Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,170001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,901–9,950 of 99,068
GoYellowgoyellow.de
Retail · Germany
67Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
GoYellow is a well-established German online business directory offering comprehensive listings of businesses across Germany, including phone numbers and helpful information. It serves as a local search and advertising platform targeting both consumers and companies seeking digital visibility. The website is professionally designed with consistent branding and good content quality, supporting a large user base with 3.8 million entries. Technically, the site runs on a modern Java SpringBoot backend with Java 21, and includes client-side JavaScript and CSS for user interaction and styling. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and compliant with GDPR, though improvements in security transparency and incident response readiness are recommended.
- Netlife Design
netlife.com
Technology · Norway
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Netlife Design is a Norwegian design and technology agency specializing in creating digital services and products grounded in insight and analysis. The company positions itself as a leading player in the Norwegian market, offering services including design, content creation, technology development, strategy, and innovation. Their website reflects a professional and modern digital presence with strong branding and clear communication targeted at businesses seeking digital transformation and user-centric solutions. Technically, the site employs modern JavaScript frameworks, asynchronous loading, and advanced analytics tools such as Piwik PRO and Google Tag Manager, indicating a mature digital infrastructure. The website is fast, mobile-optimized, and SEO-friendly, enhancing user experience and accessibility. Security-wise, the site uses HTTPS with good SSL configuration and follows best practices like avoiding exposed sensitive data. However, it lacks explicit security headers and published security or incident response policies, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and structured data strongly suggest a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security posture and business credibility transparency.
Sjømat Norgesjomatnorge.no
Other · Norway
60Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Sjømat Norge is Norway's largest seafood organization, dedicated to improving conditions for the Norwegian seafood industry. The website serves as an informational and advocacy platform targeting industry stakeholders and the general public interested in seafood. The business is well-established with a domain age of approximately 9 years, reflecting a stable market presence. Technically, the website is built on WordPress with a modern technology stack including jQuery, Google Fonts, and Cookiebot for consent management. Analytics are implemented via Matomo and Google Analytics, complemented by Google reCAPTCHA for bot protection. Security posture is solid with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not found. Privacy compliance is partially addressed through Cookiebot consent mechanisms, but the absence of a dedicated privacy policy and terms of service pages indicates room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences.
- Offshore Norge
offshorenorge.no
Energy · Norway
75Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Offshore Norge is a Norwegian industry association representing the offshore oil and gas sector. The website provides news, policy standpoints, reports, and event information targeted at industry professionals and stakeholders. The organization positions itself as a key voice in the Norwegian offshore energy market, advocating for stable regulatory frameworks and sustainable industry practices. Technically, the website employs modern analytics tools including Google Analytics, Plausible, and Microsoft Application Insights, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. WHOIS data is unavailable, likely due to registry privacy policies, but the website's professionalism and social media presence support its legitimacy. Overall, the site is a credible and authoritative source for Norwegian offshore industry information.
- NHO Transport
transport.no
Transportation · Norway
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
NHO Transport is a well-established Norwegian industry and employer association representing transport companies including bus, taxi, rail passenger, and freight operators. The organization focuses on political advocacy, improving contractual and labor conditions, and providing member services such as training and industry information. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeted at Norwegian transport sector stakeholders. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Cookiebot for privacy compliance. Analytics are implemented via Microsoft Application Insights and Siteimprove, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not published. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.
- NHO Sjøfart
nhosjofart.no
Transportation · Norway
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
NHO Sjøfart is a Norwegian maritime employer and industry association representing member shipping companies. The organization advocates for its members' interests with unions, authorities, and other organizations. The website presents a professional and well-structured digital presence with relevant content including news, events, tariff agreements, and industry standards. It targets maritime companies and stakeholders in Norway, positioning itself as a key player in the Norwegian shipping sector under the larger NHO federation umbrella. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Microsoft Application Insights for monitoring. The site is fully accessible, mobile-optimized, and employs HTTPS with strong security headers. However, the absence of WHOIS data limits domain trust verification. Overall, the site demonstrates a mature digital infrastructure and a strong security posture with minor gaps in privacy transparency.
- NHO Reiseliv
nhoreiseliv.no
Hospitality · Norway
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
NHO Reiseliv is Norway's largest employer and industry organization for the hospitality sector, including serving, accommodation, and travel businesses. The organization provides membership benefits such as legal assistance, purchasing chains, training, networking, and political advocacy. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of Norwegian hospitality leaders and businesses. Technically, the site uses modern analytics and tracking tools with strong privacy compliance mechanisms, including Cookiebot and Google reCAPTCHA Enterprise. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy and well-maintained, supporting a large, established organization in the Norwegian hospitality industry.
- NHO Mat og Drikke
nhomd.no
Other · Norway
67Medium
NIS2 7 · GDPR 50
NIS2 7 · GDPR 50
NHO Mat og Drikke is a large, well-established Norwegian membership association representing over 1800 companies in the food, beverage, and bioindustries. It operates as a politically independent employer and industry organization under the umbrella of Næringslivets Hovedorganisasjon (NHO). The website provides comprehensive information about membership benefits, political advocacy, legal assistance, and industry collaboration. The organization maintains a strong market position as the largest community for its sectors in Norway. Technically, the website is built on a modern CMS platform (Episerver/Optimizely), uses HTTPS with strong security headers, and integrates advanced analytics and user behavior tracking tools such as Hotjar and Microsoft Application Insights. Cookie consent is managed via Cookiebot, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and well-structured for user experience and SEO. From a security perspective, the site demonstrates good practices including HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms. However, it lacks a dedicated security policy or incident response page, which could improve transparency and preparedness. No vulnerabilities or suspicious content were detected. WHOIS data is privacy protected, which is justified for this type of organization. Overall, the website is professional, trustworthy, and compliant with relevant privacy laws. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure framework to further enhance security posture and stakeholder trust.
- NHO Luftfart
nholuftfart.no
Transportation · Norway
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
NHO Luftfart is a Norwegian employer association representing airlines and other aviation-related businesses in Norway. With over 50 member companies and more than 12,000 employees, it serves as a key industry organization working to develop a competitive aviation sector. The website reflects a professional organizational presence with clear business information, member services, and industry news. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise, and Microsoft Application Insights for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are lacking. Overall, the site is trustworthy and well-maintained, supporting the organization's mission and member engagement effectively.
- NHO Logistikk og Transport
nholt.no
Transportation · Norway
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
NHO Logistikk og Transport is a Norwegian industry association representing transport, logistics, and forwarding companies, including those involved in port and terminal operations. The organization provides services such as advocacy, training, events, and legal assistance to its members. The website reflects a professional and well-structured digital presence with clear navigation and relevant content targeting industry stakeholders in Norway. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise for form security, and Microsoft Application Insights for analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy and aligns with the business's professional image.
- NHO Elektro
nhoelektro.no
Energy · Norway
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
NHO Elektro is a well-established Norwegian industry association representing electrical, telecom, elevator companies, and system integrators. Founded in 1913 and operating under the umbrella of NHO, it provides advocacy, education, events, and member services to its constituency. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site uses modern tools including EPiServer CMS, Microsoft Application Insights, and various analytics and marketing scripts, combined with GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and use of reCAPTCHA Enterprise, though explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy, professionally maintained, and suitable for its target audience.
- NHO Byggenæringen
nhobyggenaringen.no
Real Estate · Norway
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
NHO Byggenæringen is the largest interest organization representing employers and companies in the Norwegian construction, building, and real estate sectors. It serves over 3,350 companies and 72,000 professionals, providing political advocacy, legal assistance, member benefits, and industry development services. The organization is affiliated with the Norwegian Confederation of Enterprise (NHO), reinforcing its market position and influence. The website reflects a professional and well-structured digital presence with clear navigation, relevant content, and active engagement through news, events, and social media channels. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Google reCAPTCHA Enterprise, Cookiebot for consent management, and Microsoft Application Insights for telemetry. The CMS appears to be Episerver (Optimizely), indicating a mature content management infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS with a good SSL configuration, integrates reCAPTCHA for form protection, and implements cookie consent with blocking mode. While explicit security headers are not fully confirmed, best practices are largely observed. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain legitimacy verification, although the site's content and affiliations strongly suggest a legitimate and trustworthy entity. Overall, the website demonstrates a solid security posture, good privacy compliance, and a credible business presence. Strategic recommendations include enhancing security header implementation, publishing incident response policies, and maintaining regular security audits to sustain trust and compliance.
Norges Bilbransjeforbundnbf.no
Transportation · Norway
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Norges Bilbransjeforbund (NBF) is a Norwegian national interest organization representing companies engaged in automotive and related businesses. Affiliated with the Confederation of Norwegian Enterprise (NHO), NBF provides its members with legal advice, industry guidance, digital tools, and organizes events and training. The website reflects a professional and consistent brand presence targeting Norwegian automotive businesses. Technically, the site uses modern analytics and marketing technologies including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for consent management. The CMS appears to be Episerver (Optimizely), supporting good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS and bot protection via reCAPTCHA Enterprise, though security headers are not visibly implemented, representing an area for improvement. WHOIS data is unavailable, limiting domain registration trust verification, but the website's professional content and affiliations support legitimacy. Overall, the site is well-structured, secure, and compliant with privacy regulations.
- Fornybar Norge
fornybarnorge.no
Energy · Norway
70Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Fornybar Norge is a Norwegian nationwide interest and employer organization dedicated to the renewable energy sector. The organization focuses on promoting renewable energy across Norway, offering numerous courses, conferences, publications, and research projects to support the energy industry. Their market position is strong within the Norwegian renewable energy sector, serving industry professionals and stakeholders. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and marketing tools, and uses a CMS likely based on Episerver. The site is well-optimized for mobile and accessibility, with good SEO practices. Security-wise, the website enforces HTTPS, uses reCAPTCHA Enterprise, and manages cookie consent via Cookiebot, reflecting a mature security posture. However, explicit security policies and vulnerability disclosures are absent. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable due to Norid's privacy policies. Strategic recommendations include enhancing security transparency and publishing incident response information.
- XXact
survey-xact.no
Technology · Denmark
74Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
SurveyXact is a technology-driven platform focused on survey creation and data collection services, supported by Xact experts who provide daily phone assistance. The website demonstrates a moderate level of digital maturity, utilizing modern frontend technologies such as React and Material-UI, ensuring a responsive and user-friendly login experience. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and advanced protections. Privacy and cookie policies are not present on the login page, indicating potential compliance gaps. Overall, the platform appears professional and business-oriented but would benefit from enhanced transparency and security measures.
- MAXXmarketing GmbH
seo-agentur.com
Technology · Germany
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MAXXmarketing GmbH operates the website seo-agentur.com as a professional SEO agency with over 15 years of experience, offering comprehensive SEO and online marketing services including consulting, content marketing, and proprietary SEO tools. The company positions itself as a trusted Google Partner with a strong presence in the German market, targeting businesses seeking to improve their online visibility and conversions. Technically, the website is built on Joomla CMS, integrates modern analytics and marketing tools, and is mobile-optimized with good performance. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly reduces transparency but does not detract from the professional presentation and trust signals on the site. Overall, the website is well-designed, content-rich, and trustworthy, supporting a medium-sized technology sector business.
- MMGO Fachverlage GmbH (implied from URLs and footer links)
frauenarzt-archiv.de
Healthcare · Germany
53Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website frauenarzt-archiv.de serves as a comprehensive digital archive for the medical journal FRAUENARZT, targeting gynecologists in Germany. It provides access to all journal issues since 2001 and current content, supporting professional development and practice. The platform is endorsed by key professional associations, enhancing its credibility and market position. Technically, the site employs a custom CMS based on the Xaver framework and Dojo toolkit, with modern consent management and analytics integration. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-suited for its audience.
mgo fachverlagemgo-fachverlage.de
Education · Germany
52Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
mgo fachverlage is a specialized German publishing company focusing on Fachbücher (specialized books), Fachzeitschriften (journals), Arbeitsmaterialien (work materials), and digital formats. The website positions itself as a niche player in the education and professional publishing sector, targeting professionals and academics. The business model revolves around content creation and distribution in specialized fields, with a clear focus on German-speaking markets. The website uses WordPress with the Avada theme and integrates advanced tools such as Slider Revolution for content presentation and multiple analytics platforms including self-hosted Matomo and Google Analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent managed by Usercentrics, but lacks visible security headers and explicit security policies. Overall, the site is professional and trustworthy but could improve transparency around privacy policies and incident response. The risk level is low with no detected vulnerabilities or suspicious content.
Other
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website gunsclassifiedsnetwork.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block. The page served is a security challenge page indicating that the visitor has been blocked due to triggering security rules, such as suspicious input or automated traffic. As a result, no actual business content, metadata, or contact information is available for analysis. The domain is registered with Wild West Domains, LLC since 2021 and is not privacy protected, which suggests a legitimate registration but no further business details are available. The lack of accessible content prevents a thorough assessment of the business model, services, or compliance posture. From a technical perspective, the site is protected by Cloudflare, which provides security and performance services. However, no additional technologies, CMS, or analytics tools are detectable due to the block. Security headers and SSL configuration cannot be evaluated. No privacy or cookie policies are found, indicating potential compliance gaps if the site were accessible. Security posture is limited by the lack of accessible content but the presence of Cloudflare WAF indicates some level of protection against attacks. The domain registration data appears consistent and legitimate, but the absence of business information and policies reduces trustworthiness. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the block. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, providing clear contact and incident response information, and ensuring the site is accessible to legitimate users to allow proper evaluation and user engagement.
- Pew Pew Tactical - Level Up Your Gun Knowledge
pewpewtactical.com
Other
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Pew Pew Tactical is a niche content website focused on firearms education, tactical gear reviews, and daily deals. The site targets gun enthusiasts and tactical operators, providing definitive guides and product reviews without political bias or attitude. The business model appears to rely on content publishing and affiliate marketing. Technically, the site is built on WordPress and integrates multiple third-party services including Wistia for video hosting and Google Analytics for traffic monitoring. The website is mobile-optimized and presents a professional design with good navigation and SEO practices. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is missing or protected, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security best practices.
Other
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at armslist.com is currently inaccessible, returning a minimal 404 error page with no substantive content. This prevents any meaningful analysis of the site's business offerings, technical infrastructure, or security posture. The domain is registered since 2008 with NameCheap and uses Cloudflare nameservers, indicating some level of protection or content delivery network usage. However, the lack of accessible content and metadata severely limits the ability to assess the company's market position, services, or compliance status. Security posture cannot be evaluated due to missing data, but the presence of Cloudflare suggests some baseline protection. Overall, the site appears to be down, blocked, or under maintenance, resulting in a critical risk for users and stakeholders due to lack of transparency and information.
SWEB Development LPsweb.energy
Energy · Canada
57Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
SWEB Development LP is a Canadian subsidiary of the Austrian energy transition company W.E.B Windenergie AG, specializing in renewable energy project development, finance, construction, and operations. The company has a significant presence in North America with over 3,200 MW in development and is part of a multinational group with extensive wind and solar power assets. The website reflects a professional and community-focused business model targeting business customers, landowners, and project communities. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements Google reCAPTCHA for security. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is privacy protected, which is reasonable for this business type, but limits transparency. Overall, the website is trustworthy and professionally maintained, supporting the company's market position in renewable energy.
Lamino Well s.r.o.laminowell.cz
Manufacturing · Czech Republic
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Lamino Well s.r.o. is a Czech-based manufacturing company specializing in fiberglass (sklolaminát) design, production, and repair services. The company operates under the WeldingPro Group umbrella and targets industrial and commercial clients requiring custom and series fiberglass products. With over 25 years of experience, the company positions itself as a reliable and quality-focused manufacturer in the Czech Republic and surrounding markets. The website supports multiple languages (Czech, German, English) to cater to a broader European audience. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Contact Form 7, with Google Tag Manager and reCAPTCHA integrated for analytics and security. Hosting is provided by Websupport, a known Czech hosting provider. The site is mobile-optimized, SEO-friendly, and performs moderately well. Security practices include HTTPS enforcement and form protection via reCAPTCHA, though additional security headers could enhance the posture. From a security perspective, the site shows no signs of malware or phishing. Privacy compliance is evident with a dedicated GDPR-compliant privacy and cookie policy page, including a consent mechanism. However, no explicit security policy or incident response contacts are published. The domain is newly registered in June 2024, which is inconsistent with the company's claimed 25+ years of experience, suggesting a recent domain acquisition or rebranding. Overall, the website is professional, trustworthy, and suitable for its business purpose. Recommendations include adding security headers, publishing a security policy, and maintaining regular plugin updates to mitigate vulnerabilities.
WeldingPro Group s.r.o.metalwell.cz
Manufacturing · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Metal Well, operated by WeldingPro Group s.r.o., is a Czech Republic-based medium-sized manufacturing company specializing in precision metal fabrication, including custom and serial welded constructions. The company offers a broad range of services such as welding with mastery of 10 techniques, locksmith work, and technical documentation preparation. Their market position is supported by certifications and a portfolio of references, targeting industrial and business clients seeking quality metalworking solutions. The website is professionally designed, multilingual, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is good with HTTPS and form protections, though some HTTP security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site projects high trustworthiness and professionalism, with clear contact channels and business legitimacy. Recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen security posture and compliance.
- PPage Not Found
gfz-friends.de
Other
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website gfz-friends.de currently serves a 404 error page indicating that the site is not configured or accessible. The page is built on TYPO3 CMS as indicated by the error page branding, but no actual business content, contact information, or policies are present. The lack of accessible content severely limits the ability to assess the business, technical infrastructure, or security posture. No privacy or cookie policies are found, and no contact or incident response information is available. The domain's WHOIS data shows name servers linked to GFZ Potsdam infrastructure, suggesting some legitimacy, but registrant details are incomplete. Overall, the site is non-functional from a user and security perspective, resulting in a very low trust and quality score.
diagnose:funkprotect-insects.info
Non-profit · Germany
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
protect-insects.info is a German non-profit advocacy website operated by diagnose:funk, focusing on raising awareness about insect decline and the potential impact of electromagnetic fields from mobile communications. The site provides scientific insights, campaign information, and calls to action to protect insect biodiversity. It targets environmentally conscious individuals and organizations. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, and supports multiple languages via GTranslate. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, reflecting a mature digital presence. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security headers and detailed incident response information. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a good security posture and privacy compliance suitable for a non-profit organization, with room for improvement in security headers and contact transparency.
- Deutsches Thoraxregister
thoraxregister.de
Healthcare · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsches Thoraxregister website serves as an interdisciplinary benchmarking project under the patronage of the DGAI and DGT, focusing on thoracic surgery and anesthesia in Germany. It provides an online portal for data entry and benchmarking, targeting medical professionals, patients, and participants in the registry. The site is built on Joomla CMS with a healthcare-oriented template and integrates modern web technologies such as Bootstrap, jQuery, and Font Awesome. Matomo analytics is used with privacy-conscious settings, avoiding tracking cookies. The website is well-structured, professionally designed, and provides clear contact and legal information, supporting trust and credibility. However, explicit security policies and headers are not evident, and no incident response or vulnerability disclosure mechanisms are published.
ZEISS Groupzeiss.com
Technology · Germany
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
ZEISS Group is a globally recognized technology enterprise specializing in optics and optoelectronics, serving diverse sectors including vision care, medical technology, and industrial metrology. The website reflects a mature digital presence with professional design, multilingual support, and multimedia content highlighting their technological innovations such as renewable energy solutions. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and vulnerability disclosures suggests room for improvement. The WHOIS data is notably missing or inaccessible, which is unusual for a corporate domain and may indicate privacy protection or registry data issues. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security policies.
Talenticstalentics.app
Technology
70Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Talentics is a technology-oriented website built on the Wix platform, likely focused on talent management or related services. The site uses modern web technologies and includes standard tracking tools such as Google Analytics and Google Tag Manager. The website is accessible without any WAF or security challenge blocking. However, the site lacks explicit privacy, cookie, and terms of service policies, and no direct contact information is provided, which limits trust and compliance visibility. The technical infrastructure is moderate with good mobile optimization and basic SEO features. Security posture is decent with HTTPS and some JavaScript-based cookie handling, but lacks explicit security headers and incident response information. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance documentation.
GuardianLinkguardianlink.io
Technology
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
GuardianLink is a specialized R&D laboratory focused on developing intelligent AI solutions and blockchain infrastructure tailored for enterprise clients. Their offerings aim to enhance automation, data intelligence, and decentralized digital experiences, positioning them as a niche technology provider in the AI and blockchain sectors. The website reflects a modern design built with Framer, indicating a contemporary digital presence, though it lacks comprehensive business and security disclosures. Technically, the site employs Google Analytics for user tracking and is built on a modern framework, but lacks visible security headers and detailed privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registrant data due to privacy protection reduces transparency and trustworthiness. Overall, the security posture is weak due to missing policies and security best practices, and the site would benefit from enhanced compliance and contact transparency to improve credibility and user trust.
HubaX IT & Electronic Systems OGhubax.eu
Technology · Austria
60Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
HubaX IT & Electronic Systems OG is a small Austrian technology company specializing in IT, software development, cloud services, and electronics. The company offers tailored software solutions, web and cloud hosting, electronics development including PCB design and production, and comprehensive IT consulting and support services. Their market position is that of a regional trusted provider with partnerships with major IT vendors such as Cisco, HP, Google, and Microsoft. The website is professionally designed using Joomla CMS and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. WHOIS data is privacy-protected, which is typical for this business type, and no suspicious patterns were detected. Overall, the website and business present a trustworthy and professional image suitable for their target audience of businesses seeking IT and electronics solutions.
Media
62Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Livetipsportal.com is a specialized media website providing detailed information and resources related to sports betting and football data. The site offers betting tips, tables, bookie tests, and app reviews targeted at sports bettors and football enthusiasts. The business operates primarily as a content and affiliate marketing platform within the sports betting niche. Technically, the website is built on WordPress with SEO optimizations via the Yoast plugin, delivering a professional and mobile-optimized user experience. However, the domain WHOIS data is missing or indicates the domain may not be registered, which raises concerns about the legitimacy of the domain registration. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. Overall, the site is functional and content-rich but would benefit from improved transparency and security practices.
Media · Germany
60Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
sport.de is a well-established German sports news website providing live scores, news, results, and transfer information across multiple sports including football, Formula 1, and biathlon. The platform targets sports enthusiasts primarily in Germany and offers a comprehensive digital experience with live tickers and up-to-date sports content. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and consent management tools to ensure GDPR compliance and user tracking transparency. The hosting is managed via EuroDNS nameservers, indicating professional domain management. Security posture is solid with HTTPS enforced and consent mechanisms in place, though additional security headers and a public security policy could enhance trust. No critical vulnerabilities or blocking mechanisms were detected, and the content is safe for general audiences. Overall, sport.de demonstrates a mature digital presence with good business credibility and technical implementation.
- Softball-Deutschland.de
softball-deutschland.de
Other · Germany
57Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Softball-Deutschland.de is a specialized German sports news portal focusing on the Softball Bundesliga and related softball activities in Germany. It provides up-to-date news, match schedules, statistics, and links to national teams and partner organizations. The website targets softball enthusiasts and sports fans within Germany, serving as an information hub for the softball community. The business model centers on content provision and community engagement, supported by newsletter subscriptions and partnerships with official sports bodies. The site maintains consistent branding and good content quality, positioning itself as a trusted niche sports news source.
Deutscher Baseball- und Softballverband e.V.baseball-softball.de
Other · Germany
55Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
The Deutscher Baseball- und Softballverband e.V. is the official national governing body for baseball and softball in Germany, providing comprehensive information, organizational support, and promotion of these sports. The website serves players, fans, and affiliated organizations with news, event details, and youth development programs. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Elementor, hosted by Infomaniak, and demonstrates good digital maturity with SEO and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Design42easyscore.com
Other · Denmark
54Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
EasyScore is a specialized software solution designed to facilitate baseball and softball game scoring and statistics generation. The company, associated with Design42, offers an intuitive tool that automates the computation of box scores, game logs, and season statistics, targeting baseball enthusiasts, coaches, and players. The website reflects a niche market position with a focus on sports scoring software, supported by a domain registered since 1999, indicating a mature presence in this space. Technically, the website employs a moderate technology stack including jQuery, Firebase services, and various UI libraries, hosted behind Cloudflare DNS. While the site is functional and moderately optimized for performance and mobile use, it lacks advanced SEO and accessibility features. Security practices include HTTPS enforcement and a Content-Security-Policy header, but could be improved by enabling DNSSEC and adding further security headers. From a security and compliance perspective, the site lacks visible privacy and cookie policies, terms of service, and incident response or vulnerability disclosure information, which are important for GDPR compliance and user trust. Contact information is limited to an email address found in meta tags, with no phone or physical address details. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve user confidence and regulatory adherence.
C3 marketing agentur GmbHmyc3.com
Media · Germany
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
C3 marketing agentur GmbH is a German marketing and advertising agency with offices in Tirschenreuth and Regensburg. The company offers a broad range of services including website development, e-commerce solutions, print and graphic design, photography, video, 3D media, and advertising campaigns. Their market position appears well-established with over two decades of presence and a strong regional footprint. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting businesses seeking marketing services in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as SVG graphics and JavaScript modules. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or an unregistered domain, which slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for a marketing agency, but domain registration transparency and enhanced security disclosures would improve credibility and compliance posture.
- SScribble Software Inc.
marinaoffice.net
Technology · United States
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MarinaOffice, operated by Scribble Software Inc., offers a comprehensive suite of marina management software solutions targeting marina operators, yacht basins, port authorities, and marine retailers. Their product portfolio includes marina management, retail point-of-sale, fuel management, boat yard service, online bill pay, cloud services, and boat rental management. The company positions itself as a leading provider in the marina software industry with a focus on flexibility and integration, including QuickBooks accounting integration. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular UI libraries like Swiper.js and Owl Carousel, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacks visible security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is missing, which raises concerns about domain registration legitimacy, although the website content and contact information appear professional and consistent. Overall, the site demonstrates a solid business presence but would benefit from enhanced security and privacy transparency.
KnowledgeOwlknowledgeowl.com
Technology
75Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
KnowledgeOwl is a technology company specializing in knowledge base software designed to help teams create, organize, and deliver knowledge efficiently. The company positions itself as a trusted provider with advanced features such as AI authoring, semantic search, and SAML SSO authentication, targeting business teams and organizations seeking to improve customer support and internal knowledge management. The website demonstrates a mature digital presence with professional design and modern technology usage, including Framer for site building and integration of analytics and consent management tools. Security posture is generally good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS registration data is a notable anomaly that impacts trustworthiness. Overall, the site is professional and functional, but the domain registration inconsistency warrants further investigation.
- Scribble Software
scribblesoftwareblog.com
Technology · United States
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Scribble Software operates as a specialized provider of marina management software solutions, targeting marina and property management businesses, marine service providers, and retail operators. The company positions itself as a leading provider in this niche, offering comprehensive services including marina and property management, marine service, retail point-of-sale, fuel management, and boat rental management. The website reflects a medium-sized technology business focused on software solutions for the marine industry. Technically, the website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard polyfills for browser compatibility. The site demonstrates moderate performance and good mobile optimization, though SEO and accessibility features are basic. Security posture is moderate with some best practices observed, but lacks visible security headers and incident response information. Privacy and cookie policies are not found, indicating compliance gaps. WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is professional and business-focused but would benefit from enhanced security, privacy compliance, and domain registration transparency.
PRIMOSPORTshop-primosport.de
Retail · Germany
60Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Primosport operates an e-commerce platform focused on providing team sports equipment, including football, handball, and volleyball products, primarily targeting sports clubs and athletes in Germany. The website branding and content are consistent with a retail business model specializing in sports gear with custom team shops. Technically, the site uses common web technologies such as Google Tag Manager for analytics and Cloudflare for DNS services, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security practices. The security posture is basic, with no detected WAF or blocking mechanisms, but also no advanced security measures clearly implemented. Overall, the site is functional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.
wikonect GmbHpneumo-industrieforum.de
Healthcare · Germany
55Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website represents the Industrieforum Pneumologie, an event organized by wikonect GmbH in Germany, targeting medical professionals in pneumology and related healthcare fields. It serves as an information portal for the event held alongside the 66th Congress of the German Society for Pneumology and Respiratory Medicine. The site provides event details, contact information, and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with common plugins and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response details. Overall, the site is professional, trustworthy, and compliant with relevant privacy laws.
- Deutsche Herzstiftung e.V.
herzstiftung.de
Healthcare · Germany
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Deutsche Herzstiftung e.V. is Germany's largest independent non-profit organization dedicated to providing information and support to patients and interested parties in the field of heart diseases. The website serves as a comprehensive resource for patient education and awareness, positioning itself as a trusted authority in cardiology-related health information. The organization operates primarily in the healthcare and non-profit sectors, targeting patients and the general public seeking reliable heart health information. Technically, the website is built on Drupal 10, leveraging modern web technologies including Cloudflare for DNS and CDN services, Google Tag Manager for analytics, Cookiebot for cookie consent management, and Eye-Able for accessibility enhancements. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure suitable for its audience. From a security perspective, the site enforces HTTPS, employs cookie consent with granular user controls, and integrates bot protection via hCaptcha. While explicit security headers are not fully visible in the HTML, the overall posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website presents a professional, trustworthy, and user-friendly platform aligned with its mission. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, and expanding contact information transparency to further strengthen user trust and compliance.
- concedra GmbH
concedra.de
Other · Germany
65Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
concedra GmbH is a German-based communications and digital agency specializing in branding, marketing, design, and digital development services including websites, apps, and software consulting. The company operates nationally with a small team and has received recognition such as the German Brand Awards. Their website is professionally designed using TYPO3 CMS, featuring clear navigation, mobile optimization, and GDPR-compliant cookie consent mechanisms. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security policies and incident response contacts are not published. Overall, the site reflects a trustworthy and credible business with good technical infrastructure and privacy compliance.
▷ Umfragetool | KI-Auswertung | Kostenlos | DSGVO-konformeasy-feedback.de
Technology · Germany
60Medium
NIS2 22 · GDPR 95
NIS2 22 · GDPR 95
Easy-Feedback.de is a German-based online survey tool provider offering AI-powered survey evaluation with a focus on GDPR compliance. The website targets businesses and organizations seeking secure and privacy-conscious feedback solutions. Technically, the site is built on WordPress using Elementor and Yoast SEO, with performance and mobile optimization rated as good. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security policies and contact information for incident response. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.
Drexlerdrxlr.com
Technology · United States
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Drexler is a Baltimore-based creative studio specializing in web design, development, ecommerce, and email marketing services. The company positions itself as a design-driven agency focused on expanding client reach and enhancing brand presence through digital experiences. The website reflects a small, professional agency with a clear market niche in technology and ecommerce sectors. Technically, the site is built on WordPress with modern SEO and analytics integrations, hosted behind Cloudflare DNS services, and employs HTTPS with a good SSL configuration. However, DNSSEC is not enabled, and security headers are absent, indicating room for security improvements. Privacy compliance is limited due to the absence of privacy and cookie policies, which could expose the business to regulatory risks. Contact information is clearly presented, enhancing business credibility. Overall, the site is well-designed, user-friendly, and trustworthy, but would benefit from enhanced security and privacy practices.
BESTCLOUDFORME TEKNOLOJI ASbestcloudfor.me
Technology · Turkey
75Partial
DNS & email only
DNS & email only
Bestcloudfor.me is a technology company based in Turkey specializing in advanced cloud, DevOps, and SysOps solutions. The company positions itself as a Premier Tier Partner offering services such as Cloudification, Application Modernization, and AWS Optimization to enhance business competitiveness. The website reflects a professional and modern digital presence with a focus on B2B technology services. Technically, the site leverages React and the Mantine UI framework, integrates HubSpot for forms and analytics, and uses Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms documents. Overall, the site is trustworthy and well-maintained but could improve transparency and security documentation.
GRÜN IT Group GmbHsepa.net
Finance · Germany
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
SEPA.net, operated by GRÜN IT Group GmbH, provides an innovative online payment system specializing in SEPA direct debit transactions across Europe. The service targets online merchants and buyers, enabling seamless payment processing without requiring buyer registration. The platform offers multiple integration options including purchase buttons, iFrame/mobile integration, API interfaces for recurring payments, and a WordPress plugin for WooCommerce stores. The website is professionally designed, mobile-optimized, and provides clear business and contact information, enhancing user trust and accessibility. Technically, the website is built on WordPress with WooCommerce and utilizes modern JavaScript libraries and plugins such as jQuery, MediaElement.js, and WPBakery Page Builder. SEO is well-implemented with Yoast SEO plugin, and the site employs HTTPS with strong SSL encryption. Cookie consent mechanisms and privacy policies are in place, reflecting GDPR compliance. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness. From a security perspective, SEPA.net demonstrates good practices including transaction authorization via security TAN, adherence to German data protection laws, and encrypted communications. Nonetheless, the site lacks explicit incident response and vulnerability disclosure information, which could be improved to enhance transparency and readiness. Overall, the platform presents a solid security posture suitable for its payment processing business model. The main risk identified is the missing WHOIS data, which impacts domain trust and could affect user confidence. Strategic recommendations include publishing security headers, adding incident response details, and maintaining regular security audits. These steps will strengthen the platform's security and compliance stature, supporting its growth and market position.
Netigatenetigate.se
Technology
74Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Netigate is a leading provider of experience management software, offering an AI-powered SaaS platform that unifies customer and employee feedback to drive business growth. The company targets businesses seeking to enhance their experience management capabilities through advanced analytics and actionable insights. The website demonstrates a mature digital presence with professional design, comprehensive content, and strong SEO practices. Technically, the site is built on WordPress with Elementor, integrating multiple analytics and marketing tools such as HubSpot, Piwik PRO, and LinkedIn Insight, reflecting a modern and data-driven infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the site is trustworthy and professional, but the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Strategic recommendations include enhancing transparency around security policies and domain registration details to further build trust.
- Ttds-link.com
rbl.ms
Other
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website tds-link.com is a parked domain primarily serving as a placeholder for domain sale. It offers no substantive business content or services beyond advertising the domain's availability for purchase. The site is minimalistic with poor design quality and lacks any privacy, cookie, or terms of service policies. The technical infrastructure is basic, relying on JavaScript for some tracking and advertising scripts, with no detected CMS or advanced frameworks. Security posture is weak, with no HTTPS enforcement or security headers observed, and no forms or user inputs to secure. Overall, the site presents a low trust profile with limited business credibility and minimal compliance with privacy regulations. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving content quality, and providing clear contact information to enhance trust and compliance.