digital banking platforms. The website reflects a mature digital presence with a professional design, clear navigation, and mobile responsiveness, supporting a positive user experience for its target audience. Technically, the site leverages modern web technologies and integrates analytics and chat services to enhance customer engagement. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are not publicly disclosed. The WHOIS data is incomplete, limiting domain trust assessment, but overall the site demonstrates legitimacy and professionalism. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability.
- Banka Sparkasse
sparkasse.si
Finance · Slovenia
66Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Banka Sparkasse is a well-established Slovenian retail banking institution, part of the Erste Bank Group with over 200 years of tradition. The website targets individual consumers in Slovenia, offering personal banking and financial advisory services. The business model focuses on providing tailored financial solutions with a strong emphasis on customer trust and stability. Technically, the site uses a modern CMS platform (GEM) with a solid tech stack including JavaScript, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
- Erste Bank Hungary Zrt.
erstebank.hu
Finance · Hungary
70Medium
NIS2 12 · GDPR 40
NIS2 12 · GDPR 40
Erste Bank Hungary Zrt. operates as a major retail banking institution in Hungary, offering a comprehensive range of financial products including loans, bank accounts, cards, electronic banking, and investment services. The website reflects a mature digital presence with clear navigation, professional design, and a focus on customer engagement through digital services and security awareness. Technically, the site uses a proprietary CMS and framework (GEM), integrates modern analytics and privacy management tools, and is hosted on Erste Group's CDN infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response contacts and vulnerability disclosure policies are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with GDPR, serving a broad retail customer base effectively.
Finance · Romania
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BCR (Banca Comerciala Romana) is a leading Romanian bank offering a comprehensive range of retail banking services including digital banking via its George platform, credit cards, personal and mortgage loans, savings, and investment products. The website reflects a mature digital presence with consistent branding and a user-friendly interface targeting individual consumers in Romania. Technically, the site leverages modern JavaScript frameworks, Google Analytics, Tag Manager, and Visual Website Optimizer for analytics and marketing, supported by a custom Erste Group CMS framework. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although explicit security headers could be more visible. The domain WHOIS data is privacy protected as per ROTLD policy, which is justified for a financial institution. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.