Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
63,151–63,200 of 99,067
Emslandpfotenemslandpfoten.de
Other · Germany
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Emslandpfoten is a small, regionally focused dog training school based in Germany's Emsland region. The website presents the business clearly with a focus on dog training courses, including preparation for the dog license (Hundeführerschein). The site targets dog owners and enthusiasts seeking professional training services locally. Technically, the website is built on WordPress using Elementor and common frontend libraries like jQuery and Bootstrap, providing a modern and mobile-optimized user experience. Security-wise, the site uses HTTPS and a GDPR-compliant cookie consent mechanism but lacks explicit security policies or incident response information. Overall, the site is professional and trustworthy but could improve security headers and provide more detailed business and security information.
- PPedaDOGical
pedadogical.de
Other · Germany
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
PedaDOGical is a small German business specializing in dog training services based in Ulm, offering a range of in-person and online courses, seminars, and a related dog food shop. The website reflects a well-established local presence with a strong social media footprint and mentions of media exposure, positioning it as a recognized dog school in its region. Technically, the site is built on the cm4all platform hosted by Strato, using older JavaScript libraries but maintaining moderate performance and basic mobile optimization. Security posture is adequate with cookie consent implemented but lacks advanced security headers and updated libraries, indicating room for improvement. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is safe, professional, and trustworthy with no signs of malicious content or blocking mechanisms.
LabCols inside - Hundetraininglabcolsinside.de
Other · Germany
65Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
LabCols inside - Hundetraining is a small, local dog training service based in Leipzig, Germany, offering professional, needs-oriented, and violence-free dog training both online and on-site. The business is led by a certified CumCane® trainer and also provides dog walking services. The website is built on WordPress using the Divi theme and optimized with the Yoast SEO plugin, reflecting a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides clear information about its services, targeting dog owners in Leipzig and online clients. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy for its niche but would benefit from enhanced compliance and security measures.
Hundezentrum Snoopyhundezentrum-snoopy.de
Other · Germany
58Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hundezentrum Snoopy is a small, locally focused dog training and care service provider based in Grebenstein, Germany. The business offers a variety of services including puppy and young dog training, individual training sessions, bootcamps, dog sports like mantrailing, social contact hours, dog day care, and boarding (pension). Additionally, they provide seminar room rentals and host events related to dog training. The company is led by Milena Drönner, a certified dog trainer with credentials from the CANIS Hundeakademie, enhancing the business's credibility and trustworthiness. The website reflects a professional and well-structured digital presence with clear navigation and comprehensive service descriptions.
Team Mensch Hund, Milich Manus GbRhunde-erziehen.de
Other · Germany
61Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Hundeschule TeamH is a small, specialized dog training and behavioral consulting business based in Schömberg, Germany. They offer a holistic approach to dog training, focusing on relationship building and understanding, with services including puppy and young dog groups, problem dog consulting, online training, coaching, and a pet shop. The website is professionally designed, mobile-optimized, and SEO-friendly, with clear navigation and comprehensive content. Technically, the site runs on WordPress with the Enfold theme and uses modern web technologies and caching for performance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. The business maintains transparent contact information and complies with GDPR requirements. Overall, the site reflects a trustworthy and professional local business with a strong digital presence.
- HHome
the-doghouse.de
Hospitality · Germany
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website the-doghouse.de represents a small local business specializing in comprehensive dog care services including dog boarding, daycare, training, and retail of pet food and equipment. The business targets dog owners primarily in the German regions around Schöffengrund, Wetzlar, Gießen, and Frankfurt. The site is professionally designed with clear navigation and relevant content that effectively communicates the business offerings. Technically, the site is built on the 1&1 IONOS Website Editor platform, leveraging modern technologies such as jQuery, Mapbox, and CDN services to ensure moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and CAPTCHA on contact forms, but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.
Hundezentrum Laufhundezentrum-lauf.de
Other · Germany
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Hundezentrum Lauf is a small local business based in Germany specializing in dog training, particularly Zughundesport, and offering additional services such as dog walking. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard polyfills for compatibility. The technical infrastructure is typical for a small business website, with moderate performance and good mobile optimization. Security measures include HTTPS usage and some script-based security overrides, but lack explicit security headers and formal policies. Privacy and cookie policies are absent, which is a compliance gap. Overall, the site presents professional content relevant to its target audience but could improve in transparency and security practices. The domain registration data is limited but consistent with a small business using Wix hosting. No WAF or blocking mechanisms were detected, allowing full content access.
Hunde- & Katzenhotel Rathjenhundeundkatzenhotel-rathjen.de
Hospitality · Germany
64Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
Hunde- & Katzenhotel Rathjen is a small local hospitality business specializing in dog and cat boarding services in Oyten, Germany. The website presents a professional and relevant description of their pet hotel services, targeting pet owners seeking safe and enjoyable boarding for their animals. The business operates on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is partial, with no privacy policy or terms of service found. Overall, the website is trustworthy and suitable for its business purpose but could improve in compliance and security transparency.
Braun-Klabes GmbHbraun-klabes.de
Hospitality · Germany
51Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Braun-Klabes GmbH operates a specialized dog services business in Germany, offering dog training, a dog hotel, daycare, and a BARF shop. The company targets dog owners seeking quality care and training in the Münsterland region. The website is built on WordPress with WooCommerce and several plugins, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides comprehensive service information, although explicit contact details are limited to a contact page form. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.
Mein Hund - Hundezentrumhundezentrum-meinhund.de
Other · Germany
74Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Mein Hund - Hundezentrum is a professional dog training and education service located near Worms, Germany. The company offers a range of services including dog schooling, individual training, courses on dog education, and seminars. The website positions the business as a local, trusted provider with a clear focus on quality and customer engagement. The digital infrastructure is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by SEO and cookie consent plugins, reflecting a mature and compliant online presence. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, while privacy compliance is well addressed through comprehensive policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its target audience of dog owners and enthusiasts.
- HHundeschule ALLERHUNDE
allerhunde.de
Other · Germany
61Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Hundeschule ALLERHUNDE is a professional dog training school established in 2005, serving the Landkreis Celle region in Germany. The business offers a range of services including individual and group training, puppy courses, behavioral consultations, and certification preparation such as the Sachkundenachweis and Hundeführerschein. The website reflects a small, regionally focused service provider with a consistent brand and clear communication channels including phone, email, and social media. Technically, the site uses standard web technologies like HTML5, CSS, JavaScript, jQuery, and Bootstrap, providing a moderate performance and basic mobile optimization. Security posture is moderate with no visible security headers or explicit HTTPS confirmation, and privacy compliance is partial due to the absence of cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- HHundeschule hundherum harmonisch
hundherum-harmonisch.de
Other · Germany
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hundeschule hundherum harmonisch is a small regional dog training school based in Niederbayern, Germany, offering personalized and harmonious dog training services. The website is built on the Jimdo Creator CMS platform, leveraging standard web technologies and third-party widgets such as POWr.io and Facebook integration. The business targets dog owners seeking effective and trust-building training between humans and dogs. The website content is professionally presented with clear navigation and contact information, supporting a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy adherence, suitable for its small business scope.
TopDogs Mediatopdogs.de
Media · Germany
60Medium
NIS2 10 · GDPR 55
NIS2 10 · GDPR 55
TopDogs Media is a German-based company specializing in professional video marketing solutions aimed at effective brand building and supporting local service providers. The website presents a focused business model offering video production and social media marketing services, targeting local businesses seeking to enhance their marketing through video content. The technical infrastructure includes modern tracking technologies such as TikTok and Facebook pixels, asynchronous script loading, and HTTPS usage, indicating a moderate level of digital maturity. However, the absence of explicit privacy and cookie policies, contact information, and security headers suggests gaps in compliance and security posture. Overall, the website is professionally designed with good content relevance but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Hundeschule Anders-Artighundeschule-anders-artig.de
Other · Germany
58Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Hundeschule Anders-Artig is a specialized dog training school located in the Ludwigsburg district of Germany. The business focuses on providing individualized training for dogs of all ages and behavioral backgrounds, including rescue dogs and those with behavioral challenges. The trainer, Eli, has over 15 years of experience, positioning the school as a trusted local provider with a strong emphasis on personalized service. The website is professionally designed using WordPress and Elementor, featuring clear navigation, detailed service descriptions, and integrated social media links. Technical infrastructure includes modern plugins and a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the website reflects a credible and trustworthy small business with good digital maturity and compliance practices.
- LLernwerk Hund Mensch
lernwerk-hund-mensch.de
Other · Germany
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Lernwerk Hund Mensch is a small German dog training service provider offering a range of activities including individual coaching, workshops, and specialized training such as Ruhetraining. The website is built on the Jimdo CMS platform and hosted by Jimdo GmbH, leveraging their CDN and widget services. The digital infrastructure is modern and mobile-optimized, with basic accessibility and SEO features implemented. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies are absent. The website content is professional, relevant, and trustworthy, targeting dog owners interested in training and leisure activities with their pets. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious WHOIS data.
- Kirsten's Heimtierbedarf & Hundeschule
kirstens.de
Retail · Germany
65Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Kirsten's Heimtierbedarf & Hundeschule is a small, locally focused business based in Emtinghausen, Germany, specializing in pet care services including dog boarding, dog training, pet supplies retail, and animal naturopathy. The website reflects a professional and customer-centric approach, offering detailed information about services and easy contact options. The business targets pet owners in the local region, emphasizing personalized service and affordability. Technically, the website uses modern web technologies including JavaScript, jQuery, and Cookiebot for cookie consent management, with embedded YouTube videos and external analytics services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and formal security policies could enhance protection. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent dialog aligned with GDPR requirements. Overall, the website is trustworthy and well-maintained, suitable for its business scope and audience.
University of Massachusetts Dartmouthumassd.edu
Education · United States
63Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
University of Massachusetts Dartmouth is a nationally recognized public research university offering a wide range of undergraduate, graduate, and doctoral programs. The institution targets prospective and current students, faculty, staff, alumni, and the local community, positioning itself as a leader in innovation and academic excellence within the region. The website reflects a mature digital presence with comprehensive content, multimedia integration, and clear navigation tailored to its audience. Technically, the site leverages modern frameworks such as Bootstrap and Adobe Typekit fonts, and is managed via the TerminalFour CMS platform, indicating a robust infrastructure supporting content management and delivery. Security posture is strong with HTTPS enforced, use of security headers, and no visible vulnerabilities, although there is room for improvement by adding explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and aligns well with the university's brand and mission.
Technology
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website content for coveo.com is currently inaccessible due to an AWS WAF security challenge page, which prevents retrieval of substantive business, security, or compliance information. The domain is registered since 2003 with GoDaddy.com, LLC and shows standard domain status protections, indicating a legitimate and established presence. Due to the blocked content, no metadata, forms, contact information, or policies could be extracted or analyzed. The technical infrastructure includes AWS hosting and WAF protection, suggesting a focus on security at the infrastructure level. However, the lack of accessible content limits the ability to assess the website's design, user experience, privacy compliance, and security posture in detail.
Alps Lodge Fissalpslodge.at
Hospitality · Austria
55Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Alps Lodge Fiss is a small hospitality business specializing in lifestyle hotel accommodations directly adjacent to ski slopes in the Serfaus-Fiss-Ladis region of Tirol, Austria. The website presents a professional and well-structured digital presence, leveraging TYPO3 CMS and modern web technologies to deliver a visually appealing and user-friendly experience. Key services include hotel rooms, lounges, wellness, and ski-related amenities targeting tourists and ski enthusiasts. The business maintains active social media channels and integrates third-party services for enhanced user engagement. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business with a good market position in regional ski tourism.
Alps Fissalps.at
Hospitality · Austria
55Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Alps Fiss operates a boutique lifestyle hotel located in Fiss, Tirol, Austria, specializing in ski and wellness tourism with direct access to ski pistes. The business targets winter and summer tourists seeking high-quality accommodation and leisure experiences in a scenic alpine environment. The website reflects a professional hospitality brand with a strong regional presence and multiple related service sites. Technically, the site is built on TYPO3 CMS with modern web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is trustworthy and well-maintained, supporting the business's market position effectively.
Hotel Salnerhofsalnerhof.at
Hospitality · Austria
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Hotel Salnerhof is a premium 4-star superior lifestyle resort located in Ischgl, Austria, offering luxury accommodation, wellness, and gourmet dining experiences. The website targets tourists seeking high-end hospitality services in both summer and winter seasons. The business is well-positioned in the hospitality sector with a strong focus on wellness and culinary excellence. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes responsive design and SEO best practices. Security posture is good with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website reflects a professional and trustworthy business with strong digital maturity.
- TThree Miles - Businesscenter Mils
three-miles.at
Real Estate · Austria
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Three Miles - Businesscenter Mils is a local Austrian business specializing in the rental of modern office and exhibition spaces in Mils bei Imst, Tirol. The company targets businesses seeking premium commercial real estate with excellent visibility and accessibility near the A12 highway. Their business model focuses on leasing commercial properties to a diverse set of tenants, including insurance, marketing agencies, architecture firms, and other service providers. The website reflects a professional and consistent brand image, providing clear contact information and business details to support customer engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and demonstrates good SEO practices with comprehensive metadata and structured data. Performance is moderate, with minor issues such as some broken image links that should be addressed to enhance user experience. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no formal security or incident response policies are published. The use of Matomo analytics indicates moderate user tracking balanced with privacy considerations. Overall, the security posture is solid but could be improved by implementing additional HTTP security headers and publishing vulnerability disclosure information. The overall risk assessment is low, with no indications of suspicious activity or content safety concerns. Strategic recommendations include enhancing security headers, fixing broken assets, and formalizing security policies to further strengthen trust and compliance.
- MMax & Future
max.hu
Media · Hungary
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Max & Future is a Hungarian creative and technological company specializing in brand creation, event management, graphic design, production, online development, and contact center services. Established since 1998, the company leverages over 25 years of experience to combine creativity with technology, targeting businesses seeking comprehensive branding and event solutions. The website reflects a professional and consistent brand image with detailed service descriptions and a portfolio of prominent clients. Technically, the site uses Bootstrap for responsive design and includes modern web assets, though some SEO and accessibility features could be enhanced. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and privacy compliance is low due to missing policies. Overall, the domain's WHOIS data aligns well with the business claims, indicating legitimacy and trustworthiness.
- BBornegyed
bornegyed.hu
Hospitality · Hungary
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Bornegyed.hu is a local tourism and cultural event portal focused on the Budafok-Tétény district of Budapest, Hungary. The website promotes wine cellar tours, cultural programs, and local events, targeting residents and tourists interested in the region's wine culture and gastronomy. The business operates as an information and event promotion platform with a niche market position in hospitality and tourism. Founded in 2018, it maintains a consistent brand presence and offers newsletter subscriptions with GDPR-compliant consent mechanisms. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, FontAwesome, and Google Maps API. It is mobile-optimized with good SEO practices and moderate performance. The site employs Google Analytics and Google Tag Manager for user tracking, though it lacks a visible cookie consent banner. The CMS appears custom or unknown, and no hosting provider details are evident. From a security perspective, the site enforces HTTPS and secures user input forms such as the newsletter subscription modal. However, it lacks visible security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a privacy policy document available but no cookie policy or terms of service pages. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture. Strategic recommendations include implementing cookie consent mechanisms, adding security headers, publishing security policies, and maintaining regular vulnerability assessments.
- divibib GmbH
onleihe.de
Technology · Germany
71Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
divibib GmbH operates a professional digital lending platform primarily focused on library users and institutions, offering services such as the Onleihe platform for e-books and digital media. The company is positioned as a leading provider in the digital library sector in Germany, supported by its parent company ekz Bibliotheksservice GmbH. The website demonstrates a mature digital presence with good content quality, clear navigation, and comprehensive user support resources. Technically, the site uses modern frameworks like React and privacy-conscious analytics tools such as Matomo, indicating a commitment to user privacy and modern web standards. However, the absence of WHOIS data for the domain www.divibib.com introduces some uncertainty regarding domain registration transparency. Security posture is moderate, with cookie consent mechanisms in place but lacking visible security headers and explicit incident response policies. Overall, the website is trustworthy and professional but would benefit from enhanced security configurations and improved domain registration transparency.
IBTCeopac.net
Education · Germany
59Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
BVS eOPAC is a specialized online library catalog service operated by IBTC, targeting libraries and their users primarily in Germany. The platform offers media research, user account management, and mobile app access, positioning itself as a niche SaaS provider in the education sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, it uses modern web technologies including HTMX and supports mobile platforms via dedicated apps. Security posture is moderate with some gaps such as missing DNSSEC and security headers, and no published security or incident response policies. Privacy compliance is basic with a cookie consent mechanism and a privacy policy page present, but no terms of service or vulnerability disclosure. Overall, the domain is well-established and trustworthy, with a good business credibility score.
IT-Kommunalhinweisportal.at
Government · Austria
65Medium
NIS2 25 · GDPR 48
NIS2 25 · GDPR 48
IT-Kommunal operates a Hinweisportal website tailored for the public administration sector in Austria, providing IT solutions to help organizations detect and address issues proactively. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and demonstrates a basic but consistent design and content quality suitable for a small business focused on government clients. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled and good SSL configuration, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate, supported by consistent WHOIS data and domain legitimacy, but contact information and trust signals are missing. Overall, the site is functional and safe but requires improvements in privacy, security policies, and contact transparency to enhance trust and compliance.
Einbock GmbHeinbock.com
Media · Germany
56Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Einbock GmbH is a German media company operating multiple specialized online portals focused on legal services, public relations, and expert directories. Their flagship sites include JuraForum.de, a legal portal with extensive lawyer search and forums; openPR.de, a press release distribution platform; and other niche portals serving professionals and businesses. The company has a solid market position with a history dating back to early 2000s and recognized awards, indicating a reputable presence in their sector. Technically, the website uses a straightforward stack with jQuery and Matomo analytics, emphasizing privacy-conscious tracking. The site is well-structured, mobile-optimized, and provides clear navigation and professional content. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data but lacks published security policies and incident response contacts. The missing WHOIS data for the domain is a notable concern, potentially impacting trust and domain legitimacy verification. Overall, the security posture is moderate but could benefit from enhanced transparency and technical controls. The overall risk is moderate with a recommendation to verify domain registration status, implement cookie consent for GDPR compliance, and strengthen HTTP security headers. These steps will improve trust, compliance, and resilience against potential threats.
- de Jeugdbibliotheek
jeugdbibliotheek.nl
Education · Netherlands
69Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.jeugdbibliotheek.nl serves as the official digital platform for the Dutch youth library service, targeting children and young adults aged 0-18 years. It offers a broad range of services including e-books, audiobooks, printed books, reading videos, magazines, and online learning resources. The site is well-branded, consistent, and provides clear navigation tailored to its audience. Technically, it is built on Adobe Experience Manager, uses modern web technologies, and integrates Matomo analytics for user tracking. The site is mobile optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie policy present but no active consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and privacy controls.
- de online Bibliotheek
onlinebibliotheek.nl
Education · Netherlands
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The online Bibliotheek is a prominent Dutch digital library platform offering subscription-based access to e-books, audiobooks, and digital magazines. It targets a broad audience of readers and listeners in the Netherlands, providing 24/7 access through web and mobile applications. The platform is well-positioned as a leading national digital lending service with clear subscription models and a professional online presence. Technically, the website is built on a modern CMS likely Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and professionalism.
Kibérelem.hukiberelem.hu
Real Estate · Hungary
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Kibérelem.hu is a Hungarian online platform specializing in commercial real estate rentals, primarily serving Budapest. The website offers a marketplace for property owners and businesses to list and find commercial spaces such as shops, offices, and specialized premises. It targets small and medium-sized enterprises and local municipalities, providing features like auctions and community-driven feedback to support business growth. Technically, the site uses a modern but somewhat dated tech stack including jQuery 2.2.4, Bootstrap, and Owl Carousel, with Google Analytics and cookie consent mechanisms implemented. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is enforced, but some outdated libraries and missing security headers present potential risks. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the site is trustworthy and professionally maintained, with clear contact information and active social media presence.
Other · Belgium
63Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
EBN (European Business and Innovation Centre Network) is a well-established non-profit organization that operates a pan-European innovation community focused on certifying and supporting startups, SMEs, and entrepreneurial innovators. The website presents EBN as a leading innovation partner network with over 175 members and 630+ business experts across more than 35 countries. Their key services include the EU|BIC quality certification label, industry best practices, project participation, skills training, and expert support. The organization targets innovation ecosystems, business support organizations, and regional development actors. Technically, the website is built on WordPress 6.8.1 with a modern tech stack including jQuery, Swiper.js, Google reCAPTCHA, and GDPR-compliant cookie management via Complianz. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and consistent branding. Hosting and domain registration are managed by Combell NV, a reputable registrar. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and manages cookie consent properly. While some security headers are not explicitly visible in the HTML, the overall posture is good with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism. Contact information is clearly provided, including email, phone, physical address, and social media links. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or WAF interference. It scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and authoritative source in its domain.
BRticketbr-ticket.de
Media · Germany
75Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
BRticket is a specialized ticket sales platform focused on concerts and cultural events in Munich and Bavaria, closely affiliated with Bayerischer Rundfunk and its associated orchestras and choirs. The website offers comprehensive ticketing services including a discounted U30 ticket program and access to a wide range of events via partnership with MunichTicket. The platform is well-positioned in the regional cultural market, serving a diverse audience from classical music enthusiasts to younger concertgoers. Technically, the website is built on WordPress with modern SEO and accessibility practices, including integration of Yoast SEO and Usercentrics CMP for GDPR compliance. The site is mobile-optimized and uses standard libraries such as jQuery. Analytics and marketing tools include Google Tag Manager and Piano Analytics, implemented with user consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site could improve by adding explicit security headers and publishing a security policy or vulnerability disclosure. Privacy compliance is robust, with clear privacy and cookie policies and consent management. Overall, BRticket presents a professional, trustworthy, and user-friendly platform with a solid business model and good digital maturity. Strategic improvements in security transparency and header implementation would further enhance its security posture and trustworthiness.
- BBundesministerium für Wohnen, Stadtentwicklung und Bauwesen
miteinander-im-quartier.de
Government · Germany
51Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.miteinander-im-quartier.de is an official German government platform supporting the cross-departmental strategy 'Soziale Stadt - Nachbarschaften stärken, Miteinander im Quartier' under the Federal Ministry for Housing, Urban Development and Building. It provides comprehensive information about model programs, community projects, events, and resources aimed at strengthening neighborhoods and social cohesion. The site targets government officials, urban planners, social workers, and the general public interested in urban development. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries including Modernizr, and integrates Matomo analytics for privacy-conscious user tracking. It is hosted on agenturserver infrastructure, with HTTPS enforced and a cookie consent mechanism implemented. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers like Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. The WHOIS data aligns with the hosting and website content, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve security posture and transparency.
- 5500 Internal Server Error
39049.it
Other
62Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website www.39049.it is currently inaccessible, presenting a 500 Internal Server Error page indicating a server-side issue or misconfiguration. Due to the lack of accessible content, no business information, metadata, or technical details could be extracted. The absence of privacy policies, contact information, or security headers suggests the site is not operational or maintained at this time. Without WHOIS data, domain legitimacy and registration details cannot be verified. The overall digital maturity is very low, with no visible security posture or compliance measures in place.
camindu GmbHihr-maklervergleich.de
Real Estate · Germany
56Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Ihr Maklervergleich, operated by camindu GmbH, is a German online platform specializing in the verification, rating, and recommendation of real estate agents for buying, selling, renting, and leasing properties. The website offers comprehensive educational content, customer reviews, and a free, non-binding service to connect users with qualified real estate professionals. The platform positions itself as a trustworthy intermediary in the German real estate market, emphasizing verified credentials and customer satisfaction. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Matomo Analytics, Google Tag Manager, and custom captcha solutions. It is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Hosting appears stable with dedicated nameservers, and the site uses HTTPS with CSRF protection on forms, indicating a solid digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, captcha on forms, and CSRF tokens. However, explicit security headers and a published security policy or incident response contacts are not evident. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, Ihr Maklervergleich presents a professional, secure, and user-friendly platform with strong business credibility in the real estate sector. Strategic improvements in security policy transparency and header implementation could further enhance trust and resilience.
BB FM rádiobbfm.sk
Media · Slovakia
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
BB FM rádio is a local commercial radio station based in Banská Bystrica, Slovakia, focusing on news, publicistic content, and music from the 1980s to the present. The station targets local residents and offers a variety of specialized shows and regional musician features. The website is built on Joomla CMS with K2 content management and integrates common web technologies including jQuery, MooTools, and Radiojar for streaming. It employs Google Analytics and Facebook Pixel for analytics and advertising, alongside Cookiebot for GDPR-compliant cookie consent. Security posture is moderate with HTTPS enabled but lacks explicit security headers and privacy policies. WHOIS data is consistent and trustworthy, indicating a legitimate domain registration. Overall, the website is professional, content-rich, and safe for general audiences.
Za horami, za dolami v Banskobystrickom krajizahoramizadolami.sk
Transportation · Slovakia
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website zahoramizadolami.sk serves as a regional tourism and cultural promotion platform focused on the Banskobystrický kraj region in Slovakia. It offers information about local events, experiences, and regional products, targeting a general audience interested in tourism and cultural activities. The site is multilingual, supporting Slovak, English, and Hungarian languages, enhancing accessibility for diverse visitors. The business model revolves around content promotion, experience booking, and e-commerce for regional goods, positioning itself as a key regional tourism resource.
Headout Inc.headout.com
Hospitality · United States
56Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Headout Inc. operates a sophisticated online platform that enables travelers and locals to discover and book curated tours, events, and experiences worldwide. The company positions itself as a mobile concierge service offering high-quality experiences at competitive prices with 24x7 customer support. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of explicit privacy and cookie policies and lack of WHOIS transparency are notable gaps. Overall, the platform is professional, trustworthy, and well-positioned in the hospitality sector.
:data factorydata-factory.net
Technology · Germany
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website data-factory.net represents a well-established German internet agency named :data factory, specializing in web design, CMS, internet marketing, and related digital services. With over 20 years of experience, the company targets businesses and organizations primarily in the Ingolstadt region, offering a comprehensive suite of services including consulting, hosting, integrations, and app development. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as Pimcore CMS, Bootstrap, Google Tag Manager, and various third-party integrations for analytics, consent management, and customer engagement. The presence of GDPR-compliant consent mechanisms and accessibility tools indicates a commitment to privacy and inclusivity. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS, employs domain locking statuses, and integrates consent management for privacy compliance. However, DNSSEC is not enabled, and there is no visible security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website demonstrates a high level of professionalism and trustworthiness with a strong business credibility score. Strategic recommendations include enabling DNSSEC, publishing explicit privacy and security policies, and adding a security.txt file to enhance transparency and security posture.
:data factory GmbHrathaus.io
Government · Germany
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Rathaus.io is a specialized CMS website solution provider targeting municipalities such as cities, towns, and counties in Germany. The company, :data factory GmbH, founded in 2020, offers modular and flexible digital solutions tailored to the needs of local governments, including integration with external tools and services. Their market position is niche but well-defined, focusing on digitalization and accessibility for public sector clients. Technically, the website is built on Pimcore CMS with modern frameworks like Bootstrap and includes accessibility and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, clientTransferProhibited domain status, and consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact channels and social media presence. No critical vulnerabilities or suspicious indicators were found.
Forecast7.com - Weather Forecastforecast7.com
Other
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Forecast7.com is a weather forecast website providing multi-language weather information including next 24 hours and 7 days forecasts. The site targets a general audience interested in weather updates and operates on a small scale with a business model likely supported by advertising. The domain was registered in 2016 and uses Cloudflare DNS services, indicating a stable technical infrastructure. The website employs Google Analytics for user tracking but lacks a cookie consent mechanism and GDPR compliance indicators. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No forms or direct contact emails are present on the homepage, with contact options available via a dedicated page. Overall, the site is functional but could improve in privacy compliance and security best practices.
Historischer Verein Neuburg an der Donau e.V.stadtmuseum-neuburg.de
Non-profit · Germany
58Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Stadtmuseum Neuburg an der Donau is a small non-profit cultural institution operated by the Historischer Verein Neuburg an der Donau e.V. The museum offers permanent and special exhibitions focused on the local history and culture of Neuburg an der Donau, targeting general public and cultural enthusiasts. The website is well-structured, content-rich, and provides comprehensive information about exhibitions, history, and visitor information. Technically, the site uses a legacy CMS (RoSys® Truevision) with Bootstrap and jQuery 1.9.1, which is outdated and poses some security risks. The site implements GDPR-compliant cookie consent with Matomo Analytics using IP anonymization, reflecting good privacy practices. However, no explicit security or incident response policies are published, and some security headers appear missing. Overall, the site is trustworthy and professional but would benefit from technical updates and enhanced security measures.
Inclusion Canadainclusioncanada.ca
Non-profit · Canada
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Inclusion Canada is a Canadian national federation dedicated to advancing the full inclusion and human rights of people with intellectual disabilities and their families. Established in 2012, it operates as a medium-sized non-profit organization with a strong market position as a leading advocate in the disability rights sector. The organization provides advocacy, community transformation, and resource services, targeting individuals with intellectual disabilities, their families, and stakeholders in Canada. The website reflects a professional and consistent brand with clear messaging and a focus on inclusion and rights advocacy. Technically, the website is built on WordPress with modern plugins and technologies such as jQuery, FontAwesome, and multilingual support via WPML. It employs Google Analytics for tracking and CleanTalk for anti-spam protection. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting details are limited but the domain is registered with DomainPeople, Inc., a reputable registrar. From a security perspective, the site uses HTTPS with a good SSL configuration and employs anti-spam and captcha protections on forms. However, DNSSEC is not enabled, and no explicit security headers were detected, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but no clear cookie consent mechanism. No incident response or security policy pages were found. Overall, the website is trustworthy and professional, with a strong business credibility score. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent mechanisms, and enhancing privacy compliance to align with GDPR standards. These improvements would strengthen the security posture and user trust further.
EUROBAUSTOFF Handelsgesellschaft mbH & Co. KGeurobaustoff-forum.de
Retail · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
EUROBAUSTOFF Handelsgesellschaft mbH & Co. KG operates a professional industry forum and networking platform focused on the construction retail sector in Germany. The website EUROBAUSTOFF FORUM serves as a hub for shareholders, suppliers, service providers, and representatives of the EUROBAUSTOFF central office to connect and stay informed about industry innovations and exclusive forum conditions. The business model centers on cooperation and service provision within the building materials trade, offering exhibitions, digital communication platforms, and educational opportunities to its members. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap 5, enhanced by Usercentrics for consent management and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. No blocking or WAF mechanisms were detected, indicating open accessibility. From a security perspective, the site uses HTTPS and consent management but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found in the analyzed content. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website presents a professional, trustworthy, and well-maintained digital presence aligned with the company's business objectives. Strategic improvements in security policy transparency and technical security headers would enhance the security posture further.
Education · Germany
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Hochschulbibliothekszentrum des Landes Nordrhein-Westfalen (hbz) is a regional non-profit organization dedicated to supporting academic libraries and research institutions in North Rhine-Westphalia, Germany. Their website offers comprehensive information about their products, projects, literature search services, and customer support resources. The organization positions itself as a key service provider in the education sector, focusing on library IT solutions and cooperative projects. The site is well-structured, professionally designed, and targets library professionals and academic partners. Technically, the website is built on the Plone CMS platform, leveraging modern web technologies such as jQuery, Leaflet.js, and Font Awesome. It employs Matomo analytics, reflecting a privacy-conscious approach to user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices including secure forms and cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity and history, reinforcing legitimacy. Overall, the website presents a trustworthy, professional, and secure digital presence for hbz. Strategic improvements could include publishing a security policy, adding terms of service, and enhancing security headers to further strengthen the security posture and compliance stance.
Bücherei Kalkarbuecherei-kalkar.de
Other · Germany
55Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bücherei Kalkar is a local community library serving Kalkar and surrounding areas in Germany, providing book and media lending services for all age groups. The website offers information about their media offerings, events, and reader login portal, positioning itself as a welcoming cultural and educational resource. The business model is focused on public service and community engagement rather than commercial profit. Technically, the website is hosted on Deutsche Telekom's homepage designer platform using cm4all CMS technology, with older but functional JavaScript libraries such as jQuery 1.7 and Prototype 1.7.3. The site is mobile-optimized and provides basic accessibility features. SEO and performance are moderate, with room for modernization. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic improvements in security headers, updating libraries, and publishing security policies would enhance the security posture and trust further.
- MercuryCorp
mercuryfinancial.com
Other
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website mercuryfinancial.com currently presents minimal accessible content, likely due to protection by the Incapsula Web Application Firewall (WAF). The domain WHOIS data is unavailable, indicating either the domain is not registered or WHOIS information is withheld, which raises concerns about legitimacy. The site’s HTML content lacks metadata, structured data, contact information, or business descriptions, limiting the ability to assess the company’s operations or market position. Technically, the site uses Angular framework and serves fonts and scripts but does not expose any SEO or accessibility features. Security posture is weak with no visible security headers or SSL configuration details. Overall, the site appears to be either a placeholder or heavily protected, restricting meaningful analysis.
- Klima-Bündnis e.V.
klimabuendnis.org
Non-profit · Germany
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Klima-Bündnis e.V. is a well-established European non-profit network of municipalities partnering with indigenous peoples to address the global climate crisis. With over 2,000 members across more than 25 countries, it holds a leading position in facilitating local climate action aligned with global responsibility. The website reflects a professional and consistent brand presence, offering multilingual content and clear calls to action for membership and engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and employs self-hosted Matomo analytics respecting user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, informative, and well-maintained.
Grosse Kreisstadt Neuburg an der Donauneuburg-donau.info
Government · Germany
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website neuburg-donau.info serves as the official tourism portal for the city of Neuburg an der Donau, Germany. It provides comprehensive information on local attractions, events, accommodations, and cultural highlights, targeting tourists and visitors interested in exploring this Renaissance city. The site is well-positioned as an authoritative source for tourism-related content in the region, supported by official city branding and a consistent user experience. Technically, the site leverages modern web technologies including Pimcore CMS, Bootstrap framework, and accessibility tools like EyeAble, ensuring good mobile optimization and accessibility compliance. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Overall, the site demonstrates a solid security posture with no evident vulnerabilities or malicious indicators. The domain registration aligns well with the business identity, reinforcing trust and legitimacy. Strategic improvements include enabling DNSSEC, publishing a security policy, and enhancing HTTP security headers to further strengthen the security posture.