Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
46,551–46,600 of 99,066
Inspirion GmbHinspirion.eu
Retail · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Inspirion GmbH operates as an importer and supplier of promotional products and advertising gifts based in Sottrum near Bremen, Germany. The company offers a broad catalog of approximately 2,400 items, targeting business customers seeking promotional merchandise. The website supports multiple European languages, indicating a strategic focus on the European market. The business model centers on retail distribution of promotional items, positioning Inspirion as a medium-sized player in the retail sector for advertising materials. Technically, the website is built using modern web technologies including JavaScript, CSS, and HTML5, with the UKit framework for UI components and integration of SalesManago for marketing automation. The site appears to be built on a Shopware platform or similar e-commerce CMS, providing a structured and navigable product catalog. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF token generation endpoints, indicating some security best practices. However, no explicit security headers were detected, and there is a lack of published privacy, cookie, or incident response policies. The absence of contact information and privacy compliance mechanisms reduces the overall security posture and privacy compliance rating. Overall, the website is professional and functional with a moderate risk profile. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, publishing incident response and vulnerability disclosure information, and providing clear contact details to improve trust and compliance.
- MMAKITO
makito.es
Retail · Spain
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
MAKITO is a Spanish-based company specializing in the sale of promotional products through a professional e-commerce platform. The website offers a broad catalog of items ranging from office supplies to textiles and sustainable products, targeting businesses and professionals seeking branded merchandise. The site is built on the ePages platform and incorporates modern web technologies including jQuery, RequireJS, and Google Analytics for tracking and marketing purposes. While the website is well-structured and visually consistent, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data for the domain is not publicly accessible due to registry restrictions, limiting the ability to fully verify domain legitimacy. Overall, the website demonstrates a solid technical foundation and business presence but would benefit from enhanced privacy disclosures and security headers.
Other
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website at www.xdconnects.com appears to be inaccessible or inactive as the WHOIS data indicates the domain is not registered. The website content is minimal or blocked, with no privacy, cookie, or terms of service policies detected. There is no contact information or security policies available, and no external links or social media profiles are found. The site uses Sana Commerce CMS but lacks visible security headers or SSL configuration, indicating a poor security posture. Overall, the site lacks credibility and trustworthiness due to the domain status and absence of essential business and security information.
ANDA Present Ltd.andapresent.com
Retail · Hungary
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ANDA Present Ltd. is a well-established company founded in 2002, specializing in the B2B sale of promotional products and marketing tools. The company offers a broad product catalog including categories such as food & drinkware, bags, technology accessories, writing instruments, office supplies, and sustainable product lines. Their market position is that of a mature player with a medium-sized business footprint, primarily serving businesses seeking promotional gifts and customized marketing solutions. The website reflects a professional and consistent brand image with a focus on ESG and sustainability initiatives. Technically, the website employs modern web technologies including Google Tag Manager, SVG icons, and responsive design frameworks like Bootstrap. Hosting is provided by hostingnet.hu, and the domain is long-standing with a registration dating back to 2002. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers. There are no visible incident response or security policy pages, and no vulnerability disclosure or security.txt files were found. Privacy compliance is basic, with a privacy policy present but no cookie consent banner detected. Contact information is limited to address and social media links, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional with a solid business foundation, but could enhance its security posture and privacy compliance to meet higher standards. Strategic improvements in security headers, cookie consent, and incident response documentation are recommended to strengthen trust and compliance.
DIAL GmbHdial.de
Technology · Germany
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
DIAL GmbH is a medium-sized German technology company specializing in lighting design software and related services. Their flagship product, DIALux evo, is a leading free lighting design software used globally by lighting designers and luminaire manufacturers. The company also offers professional training through its Academy, operates a photometric lighting laboratory, and publishes industry-related content. The website reflects a strong market position with a clear focus on professional lighting design and intelligent building automation. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates multiple analytics platforms including Matomo and Google Analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent mechanisms, and obfuscated email addresses, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the company's credibility in the lighting technology sector.
- Pub-Me
pub-me.com
Technology · Czech Republic
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Pub-Me is a small technology company based in the Czech Republic offering a modular content management system (CMS) named Pub-Me CMS, along with related web services such as project management, consulting, and custom module development. The website is professionally designed with clear navigation and content focused on presenting their CMS product and services. Technically, the site uses jQuery, Lightbox, and Google Analytics, but lacks modern security headers and visible privacy or cookie policies, which impacts its compliance posture. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself appears professional and business-oriented. Overall, the site demonstrates moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and reduce risk.
- LLyžování.cz
lyzovani.cz
Other · Czech Republic
65Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Lyžování.cz is a Czech informational portal dedicated to skiing and winter sports for the 2024/2025 season. It provides comprehensive content including snow reports, ski resort information, ski equipment marketplace, travel offers, accommodation options, and skiing-related videos. The site targets skiing enthusiasts primarily in the Czech Republic and neighboring countries. It operates as an advertising-supported platform with partnerships and affiliate links to travel and ski service providers. Technically, the website uses a traditional web stack with jQuery 1.11.0, Google Tag Manager, Google Analytics, and Gemius for audience measurement. The site implements GDPR-compliant cookie consent mechanisms and uses HTTPS, although no advanced security headers were detected. The WHOIS data is not publicly available, indicating privacy protection, which is common for small informational websites. Overall, the site is legitimate, well-established, and provides valuable content to its niche audience.
tredition.com - Print & Publishing Servicestredition.com
Media · Germany
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
tredition.com is a German-based self-publishing platform and book marketing service provider established in 2006. The company offers a comprehensive suite of tools and services to authors, including book creation, publishing, marketing, and printing, supporting over 20,000 authors and 200,000 books. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress with premium plugins and modern analytics tools such as Matomo and Google Analytics with consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Overall, tredition.com presents a trustworthy and mature digital presence with a clear focus on empowering authors in the self-publishing market.
Mikulášska chata s.r.o.mikulasskachata.sk
Hospitality · Slovakia
69Medium
NIS2 2 · GDPR 60
NIS2 2 · GDPR 60
Hotel Mikulášska chata s.r.o. operates a mountain hotel located in the Demänovská dolina region of Slovakia, offering accommodation, wellness, dining, and event services primarily targeting tourists, families, and winter sports enthusiasts. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about the hotel and its offerings. The technical infrastructure leverages modern web technologies and integrates analytics and marketing tools with user consent mechanisms, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with a clear cookie policy and GDPR adherence. Overall, the business demonstrates high credibility and trustworthiness with transparent contact information and active social media engagement.
- Pareizā Ķīmija
kimija.lv
Other · Latvia
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pareizā Ķīmija is a Latvian event agency focused on client collaboration, cultural and art event production, and realization of their own ideas. The company targets Latvian-speaking clients interested in cultural projects and event management. The website is built on Drupal 7 with an outdated jQuery library and uses Google Analytics for tracking. The technical infrastructure is basic with moderate performance and limited mobile optimization. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and use of vulnerable libraries. Privacy and cookie policies are missing, indicating poor compliance with GDPR. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.
E-commerce · Latvia
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DUDU.lv, DUDU ligzdas, lielisku sajūtu firma SIA operates an e-commerce website specializing in metal crafts, souvenirs, and custom coin minting services primarily targeting Latvian customers. The business offers a variety of metal products including decorative nails, door handles, coins, and creative workshops for events. The website is built on the PrestaShop platform, indicating a standard e-commerce infrastructure with moderate technical maturity. The site is well-structured, mobile-optimized, and includes essential business information such as contact details, privacy policy, and terms of service, supporting a trustworthy user experience. From a security perspective, the website enforces HTTPS and uses secure forms with tokens, but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, but the website content and contact information appear consistent with a legitimate small Latvian business. Google Tag Manager is used for analytics, indicating moderate user tracking. Overall, the website presents a safe and professional e-commerce presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, adding security headers, publishing a security policy, and establishing a vulnerability disclosure process to enhance trust and compliance.
Digital агентство Rightwayrightway.digital
Technology · Russia
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Rightway Digital Agency is a small technology-focused business founded in 2019, specializing in website development and internet marketing services primarily targeting businesses seeking to increase traffic, clients, and profits. The website is professionally designed using Joomla CMS and incorporates modern web technologies such as jQuery, Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Microsoft Clarity, and Google Ads. Hosting and DNS services are managed via Cloudflare, providing a good SSL configuration and domain protection status. However, the site lacks explicit privacy and cookie policies, and no contact emails or phone numbers are directly available on the site, which may impact user trust and compliance with privacy regulations. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the website is functional, well-structured, and mobile-optimized but could improve in privacy compliance and security best practices.
Energy
50Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website ww25.ibcsolar.com appears to be a parked domain primarily monetized through advertising networks such as Google Adsense and Bodis. The content is minimal, generic, and focused on solar energy-related keywords without providing substantive business information or services. The lack of WHOIS registration data and the use of a subdomain prefix 'ww25' are common indicators of domain parking or placeholder status rather than an active commercial website. Technically, the site uses basic HTML, CSS, and JavaScript with no modern frameworks or CMS detected. There is no HTTPS enabled, and no security headers are present, resulting in a weak security posture. Privacy and cookie policies exist but are basic and lack consent mechanisms. No contact information, social media links, or business credentials are provided, limiting trust and credibility.
ORCA Software GmbHausschreiben.de
Technology · Germany
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
AUSSCHREIBEN.DE is a leading German platform specializing in construction product data and tender texts, serving over 10,000 daily users in the DACH region. Operated by ORCA Software GmbH, the platform integrates with BIM and AVA software to streamline project planning and tendering processes. The website demonstrates a modern technical infrastructure built on Angular, hosted likely on Azure, with good performance and mobile optimization. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.
- SMA Solar Technology AG
sma-sunny.com
Energy · Germany
68Medium
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
SMA Solar Technology AG operates the website www.sma-sunny.com as a corporate blog focused on solar technology and energy transition topics. The site provides educational content, technical updates, and company insights targeted at solar technology professionals, PV system operators, and energy sector stakeholders. The company is positioned as a specialist in solar system technology with a strong market presence in Germany and internationally. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPML for multilingual support, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data for the domain is unavailable, which is unusual but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-maintained, supporting SMA's business objectives in the renewable energy sector.
SMA Solar Technology AGsma-partner.de
Energy · Germany
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
SMA Solar Technology AG operates a dedicated partner program website targeting professional installers and planners in the solar energy sector primarily in German-speaking countries. The site offers comprehensive partner benefits including training, sales and marketing support, and exclusive resources to strengthen partner success. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates GDPR-compliant cookie consent mechanisms. The security posture is solid with HTTPS enforced and secure login forms, though explicit security headers and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-aligned with the business objectives of supporting a strong partner network in the renewable energy industry.
Tredger Enterprises Inc.stationmade.com
E-commerce · Canada
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Stationmade.com is a professional website specializing in crafting exceptional Shopify apps, targeting Shopify store owners and e-commerce merchants. The business operates under Tredger Enterprises Inc., a Canadian entity, and positions itself as a trusted developer with thousands of Shopify stores relying on its apps to enhance customer experience and revenue. The website content is well-structured, mobile-optimized, and leverages modern technologies such as SvelteKit, indicating a mature technical infrastructure. From a security perspective, the website enforces HTTPS and demonstrates good SSL configuration. However, it lacks several security headers and does not provide a cookie consent mechanism, which are important for enhancing security posture and privacy compliance. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and business information appear legitimate and professional. Overall, the website presents a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and reduce potential risks.
- ArkUpsell Team
shopapps.ai
E-commerce
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ArkUpsell is a small e-commerce technology provider offering a free Shopify app designed to increase average order value by providing additional discounts at checkout. The website is professionally designed with clear messaging targeting Shopify store owners seeking to optimize sales. The technical infrastructure leverages modern front-end frameworks such as Bootstrap and integrates third-party services like Crisp Chat for customer support and Termly for cookie consent management. Hosting and DNS are managed via Cloudflare, providing reliable performance and security. The security posture is adequate with HTTPS enforced and domain transfer protection enabled, though improvements are recommended in security headers and incident response transparency. Overall, the website is functional, trustworthy, and compliant with basic privacy standards, though it lacks direct contact information and detailed security policies.
Other
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.inbox.lv is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks access to all substantive content. This prevents extraction of business, technical, or security information from the site. The domain WHOIS data is also unavailable due to query limits, further limiting the ability to verify domain registration details or legitimacy. The site appears to be protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated access or attacks. However, the lack of accessible content and metadata means no assessment of business operations, services, or compliance can be made at this time.
- EELECTRONIC LAB, UAB
e-lab.lt
Technology · Lithuania
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Electronic Lab (E-LAB) is a Lithuanian IT company specializing in the development of advanced B2C and B2B e-commerce solutions, with over 15 years of experience. They offer custom online store development and operate their proprietary e-commerce platform, E-NGINE, targeting businesses in Lithuania and the Baltic region. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses a mix of established JavaScript libraries and frameworks such as jQuery, Bootstrap, and Slick Carousel, with Google Tag Manager for analytics and marketing. Security posture is solid, supported by ISO 27001 certification and HTTPS enforcement, though some improvements like HTTP security headers and updated libraries are recommended. Privacy compliance is well handled with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data is missing or invalid, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced domain legitimacy verification and minor security improvements.
GrowthHero.iogrowthhero.io
Technology
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
GrowthHero.io is a SaaS company specializing in partner marketing software that integrates affiliate, influencer, and referral marketing into a single platform. It targets online brands and e-commerce businesses, offering tools to build and manage partner programs effectively. The company positions itself as a top-rated solution with strong customer satisfaction and multiple platform integrations including Shopify and BigCommerce. Technically, the website is built on WordPress with Elementor and Bootstrap frameworks, leveraging modern tracking and marketing tools such as Google Tag Manager, Hotjar, and HelpScout. Security posture is strong with HTTPS, security headers, and reCAPTCHA, though explicit security policies and incident response details are not published. Overall, the website is professional, well-structured, and trustworthy, with no signs of blocking or WAF interference.
Ninja Teamninjateam.org
Technology · Iceland
71Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Ninja Team is a specialized WordPress plugin development company established in 2015, offering a suite of popular plugins designed to enhance WordPress website functionality. Their market position is solid within the WordPress ecosystem, supported by a portfolio of featured plugins and a loyal user base exceeding 200,000 clients. The company targets WordPress site owners, developers, and businesses seeking efficient plugin solutions. Technically, the website is built on WordPress with modern tools such as Elementor, Yoast SEO, and LiteSpeed Cache, hosted behind Cloudflare for performance and security. The site demonstrates excellent design, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and privacy protection on domain registration, though DNSSEC is not enabled and no explicit security policy is published. Privacy compliance is good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, with moderate user tracking via Google Analytics and Facebook Pixel. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and implementing cookie consent to enhance compliance and trust.
ThemeGoodsthemegoods.com
Technology
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ThemeGoods is an established WordPress theme developer founded in 2011, offering premium themes trusted by over 130,000 customers. The company emphasizes simplicity, stylish design, and strong customer support. Their business model revolves around theme sales primarily through marketplaces like Envato. Technically, the website runs on WordPress 6.3.5 with common JavaScript libraries and uses a CDN for asset delivery. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.
SIA Albatross Spaalbatrossresort.lv
Hospitality · Latvia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Albatross Resort, operated by SIA Albatross Spa, is a hospitality business located in Latvia offering resort accommodation, spa, fitness, and wellness services. The website is professionally designed using WordPress with WooCommerce and booking plugins, providing a modern and user-friendly experience. The business targets general audiences seeking relaxation and wellness by the sea. Technically, the site uses a mature WordPress ecosystem with SEO and performance optimizations, though some security headers are not explicitly visible in the HTML source. The security posture is good with HTTPS enforced and no obvious vulnerabilities detected. However, the absence of a visible privacy policy and WHOIS data limits full compliance and legitimacy verification. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security header implementation.
Miittech, SIAmiittech.lv
Technology · Latvia
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Meemo, operated by Miittech, SIA, is a Latvian-based IT company specializing in occupational safety and process automation solutions. The company offers a suite of services including the E-Worksafety IT system, occupational and fire safety services, training programs, and on-site inspections. Positioned as a niche B2B provider, Meemo targets organizations seeking to improve workplace safety and compliance through technology. The website reflects a professional and consistent brand image, supported by recognized certifications such as ISO 9001 and memberships in safety initiatives, enhancing its market credibility. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Material Icons for UI, and likely Ruby on Rails as the backend framework. The site is mobile-optimized with good SEO and accessibility basics, delivering moderate performance. Hosting and DNS services are provided by reputable providers, though DNSSEC is not enabled, representing a minor security gap. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is privacy protected but consistent with the company profile and business age, indicating legitimacy. Overall, Meemo presents a trustworthy and professional online presence with solid business and technical foundations. Strategic improvements in security transparency and DNS security would further enhance its posture and stakeholder confidence.
Yandexyandex.st
Technology · Russia
56Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Yandex's JavaScript libraries page serves as a developer-focused resource providing access to various open source JavaScript frameworks and libraries hosted on Yandex servers. The website is well-established, reflecting Yandex's position as a leading Russian technology company with a strong developer ecosystem. The technical infrastructure leverages modern technologies such as React and integrates Yandex Metrika for analytics, demonstrating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published on this page. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and technically sound but could improve transparency and compliance documentation.
- "Legno LL", SIA
legnoll.lv
Manufacturing · Latvia
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Legno LL is a Latvian-based company specializing in supplying finishing materials such as lacquers and paints primarily for furniture manufacturing and wood processing industries. Positioned as one of the leading suppliers in Latvia, the company targets B2B customers including furniture manufacturers, carpenters, and wooden house builders. The website is professionally designed using the Wix platform, featuring clear business information and contact details, though lacking explicit privacy and terms of service documentation. Technically, the site leverages Wix's Thunderbolt framework and includes modern polyfills and security scripts, with HTTPS enforced and a cookie consent mechanism in place. However, security headers and incident response information are absent, indicating room for improvement in security posture. Overall, the site is safe, business-focused, and well-structured, but would benefit from enhanced privacy compliance and security transparency.

Media · Latvia
60Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Latvijas reitingi is a Latvian media portal focused on delivering news, rankings, sector reports, and topical information primarily for Latvian-speaking audiences. The website has a well-structured layout with multiple news categories including politics, economy, culture, and technology. It operates as an online media business with advertising as a key revenue stream, evidenced by Google Adsense and an internal ad network. The site demonstrates a moderate to good level of digital maturity, using modern web technologies such as Bootstrap, Google Fonts, and Google Tag Manager. Mobile optimization and navigation clarity are good, supporting a positive user experience. Security posture is adequate with HTTPS enforced and some security best practices observed, though some security headers are not explicitly detected. Privacy compliance is basic with a cookie consent mechanism present but no explicit privacy policy page found in the provided content. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. Overall, the website appears legitimate and professional but would benefit from enhanced transparency and security header implementation.
- Oorderlogicapp.com | 525: SSL handshake failed
orderlogicapp.com
Other
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website orderlogicapp.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare 525 error page. This prevents access to any meaningful content or business information. The domain is registered since 2016 via Squarespace Domains II LLC and uses Cloudflare DNS and CDN services. No privacy, cookie, or terms of service policies are present, nor are there any contact details or forms. The technical infrastructure relies on Cloudflare and Squarespace, but the SSL misconfiguration severely impacts availability and trust. Security posture is weak due to the SSL issue and absence of security headers. Overall, the website is in a blocked state, limiting any comprehensive analysis of business or security maturity.
- VITALITY Slezsko, s.r.o.
penzionovecka.cz
Hospitality · Czech Republic
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Penzion Ovecka is a small family-friendly pension located in Nýdek, Czech Republic, offering accommodation, restaurant, wellness, and event services. The business targets families, tourists, corporate groups, and schools, positioning itself as a niche hospitality provider with a focus on comfort and nature proximity. The website is professionally designed with good content quality and clear navigation, supporting online booking through the Profitroom platform. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and implements HTTPS with appropriate security headers, reflecting a mature digital infrastructure. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, aligned with GDPR requirements. Security posture is strong with no visible vulnerabilities or exposed sensitive data, though the absence of explicit security or incident response policies suggests room for improvement. Overall, the website presents a trustworthy and professional online presence for the pension, with moderate to high scores in content, technical implementation, security, privacy, and business credibility.
Pochutnej Si! Bistropochutnejsibistro.cz
Hospitality · Czech Republic
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Pochutnej Si! Bistro is a modern hospitality business located in Třinec, Czech Republic, specializing in street food, daily lunch menus, catering services, and gift vouchers. The website reflects a small but professional local bistro with a young, enthusiastic team focused on quality and freshness. The business targets general audiences including locals and visitors seeking quality casual dining and takeaway options. Technically, the website is built using React.js with a modern front-end stack, hosted likely via the Czech registrar WEDOS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS in use but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is comprehensive and includes email, phone, physical address, and a contact form. Social media presence is active on Facebook and Instagram. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
VITALITY Slezsko, s.r.o.vitalniobchod.cz
Retail · Czech Republic
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Vitální obchod is a Czech-based small business operating an e-commerce platform specializing in food catering, weekly menus, desserts, and gift vouchers. The company, legally known as VITALITY Slezsko, s.r.o., has been established since 2009 and targets general consumers seeking catering and meal services. The website is built on WordPress with WooCommerce, leveraging modern plugins and marketing integrations such as Google Tag Manager and Facebook Pixel. The site demonstrates good content quality, clear navigation, and consistent branding, positioning it well within its local market segment. Technically, the site uses a robust tech stack with a reputable hosting provider and shows moderate performance and mobile optimization.
CCCccc.eu
Retail · Poland
73Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
CCC is a large European retail company specializing in shoes, bags, and fashion accessories, targeting consumers across multiple European countries. The website serves as a multilingual portal directing users to country-specific sites, reflecting a broad market presence in the retail footwear and accessories sector. The business model is primarily retail-focused with an e-commerce component supported by physical stores. The company branding is consistent and the website content aligns with the business focus on fashion trends and products. Technically, the website uses AngularJS as its primary framework, integrated with common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The hosting is provided by home.pl S.A., a reputable Polish hosting provider. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but basic, indicating room for improvement in technical maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies on the landing page. The use of third-party tracking scripts indicates moderate user tracking. No forms or contact information related to security or incident response were found, which limits transparency and user trust. The WHOIS data is consistent with the business claims and shows no suspicious patterns, supporting domain legitimacy. Overall, the website is functional and moderately secure but lacks comprehensive privacy and security disclosures. Strategic improvements in privacy compliance, security headers, and user transparency would enhance trust and compliance posture.
Armaniarmani.com
Retail · Italy
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Armani is a globally recognized luxury fashion brand specializing in high-end apparel, accessories, and lifestyle products. The official website serves as a premium e-commerce platform and brand showcase, targeting affluent consumers and fashion enthusiasts worldwide. The brand maintains a strong market position with multiple subsidiary lines such as Emporio Armani and Armani Exchange. Technically, the website employs modern web technologies including Tailwind CSS and Google Tag Manager, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and secure digital presence consistent with a leading luxury brand.
- PPIXMAN s.r.o.
comenius.cz
Education · Czech Republic
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.comenius.cz represents a small Czech non-profit organization named COMENIUS, operated by PIXMAN s.r.o., focused on promoting education, culture, science, and technical cooperation. Founded in 1990, it supports international contacts and projects aimed at societal development in the Czech Republic. The website content is primarily in Czech and includes references to cultural heritage and educational initiatives. Technically, the site uses older JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.20, along with Bootstrap and Google Analytics for visitor tracking. The site includes a cookie consent banner with express consent, indicating some level of privacy compliance, but lacks visible privacy policy or terms of service pages. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the data, and outdated libraries present potential vulnerabilities. WHOIS data is unavailable, limiting domain legitimacy verification and reducing trust scores. Overall, the site is functional but basic in design and technical implementation, with moderate trustworthiness and compliance.
Affiliana s.r.o.testado.cz
Media · Czech Republic
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Testado.cz is a Czech online review magazine operated by Affiliana s.r.o., founded in 2019. The site offers comprehensive product reviews and comparisons across a wide range of categories including electronics, household appliances, and lifestyle products. It targets general consumers seeking trustworthy advice to make informed purchasing decisions. The business model is primarily content publishing supported by affiliate marketing partnerships with major e-commerce platforms such as Heureka.cz and Alza.cz. The website demonstrates a strong market position within the Czech Republic's consumer media sector.
Olzalogistic.com, s.r.o.olzalogistic.cz
Transportation · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Olzalogistic.com, s.r.o. operates a professional logistics website focused on cross-border parcel delivery services primarily between the Czech Republic and other Central and Eastern European countries such as Poland, Slovakia, Romania, Hungary, and others. The company targets Czech e-commerce businesses seeking affordable and efficient international shipping solutions. Their offerings include parcel shipping, customer support for e-shops, marketing assistance in foreign markets, and handling returns. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, with Google Analytics and reCAPTCHA v3 integrated for analytics and security. The site uses HTTPS with a valid SSL certificate, but lacks some recommended security headers which could enhance its security posture. Privacy compliance is strong, with a clear cookie consent mechanism and a comprehensive privacy policy in Czech language, indicating good adherence to GDPR requirements. Security-wise, the site shows good practices such as HTTPS enforcement and use of reCAPTCHA, but the absence of visible security headers and no public incident response or vulnerability disclosure policies suggest areas for improvement. The lack of WHOIS data is a concern for domain legitimacy verification, although the website content and contact information appear genuine and professional. Overall, the website presents a trustworthy and functional business platform with moderate technical sophistication and good privacy compliance. Strategic improvements in security headers and domain registration transparency would further enhance trust and security.
PROTEUS ABRASIVESproteus-abrasives.com
Manufacturing · Germany
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
PROTEUS ABRASIVES is a manufacturing company specializing in precision-engineered grinding wheels, offering cost-effective and high-quality products primarily targeting tech-savvy grinding machine operators. The company is part of the Krebs & Riedel group, leveraging German engineering expertise combined with Asian production efficiency. The website is professionally designed using WordPress with modern SEO and GDPR compliance features. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements in security headers and explicit policies are recommended. Overall, the website presents a trustworthy and professional image with clear business focus and product offerings.
Officine Digitali Italiane Srlofficinedigitaliitaliane.it
Technology · Italy
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Officine Digitali Italiane Srl is a small digital agency and software house based in Bergamo, Italy, founded in 2020. The company offers a broad range of digital marketing and software development services including strategy, digital advertising, SEO, social media management, email marketing, graphic design, UX/UI design, web and app development, and software development. The website is professionally designed, mobile-optimized, and well-structured, targeting businesses across Italy seeking integrated digital solutions. Technically, the site is built on WordPress with modern plugins and technologies such as Yoast SEO, Contact Form 7, and Iubenda for privacy compliance. Security posture is strong with HTTPS and DNSSEC enabled, though some HTTP security headers could be improved. Privacy compliance is robust with a comprehensive privacy and cookie policy managed via Iubenda, including granular consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, enhancing trustworthiness.
EL TOROeltoro.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
EL TORO is a Czech digital agency specializing in marketing, SEO, PPC, and custom web and e-shop development with over 18 years of experience. The company positions itself as a reliable partner offering guarantees and comprehensive digital services to businesses seeking to enhance their online presence. The website reflects a mature digital infrastructure with modern technologies such as Alpine.js, Swiper.js, and Google Tag Manager integrated for analytics and marketing purposes. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of public WHOIS data and privacy policy page slightly impacts trust but does not detract from the overall professionalism and credibility of the site.
- Spa Resort PAWLIK-AQUAFORUM
pawlik-aquaforum.cz
Hospitality · Czech Republic
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Spa Resort PAWLIK-AQUAFORUM is a well-established four-star hospitality and wellness business located in Františkovy Lázně, Czech Republic, with a history dating back to 1868. The resort offers comprehensive spa, medical, and recreational services including a large aquapark, wellness treatments, and family-friendly amenities. The website reflects a mature digital presence built on WordPress with the Divi theme, integrating modern web technologies such as jQuery, Google Analytics, and a third-party webchat service. While the site is professionally designed and provides clear contact information, it lacks explicit privacy and cookie policies, which may pose compliance risks under GDPR. Security posture is adequate with HTTPS enabled but could be improved by implementing additional security headers and form protections. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
121 Online LTDcheck-it.online
Technology · United States
55Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Check-IT.online is a small technology company founded in 2021 that provides automated website health monitoring and SEO keyword tracking services primarily targeting small to medium business owners. Their service includes hourly website uptime checks, daily keyword rank monitoring, SSL certificate expiry alerts, GDPR compliance visibility checks, and instant notifications to help website owners maintain online presence and competitive advantage. The website is professionally designed with good user experience and clear navigation, offering multiple subscription plans including a free tier to attract users. Technically, the website uses a modern tech stack including jQuery, Bootstrap, Google Analytics, Facebook Pixel, and Google reCAPTCHA for security on forms. Hosting is provided by TMDCloud as inferred from DNS records. Performance is moderate with good mobile optimization. However, some security best practices such as DNSSEC and security headers are missing, and no explicit incident response or security policy is published. The security posture is adequate with HTTPS enforced and no exposed sensitive data, but improvements are recommended to enhance DNS security and add security headers. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but lacks detailed GDPR compliance indicators and data retention policies. Business credibility is supported by client testimonials and clear service descriptions, though no direct contact emails or phone numbers are publicly listed. Overall, Check-IT.online presents a trustworthy and functional service with room for improvement in security and privacy transparency. Strategic enhancements in DNS security, security headers, and incident response disclosures would strengthen their security posture and customer trust.
RaftingNorsko.czraftingnorsko.cz
Hospitality · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
RaftingNorsko.cz is a Czech-based rafting service operating in Norway, specializing in rafting experiences on the Sjoa and Otta rivers. The business targets Czech tourists and families seeking outdoor adventure in the Norwegian national parks of Jotunheimen and Rondane. The website is well-structured, professionally designed, and provides clear information about services, pricing, and contact options. It leverages WordPress with popular plugins for SEO, forms, and GDPR compliance, indicating a mature digital presence. Security measures include HTTPS, Google reCAPTCHA, and cookie consent management, though explicit security policies are absent. Overall, the site demonstrates a good security posture with no visible vulnerabilities or suspicious elements.
- SSMARTTRAVEL s.r.o.
primadovolena.com
Hospitality · Czech Republic
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website primadovolena.com serves as a photo and video gallery portal for the Czech travel agency SMARTTRAVEL s.r.o., showcasing images and videos from various outdoor and adventure travel events such as rafting, kayaking, and cycling tours. The site targets Czech-speaking customers interested in these activities and acts as a community engagement platform by inviting users to share their own media. Technically, the site uses legacy technologies like Flash alongside jQuery and jQuery UI for interactive elements, indicating a need for modernization. Security posture is moderate but lacks modern security headers and visible HTTPS enforcement in the provided data. Privacy compliance is weak, with no visible privacy or cookie policies, and Google Analytics is used without clear consent mechanisms. The WHOIS data is missing or indicates the domain may not be registered, which is a critical concern for trust and legitimacy. Overall, the site is functional and content-rich but requires significant improvements in security, privacy, and domain legitimacy to enhance trustworthiness.
- EELEKTRO-LUMEN, s. r. o.
lumenlights.de
Energy · Czech Republic
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ELEKTRO-LUMEN, s. r. o. is a Czech-based manufacturer specializing in innovative and environmentally responsible LED lighting solutions for public and urban spaces. With over 30 years of experience, the company emphasizes certified products such as DarkSky Approved and BLUE FREE™ technologies that minimize light pollution and blue light emissions. Their market position is strengthened by multiple design awards and ISO certifications, targeting municipalities, urban planners, and lighting designers across Europe. Technically, the website employs modern JavaScript libraries and tracking tools, hosted on a Czech provider, with good mobile optimization and user experience. Security posture is adequate with HTTPS and secure forms, but lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security policies and incident response disclosures are recommended.
- EELEKTRO-LUMEN, s. r. o.
bluefree.eu
Energy · Czech Republic
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ELEKTRO-LUMEN, s. r. o. operates the BLUE FREE™ website to promote and provide environmentally responsible LED lighting solutions that minimize blue light impact on ecosystems. The company targets municipalities and public space planners seeking sustainable lighting options. The website is professionally designed, multilingual, and includes detailed product information, references, and contact forms. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS usage and secure form handling, though lacks explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy policy and GDPR references. WHOIS data is unavailable due to privacy protection, but the website content and certifications support legitimacy. Overall, the site demonstrates a solid business presence with room for security and privacy enhancements.
FEBE SCRAP s. r. o.febescrap.cz
Energy · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
FEBE SCRAP s. r. o. is a Czech Republic-based company specializing in the purchase, processing, and sale of metal and non-metal waste materials. Established in 2013, it serves industrial clients including foundries and steelworks across Europe. The company is part of the Multicraft Group and offers services such as scrap collection, technology demolition, transportation, and plastic and paper processing. The website reflects a professional and consistent brand image with clear service descriptions and partner affiliations. Technically, the site uses modern web technologies and is mobile-optimized, though some security best practices like security headers and privacy policies are missing. The absence of WHOIS data for the domain raises some concerns about registration transparency, but the business information and website content suggest legitimacy. Overall, the company appears to be a medium-sized, established player in the recycling and logistics sectors with a solid market position.
- SEPLAST, s.r.o.
seplast.cz
Manufacturing · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SEPLAST, s.r.o. is a Czech Republic-based small manufacturing company specializing in the production and distribution of plastic industrial radial fans. The website presents a professional and focused business profile targeting industrial clients requiring specialized ventilation solutions. The company leverages a WordPress CMS with the Divi theme, indicating a standard and maintainable digital infrastructure. The website is accessible without any blocking or WAF challenges, and it implements HTTPS, ensuring secure communication. However, the absence of WHOIS data and registrant information reduces transparency and trustworthiness from a domain registration perspective. Additionally, the lack of explicit privacy and terms of service policies, as well as missing security headers, indicates areas for compliance and security improvement. Overall, the website is functional and professional but would benefit from enhanced security and compliance documentation.
Plastika SV s.r.o.plastika-sv.cz
Transportation · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Plastika SV s.r.o. is a Czech Republic-based company specializing in the manufacturing and distribution of road safety products, specifically silniční směrové sloupky (road delineator posts) and plastic industrial radial fans. Established in 2006 as a spin-off from PLASTIKA a.s., the company has over 22 years of experience and serves customers domestically and in neighboring Central European countries. Their product portfolio includes CE and EN 12899-3 certified road posts in various designs, including compact, mounted, and flexible types. The company also offers custom plastic manufacturing and special traffic signage production. The website is professionally designed using WordPress and the Divi theme, featuring clear navigation, relevant content, and multiple language options.
BREBECK COMPOSITE S.R.O.brebeckcomposite.com
Manufacturing · Czech Republic
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BREBECK COMPOSITE S.R.O. is a Czech-based manufacturer specializing in composite materials including carbon, glass, and aramid fiber components primarily serving the automotive, aerospace, and motorsport sectors. Founded in 2011, the company holds multiple industry certifications such as EN 9100:2018 and ISO 9001 and 14001 standards, underscoring its commitment to quality and environmental management. The website reflects a professional B2B business model targeting industrial clients with detailed portfolio and reference listings including high-profile automotive and aerospace companies. Technically, the website is built on WordPress with a modern tech stack including jQuery and FullPage.js, supporting multilingual content via WPML. The site is moderately performant with good mobile optimization and SEO practices, though accessibility features are basic. Analytics are implemented via Google Analytics and Google Tag Manager, indicating moderate user tracking without explicit cookie consent mechanisms. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks visible HTTP security headers and DNSSEC is not enabled. No incident response or security policy information is published, representing an area for improvement. The WHOIS data is consistent with the business claims, showing a mature domain registered since 2011 with no privacy protection, enhancing trust. Overall, the website is professional and trustworthy with strong business credibility but has gaps in privacy compliance and security best practices. Addressing these gaps would improve the security posture and regulatory compliance, enhancing user trust and reducing risk.