Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,501–5,550 of 14,261
WeTransferwe.tl
Technology
80Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
WeTransfer is a well-established technology company founded in 2007, specializing in providing a platform for fast and easy transfer of large files. The website presents a professional and modern design, targeting general users and professionals who need to share large files efficiently. The business model is primarily freemium, offering free file transfers with options for paid upgrades. The company holds a strong market position as a leading file transfer service globally. Technically, the website leverages modern frameworks such as Next.js and React, integrates payment processing via Stripe, and uses Google Analytics and Tag Manager for analytics and marketing. Hosting is provided through Amazon AWS infrastructure, ensuring good performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and visible security headers, which are recommended for enhanced security. No explicit privacy, cookie, or terms of service policies were detected in the provided content, indicating room for improvement in privacy compliance. No vulnerability disclosure or incident response information is publicly available. Overall, the website is trustworthy and professional with a good security posture but could enhance privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts.
Domains By Proxy, LLCjudge.me
E-commerce · United States
78Low
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
Judge.me is a well-established SaaS provider specializing in product and store review solutions for e-commerce merchants. The company offers tools to collect, showcase, and share reviews via high-converting widgets and seamless integrations, aiming to build trust and boost sales. The website is professionally designed using the Framer platform and includes modern web technologies such as Google Tag Manager for analytics. The domain is long-standing, registered since 2008, and uses privacy protection services typical for businesses of this nature. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies on the analyzed page. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security documentation.
Privyprivy.com
E-commerce
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Privy is a SaaS company specializing in email and SMS marketing tools tailored for e-commerce brands, particularly Shopify store owners. The platform combines intuitive marketing automation with expert coaching to help over 10,000 brands grow sales effectively. Privy positions itself as Shopify's top-reviewed marketing app, offering features like list growth, campaign management, and personalized strategy support. Technically, the website is built on modern frameworks such as React and Next.js, hosted likely on Vercel, and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and PostHog. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs standard best practices, though explicit security headers are not fully confirmed in the HTML. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR indicators. However, no public incident response or vulnerability disclosure policies were found, representing an area for improvement. Overall, Privy presents a professional, trustworthy online presence with a solid business model and technical foundation. The lack of WHOIS data due to privacy protection is typical for SaaS businesses and does not detract from legitimacy. Strategic recommendations include enhancing security header transparency, publishing vulnerability disclosure information, and improving incident response visibility.
20 Minuten20min.ch
Media · Switzerland
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
20 Minuten is the largest Swiss news portal providing 24/7 news coverage, videos, and live TV content primarily targeting the Swiss general public. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is well addressed through cookie consent mechanisms and GDPR-aligned policies. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.
Schweiz Tourismusswisswinetour.com
Hospitality · Switzerland
79Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.myswitzerland.com/fr-ch/decouvrir/ete-automne/oenotourisme/ serves as an official tourism portal for Switzerland, focusing on wine tourism experiences. It targets luxury travelers and gourmets, offering rich content about wine-related activities, accommodations, and regional information. The site is multilingual and professionally designed, reflecting a strong market position as a national tourism authority platform. Technically, it employs modern web technologies including Google Tag Manager, Algolia search, and structured data for SEO, ensuring good performance and accessibility. Security posture is solid with HTTPS and controlled script loading, though it lacks explicit security headers and published privacy or cookie policies. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and trustworthiness of the site content. Overall, the site is a reliable resource for travelers interested in Swiss wine tourism, with room for improvement in privacy compliance and security transparency.
- Mmyvaud
region-du-leman.ch
Hospitality · Switzerland
82Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website www.myvaud.ch serves as the official tourism portal for the Canton of Vaud in Switzerland, providing comprehensive information on destinations, activities, practical advice, business events, and inspirational content for visitors and locals alike. It is positioned as a key regional tourism resource with a professional and consistent brand presence. The site leverages modern web technologies including Google Tag Manager, Matomo Analytics, and Cookiebot for analytics and privacy compliance. The technical infrastructure is solid, with HTTPS enforced and security headers implemented, contributing to a good security posture. However, the absence of an explicit privacy policy and terms of service pages, as well as the lack of visible contact information in the provided HTML snippet, represent areas for improvement in privacy compliance and user trust. Overall, the site is well-designed, mobile-optimized, and provides a safe and trustworthy user experience.
- Audi AG
audi.de
Transportation · Germany
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Audi AG is a leading premium automotive manufacturer headquartered in Germany, operating the website www.audi.de to serve the German market. The site provides comprehensive information on Audi's vehicle models, leasing options, promotions, and customer services including test drive bookings. Audi holds a strong market position as a premium brand under the Volkswagen Group, targeting consumers seeking high-quality automobiles. The website is built on a modern technical infrastructure leveraging Adobe Experience Manager and proprietary Audi technologies, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and secure cookie consent mechanisms, though explicit security policies and vulnerability disclosure information are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.
- Audi
audi-shop.com
Transportation · Germany
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website audi-shop.com/de/de is an official Audi branded e-commerce platform focused on selling original Audi accessories in Germany. It targets Audi vehicle owners and enthusiasts, providing genuine parts and accessories with consistent branding and a professional design. The domain is well established since 2002 and aligns with Audi's DNS infrastructure, indicating a legitimate and trustworthy business presence. Technically, the site uses custom Audi JavaScript and web fonts to maintain brand consistency and offers a moderate performance and mobile optimization level. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site demonstrates a good business credibility and technical implementation but requires improvements in privacy compliance and security posture.
- Atlassian
atl-paas.net
Technology
82Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Atlassian's developer.atlassian.com website serves as a comprehensive AI-powered developer platform designed to support developers, customers, partners, and builders in innovating and integrating with Atlassian's suite of products such as Jira and Confluence. The platform emphasizes seamless integration capabilities and provides extensive documentation and resources to facilitate developer engagement. The site reflects Atlassian's strong market position as a leading technology company in collaboration and developer tools. Technically, the website employs modern web technologies including React and Algolia for search insights, hosted on Atlassian's own CDN infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforced and privacy compliance mechanisms like OneTrust cookie consent implemented, although explicit security headers and dedicated security policy pages are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and a strong alignment with Atlassian's corporate branding and business model.
Bauer Media Outdoorclearchannel.se
Media · Sweden
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bauer Media Outdoor is a leading outdoor advertising company in Sweden, operating under the Bauer Media Group umbrella. The company offers extensive outdoor advertising solutions including digital and classic billboards, programmatic advertising, and campaign planning services. Their market position is strong, with a wide geographic reach and a focus on impactful brand communication. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website is professional, user-friendly, and compliant with GDPR, but the absence of WHOIS data for the domain raises some concerns about domain registration legitimacy that should be addressed.
Hermann Kleinklein-vw-nutzfahrzeuge.de
Transportation · Germany
76Low
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
Hermann Klein is an official Volkswagen Nutzfahrzeuge (commercial vehicles) dealership and service center located in Fuldatal, Germany. The company offers a comprehensive range of automotive services including new and used vehicle sales, servicing, workshop facilities, rental services, and customer consultation. The website reflects a professional and consistent brand presence aligned with Volkswagen's corporate identity, targeting commercial vehicle customers in the region. Technically, the website employs modern web technologies such as React and Adobe Helix RUM for performance monitoring. It is hosted on a platform likely powered by Adobe Experience Manager, ensuring a robust content management system. The site is mobile-optimized and SEO-friendly with proper metadata and structured data, although accessibility features are basic. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
Autohaus Kleinvolkswagen-klein-fuldatal.de
Transportation · Germany
79Low
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
Autohaus Klein is a well-established family-run automotive dealership located in Fuldatal, Germany, specializing in Volkswagen and Volkswagen commercial vehicles. The business also serves as a service partner for Audi, Seat, and Škoda brands, offering a comprehensive range of services including new and certified used car sales, vehicle servicing, accident repair, and rental services. With over 60 years of experience, the company holds a strong regional market position and demonstrates consistent branding aligned with Volkswagen's corporate identity. Technically, the website employs modern web technologies such as React and Adobe Helix RUM for performance monitoring, along with custom Volkswagen CMS infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security measures include HTTPS enforcement and standard security headers, contributing to a robust security posture. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. Privacy compliance is supported by comprehensive privacy and cookie policies with consent mechanisms, reflecting adherence to GDPR requirements. However, explicit security policy and incident response information are not publicly available, representing an area for improvement. Overall, the website and domain exhibit high legitimacy and trustworthiness, with no signs of blocking or WAF interference. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and continuous monitoring of third-party scripts to maintain security and compliance standards.
- SAGAFLOR AG
gruen-erleben.de
Retail · Germany
79Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
SAGAFLOR AG operates the website gruen-erleben.de, a well-established German retail platform focused on gardening products, tips, and services. The company emphasizes quality rooted in gardening tradition and offers a variety of services including product sales, gardening inspiration, a job board for the green sector, and gift vouchers. The website targets gardening enthusiasts and consumers interested in horticulture, positioning itself as a trusted and quality-focused brand in the German retail gardening market. Technically, the website employs modern web technologies such as Bootstrap for responsive design, jQuery, and Splide.js for interactive sliders. It integrates multiple analytics platforms including Google Analytics 4 and Matomo, and uses marketing tools like Elfsight widgets and UserWay for accessibility enhancements. Hosting appears to be managed via Deutsche Telekom infrastructure, ensuring reliable performance and security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. While explicit security headers are not visible in the HTML, the overall security posture is good with no exposed sensitive data or vulnerable libraries detected. The site lacks a published security policy or incident response contact, which could be areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It provides a positive user experience with clear navigation and relevant content. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and continuous monitoring of third-party scripts to maintain security and compliance.
Autohaus Ostmann GmbH & Co. KGnutzfahrzeuge-autohaus-ostmann.de
Transportation · Germany
76Low
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
Autohaus Ostmann GmbH & Co. KG is a well-established automotive dealership group operating in the Nordhessen region of Germany, with over 60 years of experience. The company offers a broad portfolio of vehicles from Volkswagen, Volkswagen Nutzfahrzeuge, Audi, SEAT, CUPRA, ŠKODA, and MAXUS, serving both retail and commercial customers. Their services include new and used vehicle sales, servicing, repairs, parts, and fleet management, positioning them as a comprehensive automotive service provider in their regional market. The website reflects a professional and consistent brand presence aligned with Volkswagen's corporate identity. Technically, the website is built on a modern React framework integrated with Volkswagen's proprietary CMS platform, leveraging Adobe Helix RUM for performance monitoring. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Hosting and asset delivery are managed within Volkswagen's corporate infrastructure, ensuring reliability and security. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policy and incident response information are not publicly detailed. The absence of a vulnerability disclosure policy suggests an area for improvement. Overall, the website demonstrates a strong digital maturity and security posture appropriate for a medium-sized automotive dealership. Strategic recommendations include publishing a dedicated security policy, enhancing incident response transparency, and adopting a vulnerability disclosure framework to further strengthen trust and compliance.
- Autohaus Ostmann GmbH & Co. KG Wolfhagen
ostmann-wolfhagen.audi
Transportation · Germany
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Autohaus Ostmann GmbH & Co. KG Wolfhagen is an authorized Audi dealership located in Germany, specializing in new and used car sales, customer service, and related automotive offerings. The website serves as a digital portal for customers to explore Audi models, configure vehicles, and access dealership services. The company operates under the umbrella of AUDI AG, leveraging strong brand recognition and a comprehensive service portfolio to maintain a competitive position in the local automotive market. Technically, the website is built on a modern infrastructure utilizing Adobe Experience Manager in a headless CMS configuration, integrated with Audi's Falcon platform and feature apps. The site employs JavaScript frameworks and includes third-party services such as Acquire live chat for customer engagement. Performance and mobile optimization are good, with a clear navigation structure and SEO best practices implemented. From a security perspective, the site enforces HTTPS and includes a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, security headers could be enhanced, and incident response contact information is not explicitly provided. The WHOIS data is unavailable due to privacy protection or query failure, but the website's professional presentation and consistent contact details support its legitimacy. Overall, the website demonstrates a strong digital presence with good privacy compliance and security posture. Strategic recommendations include improving security headers, publishing a security.txt file, and enhancing accessibility features to further strengthen trust and compliance.
Vallée de Joux Tourismemyvalleedejoux.ch
Hospitality · Switzerland
84Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Vallée de Joux Tourisme operates a regional tourism website providing comprehensive information on accommodation, activities, events, and practical visitor information for the Vallée de Joux region in Switzerland. The website targets tourists and visitors seeking travel and leisure options in this area. It serves as an official tourism portal, leveraging the MyCity Tourism Information System platform to deliver content in multiple languages with a professional and consistent branding approach. The business model focuses on tourism promotion and information dissemination, supporting local hospitality and leisure sectors.
- Veysonnaz Tourisme
veysonnaz.ch
Hospitality · Switzerland
85Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Veysonnaz.ch is the official tourism website for the Veysonnaz region in Switzerland, providing comprehensive information about accommodation, activities, events, and local services to visitors and tourists. The site targets holidaymakers interested in outdoor and family-friendly experiences in the Alpine region. It operates primarily as a regional tourism promotion platform with a focus on enhancing visitor engagement and facilitating holiday planning. Technically, the website employs a modern tech stack including JavaScript, jQuery, Google Analytics, Google Tag Manager, and Mapbox for mapping services, hosted on a CDN infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, uses Google reCAPTCHA for form protection, and includes GDPR-compliant cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the site is legitimate, professionally maintained, and aligns well with its business purpose, with a strong presence on social media and partner integrations.
Hospitality · Switzerland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Jura & Three-Lakes Tourism operates a comprehensive regional tourism website promoting outdoor activities, cultural experiences, and accommodations in the Jura & Three-Lakes region of Switzerland. The site serves as both an information portal and an online booking platform, integrating third-party services for marketing automation, analytics, and user engagement. The business targets tourists, families, and outdoor enthusiasts, positioning itself as a key regional destination marketing organization. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Mapbox for geolocation, and Cookiebot for GDPR-compliant cookie management, hosted on a CMS specialized for tourism information. Security posture is strong with HTTPS enforced, standard security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the site lacks explicit security policies and incident response contacts, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, making it a reliable resource for visitors planning trips to the region.
- DDynapps
dynapps.fr
Technology · France
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dynapps is a specialized Odoo ERP implementation partner operating primarily in France and Europe. The company offers tailored ERP solutions to automate and optimize business processes across multiple sectors including retail, energy, healthcare, manufacturing, and logistics. Recognized as a leading Odoo Gold Partner and awarded Best Odoo Implementation Partner in Europe 2024, Dynapps demonstrates strong market positioning and expertise. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on the Odoo platform with modern web technologies and integrates third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS, security headers, and ISO 27001 certification, though some improvements are recommended such as publishing a security policy and incident response contacts. Overall, the site is trustworthy, business-focused, and compliant with GDPR regulations.
- DDynapps
dynapps.eu
Technology · Belgium
76Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Dynapps is a professional and leading Odoo implementation partner specializing in digitalizing business processes through tailored Odoo ERP solutions. The company holds a strong market position as the largest Odoo implementer in Europe and has been recognized as the Best Odoo Partner in Europe 2024. Their services cover a broad range of industries including technology, energy, manufacturing, retail, and healthcare, targeting innovative companies seeking efficient ERP solutions. The website is well-designed, mobile-optimized, and provides comprehensive information about their offerings and certifications. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap, FontAwesome, and integrates analytics and marketing tools like Google Tag Manager, Cookiebot, and Leadinfo. The site demonstrates good performance, accessibility, and SEO practices. Security-wise, Dynapps has achieved ISO 27001 certification, enforces HTTPS, and implements cookie consent mechanisms, reflecting a mature security posture. However, some security headers are not explicitly detected, and incident response contacts are not publicly listed. Overall, the website and business present a trustworthy and professional image with strong compliance and security practices. The domain WHOIS data is privacy protected, which is common and justified for this business type. No critical vulnerabilities or suspicious patterns were found. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security integrity.
Intersim AGschweizerkaese.ch
Other · Switzerland
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.schweizerkaese.ch serves as a comprehensive promotional platform for Swiss cheese, highlighting its unique taste, variety, and quality. It is operated by Intersim AG and is closely linked with Switzerland Cheese Marketing, indicating an official or semi-official role in promoting Swiss cheese culture. The site targets a broad audience including consumers interested in cheese, recipes, and Swiss culinary traditions. Technically, the site is built on TYPO3 CMS, uses modern multimedia content such as videos hosted on Vimeo, and integrates Usercentrics for cookie consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS and error monitoring via Sentry, though it lacks explicit security headers and published privacy or terms documents. Overall, the site is professional, well-branded, and trustworthy, with a strong social media presence and good user experience.
Lakrids by Johan Buelow A/Slakridsbybulow.us
E-commerce · Denmark
78Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Lakrids by Bülow is a premium confectionery company specializing in luxury licorice and chocolate products. Established in 2007, the company has positioned itself as a niche leader in the gourmet confectionery market with a strong emphasis on quality, craftsmanship, and sustainability, as evidenced by its B Corp certification. The US-specific domain lakridsbybulow.us supports their international e-commerce presence, targeting consumers seeking high-end confectionery gifts and indulgences. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. Cookie consent is managed via Cookiebot, ensuring GDPR compliance and user privacy controls. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. No security policy or incident response contacts are published, which could be improved to enhance trust and readiness. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a trustworthy and professional e-commerce presence with moderate to good security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and incident response disclosures would further strengthen their posture and customer confidence.
Lakrids by Bülow Ltd.lakridsbybulow.co.uk
E-commerce · United Kingdom
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Lakrids by Bülow Ltd. is a premium luxury confectionery brand specializing in high-quality liquorice and chocolate products. The company operates an e-commerce platform targeting general consumers seeking gourmet confectionery, with a strong international presence indicated by multiple country-specific domains. Their website is professionally designed, consistent in branding, and offers a seamless shopping experience with fast and secure transactions. The business is medium-sized, founded in 2007, and maintains active social media engagement to support brand awareness and customer interaction. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern technologies such as Google Tag Manager, Cookiebot for consent management, Microsoft Clarity for analytics, and Wistia for video content. The site demonstrates good mobile optimization and SEO practices, although there is room for improvement in accessibility and explicit security header implementation. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks a publicly accessible privacy policy, terms of service, security policy, and incident response contacts, which are critical for compliance and trust. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent with the business profile, enhancing legitimacy. Overall, the website presents a low-risk profile with a solid business foundation and technical infrastructure. Strategic improvements in privacy documentation, security headers, and accessibility would further enhance compliance and user trust.
Lakrids by Johan Bülow ABlakridsbybulow.se
E-commerce · Sweden
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Lakrids by Johan Bülow AB operates a premium e-commerce platform specializing in gourmet licorice and chocolate products, targeting a general audience with a focus on quality and gifting. The company has a strong market position in Sweden and internationally, supported by multiple regional domains and a consistent brand presence. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and integrations with major analytics and marketing services. The technical infrastructure is robust with Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, though some security headers could be improved. Privacy compliance is good, but explicit privacy and terms of service pages were not detected in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.
Lakrids by Johan Bülow A/Slakridsbybulow.com
E-commerce · Denmark
79Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Lakrids by Johan Bülow A/S operates a premium e-commerce platform specializing in luxury liquorice and chocolate products. The company has established a strong market position with a focus on quality and gifting, targeting a general audience interested in gourmet confectionery. Their website leverages the BigCommerce platform, integrating modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Microsoft Clarity for user behavior insights. The technical infrastructure is robust, hosted behind Cloudflare with secure HTTPS enforcement and a responsive design optimized for mobile users. Security posture is solid with standard best practices observed, though there is room for improvement in DNSSEC adoption and explicit security headers. Privacy compliance is addressed through a cookie consent mechanism, but the absence of a visible privacy policy and terms of service on the homepage suggests an area for enhancement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. Strategic recommendations include enhancing transparency with published security policies, improving DNS security, and expanding privacy documentation to strengthen trust and compliance.
REVIEWS.ioreviews.co.uk
Technology
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
REVIEWS.io is a technology-driven SaaS platform specializing in company and product review collection, management, and display. The platform targets e-commerce businesses and brands seeking to leverage customer feedback to build trust and increase conversions. It offers a subscription-based model with flexible plans and integrates with various e-commerce, marketing, and loyalty platforms. The website demonstrates a mature digital presence with modern design, responsive layout, and comprehensive content that clearly communicates its value proposition. Technically, the site is built on Webflow CMS and employs industry-standard tools such as Google Tag Manager, Google Ads, and Termly for cookie consent management. The infrastructure supports fast performance, mobile optimization, and accessibility best practices. Analytics and tracking are implemented with user privacy in mind, including consent mechanisms and GDPR compliance indicators. From a security perspective, the website enforces HTTPS, uses appropriate security headers, and avoids exposing sensitive data. However, explicit security policies, incident response plans, and vulnerability disclosure mechanisms are not publicly documented, representing an area for improvement. The WHOIS data is privacy protected, which is typical for commercial SaaS providers, and no suspicious patterns were detected. Overall, REVIEWS.io presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and compliance.
- EBSCO Information Services, Inc.
ebsco.com
Education · United States
84Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
EBSCO Information Services, Inc. is a leading global provider of research databases, e-journals, ebooks, and discovery services primarily serving academic libraries, public libraries, corporations, schools, government, and medical institutions. The company offers a comprehensive suite of authoritative information resources that support scholarly research and evidence-based clinical decision-making. Their market position is strong, with a focus on institutional subscription models and partnerships with educational and healthcare organizations worldwide. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. The site employs Google Tag Manager for analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. The design is professional and content-rich, supporting a high-quality user experience. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, likely due to privacy protection, which is common for enterprises but reduces transparency. Overall, the security posture is good but could be improved with more explicit security disclosures. The overall risk assessment is low, with the main recommendation being to enhance transparency around security policies and incident response. The site is trustworthy, professional, and compliant with privacy regulations, making it suitable for its target audience of academic and professional institutions.
Omnisendomnisend.com
E-commerce
84Low
NIS2 20 · GDPR 88
NIS2 20 · GDPR 88
Omnisend is a specialized ecommerce-focused email and SMS marketing automation platform designed to help ecommerce brands increase revenue efficiently through automation, segmentation, and multi-channel campaigns. The company positions itself as a nimble and user-friendly SaaS solution with strong integrations to major ecommerce platforms such as Shopify, WooCommerce, and BigCommerce. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site leverages WordPress CMS with modern JavaScript libraries, analytics, and consent management tools, indicating a well-maintained infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. WHOIS data is not publicly available, likely due to privacy protection, which slightly reduces trust but is common for SaaS businesses. Overall, the site is professional, secure, and compliant with privacy regulations, targeting ecommerce marketers and businesses seeking marketing automation solutions.
- FFacebook
fb.me
Technology
88Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Facebook, operated by Meta Platforms, Inc., is a leading global social networking platform that enables users to connect, share content, and communicate. It holds a dominant market position with a broad user base and offers key services including social networking, messaging, video sharing, and advertising. The website is professionally designed with excellent content quality and consistent branding, targeting a general audience worldwide. Technically, Facebook employs a modern JavaScript stack with React and asynchronous loading techniques, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and secure cookie practices, though explicit security headers could be enhanced. Privacy compliance is robust, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, Facebook demonstrates high business credibility and trustworthiness.
- Nendaz Tourisme
nendaz.ch
Hospitality · Switzerland
83Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Nendaz.ch is a professionally maintained tourism website representing the Nendaz region in Switzerland, a key area within the 4 Vallées ski domain. The site provides comprehensive information about mountain experiences, skiing, and local events, targeting tourists and outdoor enthusiasts. The business model focuses on destination promotion and visitor engagement, positioning itself as a leading regional tourism portal. Technically, the website employs modern technologies including Mapbox for mapping, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a mature digital infrastructure. The site is mobile optimized and uses a specialized tourism CMS, ensuring good performance and user experience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the absence of explicit terms of service and security incident response information suggests areas for improvement. Overall, the website is trustworthy, professionally designed, and compliant with relevant privacy regulations, making it a reliable source for tourism information in the region.
Less'n'moreless-n-more.com
E-commerce · Germany
77Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Less'n'more is a well-established German e-commerce business specializing in designer lighting products and custom lighting plans. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations such as Judge.me for customer reviews and Google/Facebook for marketing and analytics. The business targets consumers and professionals seeking high-quality, tasteful lighting solutions. The domain age and WHOIS data support the legitimacy and longevity of the business. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. However, direct contact information and explicit security policies are not prominently published, which could be improved to enhance trust and transparency. The technical infrastructure is modern and performant, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain protections, but could benefit from enabling DNSSEC and publishing vulnerability disclosure and incident response information.
- GGoogle LLC
airbnb.tools
Technology · United States
83Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The analyzed URL is a Google Accounts sign-in page, part of Google's authentication infrastructure. It serves as an OAuth 2.0 authorization endpoint for users to authenticate with Google services, including enterprise and consumer applications. The page is professionally designed, mobile-optimized, and uses modern web technologies and security best practices. It is hosted on Google Cloud Platform and integrates with Google's identity management systems. Security posture is strong with HTTPS enforced, security headers present, and use of PKCE for OAuth flows. No vulnerabilities or suspicious content were detected. Privacy compliance is moderate given the lack of direct privacy policy links on this specific page, but Google overall maintains comprehensive policies. The domain is a subdomain of google.com, a well-established and trusted domain. Overall, this page is a critical component of Google's identity services and is highly trustworthy.
Riddleriddle.com
Technology · Germany
86Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Riddle is a well-established SaaS platform founded in 2014, specializing in interactive content creation such as quizzes, polls, surveys, and minigames. It serves a diverse clientele including publishers, brands, sports teams, and marketers, positioning itself as a leader in engagement and lead generation tools. The platform offers extensive customization, team collaboration, and monetization options, supported by a strong brand presence and trusted by major organizations worldwide. Technically, the website demonstrates modern web development practices with a responsive design, accessibility compliance (WCAG 2.1), and integration of marketing and analytics tools like Google Tag Manager and CookieHub. The use of JSON-LD structured data enhances SEO and content discoverability. The platform emphasizes privacy and security, hosting data securely in the EU and maintaining ISO 27001 certification. Security posture is robust with HTTPS enforced, GDPR compliance, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS transparency slightly impacts trust but is understandable given privacy regulations. Overall, the site is professional, secure, and user-friendly, with comprehensive support and clear business information.
Dr. BABOR GmbH & Co. KGbabor.com
Retail · Germany
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Dr. BABOR GmbH & Co. KG operates a professional and well-established online shop specializing in luxury skincare and beauty products targeted primarily at the German market. The website offers a broad range of products including face care, body care, men's care, and makeup, supported by personalized skin analysis and expert advice services. The company positions itself as a premium brand with a strong digital presence and customer engagement through loyalty programs and newsletters. Technically, the website employs modern JavaScript frameworks, integrates multiple marketing and analytics tools, and provides a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and secure consent management, though some security headers could be improved. The WHOIS data for the subdomain is missing, which is typical for subdomains, but the main domain and company information confirm legitimacy. Overall, the website demonstrates a mature digital infrastructure and a strong business model in the retail skincare sector.
Hapag-Lloyd Cruiseshl-cruises.de
Transportation · Germany
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Hapag-Lloyd Cruises operates a premium luxury and expedition cruise service targeting discerning travelers seeking unique maritime experiences. The website is professionally designed with a clear focus on luxury cruises and expedition travel, offering services such as travel concierge and pre/post cruise programs. The company maintains a strong market position in the luxury cruise sector in Germany, supported by a consistent brand presence and active social media channels. Technically, the website employs modern web technologies including Google Tag Manager for analytics, Friendly Captcha for form security, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, though no major CMS or hosting provider details are explicitly detected. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site uses HTTPS and implements captcha protections, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic with cookie consent but no visible privacy or terms of service pages in the analyzed snapshot. Overall, the website is trustworthy and professional with a strong business credibility score. Recommendations include enhancing security headers, publishing privacy and security policies, and adding vulnerability disclosure information to improve transparency and compliance.
- EERROR: The request could not be satisfied
gulfair.com
Other
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.gulfair.com is currently inaccessible, returning a CloudFront 403 error indicating that the request is blocked due to either traffic volume or configuration issues. This prevents any meaningful content or metadata extraction. The WHOIS query for the domain returned no match, indicating that the domain may not be registered or that WHOIS data is protected or unavailable. Consequently, no business, contact, or security policy information could be retrieved. The technical infrastructure appears to be hosted behind Amazon CloudFront, which is enforcing access restrictions. Due to the lack of accessible content and registration data, the security posture cannot be properly assessed, and the overall trustworthiness of the domain is low. The site does not expose any content that would raise content safety concerns.
Rimi Balticrimibaltic.com
Retail · Latvia
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Rimi Baltic is a major retail grocery operator in the Baltic States, operating multiple store chains and an e-commerce platform. The company is part of the larger Salling Group, a significant retail player in Northern Europe. The website presents a professional image with clear business information, multiple service offerings including home delivery and click & collect, and a focus on sustainability and customer convenience. Technically, the site uses modern tools like Cloudinary and Google Tag Manager, and is mobile optimized with good content quality. Security posture is adequate with HTTPS and CSRF tokens, but lacks some security headers and explicit security policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though cookie policy page is not explicit. WHOIS data is missing, which raises some legitimacy concerns, but the overall business credibility and transparency mitigate risk. Recommendations include improving security headers, publishing terms of service and incident response info, and verifying domain registration details.
HES-SO Fribourghefr.ch
Education · Switzerland
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
HES-SO Fribourg is a prominent higher education institution in Switzerland, offering a range of academic programs including bachelor, master, and postgraduate education across four specialized schools. The institution emphasizes innovation, research, and international collaboration, positioning itself as a key regional player in education and applied sciences. The website reflects a professional and consistent brand image aligned with its parent organization HES-SO. Technically, the site employs modern web technologies such as Bootstrap, Google Tag Manager, and Axeptio for cookie consent, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, serving its audience effectively.
Omnisendomnisnippet1.com
E-commerce
84Low
NIS2 20 · GDPR 88
NIS2 20 · GDPR 88
Omnisend operates as a specialized ecommerce-focused email and SMS marketing automation platform designed to empower ecommerce brands to increase revenue efficiently. The company offers a comprehensive suite of marketing tools including email campaigns, SMS, web push notifications, AI-driven personalization, and seamless integrations with major ecommerce platforms such as Shopify, WooCommerce, and BigCommerce. The website reflects a mature digital presence with professional branding, clear messaging, and extensive content tailored to ecommerce marketers. Technically, the website is built on WordPress with modern front-end technologies including Swiper.js for sliders, Wistia for video hosting, and Cookiebot for GDPR-compliant cookie consent management. The site is well-optimized for SEO and mobile responsiveness, leveraging Google Tag Manager and Visual Website Optimizer for analytics and A/B testing. Security best practices such as HTTPS and cookie consent are implemented, though some security headers could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response information and lack of a vulnerability disclosure program represent areas for enhancement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness from a domain registration perspective but does not detract significantly given the professional web presence. Overall, Omnisend presents a credible and professional ecommerce marketing platform with strong technical and content quality. Strategic improvements in security transparency and WHOIS data availability could further enhance trust and compliance.
Global Media & Entertainmentthisisdax.com
Media · United Kingdom
78Low
NIS2 35 · GDPR 85
NIS2 35 · GDPR 85
Global Media & Entertainment operates a comprehensive digital advertising exchange platform called DAX, connecting brands with audiences across audio and outdoor media. The company holds a strong market position in the UK media landscape, leveraging its portfolio of popular radio stations and outdoor advertising assets. The website reflects a mature digital presence with professional design, clear navigation, and extensive content supporting its advertising services. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and GDPR-compliant consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
Milestone Inc.milestoneinternet.com
Technology · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Milestone Inc. is a professional digital experience marketing company specializing in SEO-friendly CMS solutions, advanced schema markup, local listings, reviews, FAQs, and AI-powered marketing tools. The company targets businesses across multiple industries including hospitality, finance, retail, and technology, positioning itself as a leader with numerous industry awards and a strong client portfolio. Their business model focuses on B2B services and software platforms that enhance customer acquisition and digital marketing effectiveness. Technically, the website is built on Milestone CMS 6.0 and leverages modern web technologies such as UIkit, Google Tag Manager, HubSpot, Pardot, and Tawk.to for analytics, marketing automation, and live chat support. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, with fast loading times and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, Milestone Inc.'s website reflects a mature, professional digital marketing business with strong technical and content quality. Strategic improvements in security headers and verification of domain registration would enhance trust and compliance.
- FactSet
factset.com
Finance · United States
85Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
FactSet is a leading enterprise provider of financial data, market insights, and analytics solutions, serving over 9,000 firms globally. The company offers advanced AI-powered tools designed to enhance productivity and decision-making for financial professionals, including portfolio managers and investment researchers. Their business model is subscription-based, focusing on delivering comprehensive financial data and analytics to institutional clients. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the website employs modern JavaScript frameworks (likely Vue.js), integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Drift chat, and Pardot, and implements robust cookie consent mechanisms via OneTrust. The site is optimized for performance and mobile responsiveness, with good accessibility and SEO practices. From a security perspective, the site enforces HTTPS, uses security headers like Content Security Policy and Strict-Transport-Security, and avoids exposing sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved. The absence of WHOIS data is unusual but likely due to registry query limitations rather than malicious intent. Overall, FactSet's website demonstrates a strong security posture, excellent content quality, and good privacy compliance, supporting its position as a trusted financial data provider.
Login | Invocainvoca.net
—
78Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Medalliamedallia.com
Technology · United States
85Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Medallia is a leading enterprise software company specializing in experience management solutions that improve customer, employee, contact center, and digital experiences. Their platform integrates AI and analytics to provide actionable insights for businesses globally. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistency. Technically, the site is built on WordPress, hosted on AWS infrastructure, and leverages modern marketing and analytics technologies such as Google Tag Manager, Adobe DTM, Marketo, and Thunderhead. Security posture is robust with HTTPS enforcement, enterprise-grade certifications (ISO 27001, SOC 2), and a dedicated security page, although incident response and vulnerability disclosure information could be more explicit. The absence of WHOIS data limits domain registration trust assessment but does not detract from the overall professionalism and trustworthiness of the site. Recommendations include publishing incident response contacts, adding a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security and compliance.
Medalliakampyle.com
Technology
85Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Medallia is a leading enterprise software company specializing in experience management solutions that improve customer, employee, contact center, and digital experiences. Their SaaS platform integrates AI and analytics to provide actionable insights, targeting large organizations globally. The website reflects a mature digital presence with comprehensive content, professional design, and strong branding consistency. Technically, the site leverages modern marketing and analytics technologies including Google Tag Manager, Adobe DTM, Marketo, and others, hosted likely on AWS infrastructure with WordPress CMS. Security posture is robust with HTTPS, security headers, and enterprise-grade security messaging, though explicit incident response and vulnerability disclosure policies are not publicly visible. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is unavailable, indicating privacy protection, which is justified for this business type. Overall, the site is trustworthy, professional, and well-optimized.
MCIwearemci.com
Other
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MCI is a global marketing engagement agency specializing in optimizing communications strategies for corporates and associations. The company offers services including event management, digital communications, and professional association solutions, positioning itself as a large, professional service provider in the marketing sector. The website reflects a mature digital presence with multi-language support and integration of modern marketing tools such as Google Tag Manager and CookieHub for consent management. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response contacts suggests room for improvement. The lack of WHOIS data introduces uncertainty regarding domain legitimacy, but the professional website and social media presence support the business's credibility. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, making it a trustworthy platform for its target audience.
- Bubok Publishing, s.l.
bubok.com
Media · Spain
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Bubok Publishing, s.l. operates a well-established independent self-publishing platform and online bookstore targeting independent authors and readers interested in self-published works. The company positions itself as a leading independent publisher with a broad network of services including book publishing, distribution, and author promotion. The website reflects a mature digital presence with a professional design, clear navigation, and integration of multiple marketing and analytics tools. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. Security posture is generally strong with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and privacy policies. However, the absence of WHOIS data and security headers suggests areas for improvement. Overall, Bubok presents a credible and trustworthy online presence with room to enhance security transparency and technical modernization.
Technology
81Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website is a domain sales landing page hosted on Sedo.com, offering the domain beautyjar.de for purchase. Sedo is a well-established domain marketplace with over 26 years of experience, facilitating thousands of domain transfers monthly. The page provides clear purchase options, contact information, and multiple payment methods, targeting domain buyers and investors. Technically, the site uses modern JavaScript modules and Cloudflare DNS services, but lacks advanced security headers and DNSSEC. The cookie consent mechanism is present, but privacy and terms of service policies are missing on this page. Security posture is moderate with room for improvement in DNS security and HTTP headers. Overall, the site is functional and trustworthy for its purpose but could enhance compliance and security transparency.
Helsana Versicherungen AGhelsana.ch
Healthcare · Switzerland
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Helsana Versicherungen AG is Switzerland's leading health insurance provider, serving over two million policyholders. The company offers a comprehensive range of insurance products including basic and supplementary health insurance, tailored solutions for special life situations such as cross-border commuters and newborns, and digital services like the myHelsana portal and online premium calculators. The website reflects a mature digital presence with modern technologies such as React and Adobe Helix, combined with strong privacy and consent management via OneTrust. Security posture is robust, with HTTPS enforcement, security headers, and no detected vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, Helsana presents a trustworthy, professional, and user-friendly platform aligned with its market leadership in the Swiss healthcare insurance sector.
Hillebrand Liegen + Sitzenliegen-sitzen.de
Retail · Germany
79Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Hillebrand Liegen + Sitzen is a specialized retail business located in Kassel, Germany, focusing on ergonomic beds, mattresses, seating furniture, and office furniture. The company emphasizes health and comfort, offering personalized sleep consultations including back measurements and selling premium brands such as Lattoflex and Dormabell. Their market position is strengthened by partnerships such as being the official health partner of the Kassel Huskies. Technically, the website is built on WordPress with modern plugins for SEO and cookie management, hosted on rzone.de servers. The site is well-optimized for mobile and SEO, featuring structured data and clear navigation. Security posture is good with HTTPS and cookie consent mechanisms, but lacks some security headers and formal security policies. Overall, the website is professional, trustworthy, and provides a positive user experience, though it could improve privacy compliance by publishing a privacy policy and terms of service.