Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,177001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
12,551–12,600 of 99,068
Betandreastheconstructioncompany.org
Other · Azerbaijan
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Betandreas operates as an online casino and betting platform targeting Azerbaijani users, offering casino games, deposit bonuses, cashback, and mobile app downloads. The website is professionally designed with consistent branding and good content quality in Azerbaijani language. Technically, the site uses modern web technologies including Cloudflare DNS and CDN, Google Fonts, and JSON-LD structured data, but lacks explicit security headers and privacy policies. The security posture is moderate with HTTPS enabled and domain transfer protection, but missing key headers and documented policies. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the site is functional and moderately trustworthy but lacks transparency in privacy and contact information.
Tripadvisortripadvisor.sk
Hospitality · Slovakia
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The domain tripadvisor.sk represents a localized version of the Tripadvisor travel platform, a globally recognized enterprise in the hospitality and travel industry. Tripadvisor provides travel reviews, booking services, and travel guides targeting travelers and tourists. However, the analyzed website content is inaccessible due to a CAPTCHA security mechanism, preventing extraction of detailed content and metadata. The domain WHOIS data confirms a legitimate, long-established domain consistent with Tripadvisor's business history. Technically, the website employs bot protection via DataDome CAPTCHA and uses AWS DNS services, indicating a modern infrastructure focused on security and availability. Due to the blocking, no further technical or content quality assessments could be performed. From a security perspective, the presence of a WAF or bot protection is a positive indicator, but the lack of visible security headers, privacy policies, or contact information on the landing page limits the ability to assess compliance and security posture fully. The domain registration data supports legitimacy, but the website's user experience and content quality cannot be evaluated due to access restrictions. Overall, the site is likely secure and legitimate but currently inaccessible for detailed analysis. Strategic recommendations include improving transparency by publishing privacy and cookie policies, providing contact and incident response information, and ensuring visible security best practices to enhance user trust and compliance.
- Medienatelier
medienatelier.online
Media · Germany
54Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Medienatelier is a small German-based development agency specializing in innovative technologies and tailored solutions for events, exhibitions, and trade shows. The company combines expertise in electrical, media, and event technology with international project planning experience and creative skills to deliver comprehensive project support from concept to implementation. Their market position is that of a niche provider focusing on technical innovation and creative execution for business clients. The website is professionally designed using WordPress and Elementor, featuring good mobile optimization and clear navigation. The technical infrastructure includes Google Tag Manager for analytics and is hosted likely by Cronon GmbH, consistent with the domain registration. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers are missing and DNSSEC is not enabled, representing areas for improvement. Privacy compliance is strong with a GDPR-compliant privacy policy and cookie management. Overall, the website presents a trustworthy and professional image with clear contact details and social media presence, supporting business credibility.
- Pultmann Rednerpulte Manufaktur
pultmann.de
Manufacturing · Germany
66Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Pultmann Rednerpulte Manufaktur is a small German manufacturing business specializing in high-quality, adjustable lecterns, including barrier-free and electrically height-adjustable models. They also offer nationwide rental services for events across major German cities. The website is professionally designed using WordPress with a focus on clear product presentation and customer contact accessibility. Technical infrastructure includes modern web technologies and tracking tools, but lacks some advanced security headers and formal privacy documentation. Security posture is adequate with HTTPS and cookie consent but could be improved with additional policies and headers. Overall, the business presents a trustworthy and professional image with room for enhanced compliance and security maturity.
BL!TZGEEK Webdesignblitzgeek.net
Technology · Germany
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
BL!TZGEEK Webdesign is a small German-based web design and development service provider founded in 2014. The company specializes in creating user-friendly websites, SEO optimization, and consulting on domain and hosting solutions. Their market position is focused on quality, client values, and transparent business practices, supported by testimonials and partnerships with reputable technology providers such as Raidboxes and GeneratePress. The website is professionally designed, mobile-optimized, and GDPR compliant, reflecting a mature digital presence. Technically, the site runs on WordPress with modern themes and plugins, hosted on Raidboxes, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Overall, the site demonstrates good privacy compliance and business credibility with transparent affiliate disclosures and clear contact information.
- GGemeinde Beilrode
beilrode.de
Government · Germany
59Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Gemeinde Beilrode operates as a local government entity providing administrative, informational, and community services to residents and visitors in the Beilrode area of Germany. The website serves as a portal for municipal information, event announcements, and public service access, positioning itself as a trusted local government resource. Technically, the site uses a specialized CMS platform (verwaltungsportal.de) with common web technologies such as jQuery and Material Design Lite, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, suitable for its public sector role.
- Lutherweg in Hessen e.V.
lutherweg1521.de
Other · Germany
55Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Lutherweg in Hessen e.V. is a small non-profit association dedicated to promoting pilgrimage and hiking along the Lutherweg1521 route between Worms and Wartburg, focusing on cultural heritage related to Martin Luther. The website serves as an informational hub offering route details, pilgrim accommodations, events, and ordering services for pilgrimage-related items. The target audience includes pilgrims, hikers, and cultural tourists interested in religious and historical trails in Germany. Technically, the website is built on WordPress with standard web technologies including JavaScript and CSS, and it is hosted on servers using rzone.de name servers. The site is mobile-optimized with good navigation and content relevance, though it lacks some advanced technical frameworks or analytics integrations. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but it lacks security headers and formal security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the site is trustworthy and professional, serving its niche well without evident security or compliance risks.
Deutsche Lutherweg-Gesellschaft e. V.lutherweg-sachsen-anhalt.de
Government · Germany
56Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Deutsche Lutherweg-Gesellschaft e. V. operates a culturally significant pilgrimage and hiking route in Sachsen-Anhalt, Germany, focusing on historical Luther sites and natural landscapes. The website serves as an informational and promotional platform targeting pilgrims, hikers, and cultural tourists. It provides detailed route descriptions, accommodation information, and related resources, positioning itself as a key non-profit organization in the cultural tourism sector. Technically, the website is built on a modern WordPress platform with a well-maintained tech stack including GDPR-compliant plugins and custom theming. Security posture is solid with HTTPS enforcement and privacy compliance, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and well-suited to its audience, with room for improvement in security transparency and formal documentation.
f3publishing GmbHf3publishing.de
Media · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
f3publishing GmbH is a specialized media agency based in Germany focusing on interactive and multimedia digital publishing, augmented reality (AR), virtual reality (VR), and multichannel marketing. The company offers a comprehensive portfolio including website and webshop development, mobile apps, and immersive AR/VR solutions. Their market position is that of a niche player leveraging cutting-edge technologies to deliver innovative digital experiences. Technically, the website is built on WordPress with modern plugins such as Avada theme, Yoast SEO, and WP Rocket, indicating a mature digital infrastructure. The site is mobile-optimized and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is good with HTTPS enabled, though some security headers are missing and no explicit security policies are published. Privacy compliance is partial, with a cookie consent mechanism present but lacking a privacy policy page. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include adding privacy and terms pages, enhancing security headers, and publishing incident response information to improve compliance and trust.
Forschungsstelle Kaiserpfalzsaeulen-der-macht-ingelheim.de
Other · Germany
54Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website 'Säulen der Macht - Säulen der Macht Ingelheim' is an educational and cultural platform managed by the Forschungsstelle Kaiserpfalz, focusing on medieval palaces and the travel routes of emperors in the German region between the Rhine, Main, and Neckar rivers. It serves a niche audience interested in historical research and museum exhibitions, providing detailed content about seven significant medieval sites. The site promotes related publications and digital exhibitions, positioning itself as a specialized resource in cultural heritage education. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted on servers associated with rzone.de. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. It uses HTTPS with a valid SSL certificate, but lacks some advanced security headers and has an unconfigured reCAPTCHA, indicating room for security improvements. From a security perspective, the site demonstrates a reasonable posture with encrypted connections and no exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited formal security governance. Privacy compliance is supported by a GDPR-compliant privacy policy, though no cookie consent mechanism is present. The site does not collect extensive user data or employ tracking analytics, minimizing privacy risks. Overall, the website is trustworthy, professionally designed, and content-rich for its domain. It lacks direct business contact information and advanced security disclosures, which could be enhanced to improve user trust and compliance. There are no indications of malicious activity or adult content, making it safe for general audiences.
- IIngka Centres Holding B.V.
ingkacentres.com
Real Estate · Netherlands
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ingka Centres Holding B.V. operates as a leading real estate and retail meeting place developer and manager, focusing on creating spaces where people can shop, meet, and experience new things. The company is positioned as an enterprise-level player within the real estate and retail sectors, with a strong emphasis on customer-centric meeting places. The website reflects a mature digital presence built on modern technologies such as React and Gatsby, offering excellent design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data slightly impacts trust but is mitigated by professional branding and contact information. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations.
- SSOREA, spol. s r.o.
sorea.sk
Hospitality · Slovakia
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SOREA, spol. s r.o. operates a network of hotels across Slovakia, providing accommodation, wellness, and relaxation services primarily targeting tourists and travelers. The company maintains a professional online presence with a user-friendly reservation system and regularly updated promotional offers. Their market position is that of a well-established regional hospitality provider with a medium-sized business footprint. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Flickity, and Fancybox, alongside Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
oByvani.blogobyvani.blog
Real Estate · Slovakia
54Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
oByvani.blog is a Slovak language inspirational blog focused on housing and real estate topics, providing readers with tips, trends, and advice related to living spaces and property. The site targets Slovak-speaking individuals interested in home decoration, real estate investment, and financial guidance related to housing. The business model centers on content publishing with monetization through advertising and partnerships. Technically, the website is built on WordPress using the Newspaper theme, enhanced with plugins for GDPR compliance, advertising management, and social media integration. The infrastructure includes modern technologies such as Google reCAPTCHA for form security and Cloudfront CDN for widget delivery. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a niche real estate audience in Slovakia.
Bundesinstitut für Öffentliche Gesundheitiris-plattform.de
Healthcare · Germany
72Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The IRIS Plattform is a German government-supported online health initiative focused on helping pregnant women and those planning pregnancy to abstain from smoking and alcohol. It offers personalized, anonymous, and free online programs with educational content, self-assessment tests, motivational support, and success stories. The platform targets a niche healthcare segment with a clear social benefit and operates under the Bundesinstitut für Öffentliche Gesundheit in cooperation with the Verband der Privaten Krankenversicherung e.V. The website is built on TYPO3 CMS, uses modern web technologies including jQuery and Matomo analytics configured with strong privacy protections, and is hosted on German infrastructure. The site is well-designed, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content.
- Deutscher Hebammenverband
ammely.de
Healthcare · Germany
62Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
ammely.de is the official nationwide platform of the Deutscher Hebammenverband (German Midwives Association) dedicated to connecting pregnant women and new mothers with available midwives across Germany. The platform offers services such as midwife search, course bookings, and direct contact with midwives, positioning itself as Germany's largest midwife platform. The website is professionally designed with a focus on user experience, targeting both care seekers and midwives. Technically, the site leverages modern web technologies including React and Ant Design, and integrates analytics tools like Hotjar and eTracker for user behavior insights. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit privacy and cookie policies in the visible content. Overall, the domain registration data aligns well with the business identity, indicating a trustworthy and legitimate platform.
- Bundesinstitut für Öffentliche Gesundheit (BIÖG)
infektionsschutz.de
Healthcare · Germany
66Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
Infektionsschutz.de is a German government-affiliated public health information platform operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides authoritative, up-to-date, and professionally reviewed content on infectious diseases, vaccination recommendations, hygiene tips, and educational materials targeting the general public and healthcare professionals. The website is well-positioned as a trusted source for infection protection information in Germany. Technically, the site is built on TYPO3 CMS with modern frontend technologies and uses Matomo analytics configured for privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and privacy-conscious analytics, though some security headers and explicit incident response policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.
Government · Germany
65Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The Familienportal.de website is an official German federal government portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ). It serves as a comprehensive information hub for families, providing detailed guidance on state family benefits, legal regulations, advisory services, and various calculators and application forms. The portal targets families in Germany, including parents, children, and related social groups, positioning itself as the authoritative source for family-related governmental information. The site is professionally designed with consistent branding and excellent content quality, supporting a high level of trustworthiness. Technically, the website employs modern web technologies including JavaScript, SVG icons, and Matomo analytics for user behavior tracking with privacy-conscious consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, although no explicit CMS or hosting provider details are evident. Security posture is strong with HTTPS enforced and privacy-respecting analytics, but explicit security headers and incident response contacts are not clearly published. From a security and compliance perspective, the portal implements GDPR-compliant privacy and cookie policies with clear user consent mechanisms and data retention policies. However, it lacks visible vulnerability disclosure or security.txt files, and no direct contact information for security incidents is provided. Overall, the site maintains a solid security posture appropriate for a government information portal. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing explicit security headers, providing incident response contact details, and establishing a vulnerability disclosure policy to enhance transparency and trust. The portal's technical infrastructure and content quality support its role as a trusted government resource for families in Germany.
Bundesministerium für Familie, Senioren, Frauen und Jugendhilfetelefon-schwangere.de
Government · Germany
62Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website 'Hilfetelefon Schwangere in Not' is an official German government service operated by the Bundesministerium für Familie, Senioren, Frauen und Jugend. It provides confidential, anonymous, and free counseling services for pregnant women in distress, including chat, telephone, and email support, as well as information on confidential birth and local counseling centers. The site is well-positioned as a trusted national resource with extensive reach and multilingual accessibility. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics with a clear cookie consent mechanism, and incorporates modern UI elements such as responsive design and accessibility features. The performance is moderate with good SEO and mobile optimization. Hosting details are not explicit but DNS data shows stable name servers. From a security perspective, the site uses encrypted communication channels for counseling, has a GDPR-compliant privacy policy, and implements cookie consent with opt-in. However, explicit security headers and incident response contacts are not visible, and no vulnerability disclosure policy is published. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The domain WHOIS data aligns well with the website's government affiliation, indicating high legitimacy and trustworthiness. No WAF or blocking mechanisms were detected, allowing full content access and analysis.
- BAG Familienerholung
bag-familienerholung.de
Non-profit · Germany
73Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
BAG Familienerholung is a German non-profit organization dedicated to providing affordable and family-friendly vacation opportunities in certified holiday homes across Germany. Their services focus on supporting families with low to medium income, families with multiple children, and individuals with disabilities or care needs. The organization collaborates with major welfare providers such as Diakonie, Caritas, AWO, and the German Red Cross to ensure social accessibility and quality. The website reflects a solid market position as a trusted umbrella organization in the family recreation sector. Technically, the website is built on WordPress using the Divi theme and incorporates modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is hosted on kasserver.com and uses HTTPS with a valid SSL certificate, ensuring secure communications. The site is mobile-optimized and accessible, with a clear navigation structure and good content quality. From a security perspective, the site employs HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no visible privacy policy or terms of service pages, which could be improved to enhance user trust and regulatory adherence. Overall, BAG Familienerholung presents a trustworthy and professional online presence with good technical implementation and business credibility. Strategic improvements in privacy documentation and security headers would further strengthen their security posture and compliance standing.
Other · Germany
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website asecos-configurator.com appears to be a German-language product configurator tool related to asecos, a company likely involved in industrial safety or related sectors. The site uses modern frontend technologies such as Angular Material and integrates cookie consent management via Cookiebot and customer interaction tools like LiveChat. However, the website lacks critical business and compliance information such as privacy policies, terms of service, and contact details, which limits its transparency and trustworthiness. The WHOIS data for the domain is missing or not found, which raises concerns about domain registration legitimacy but does not necessarily indicate malicious intent given the accessible and professional nature of the site content. Security posture is moderate with HTTPS implied but no visible advanced security headers or incident response information. Overall, the site serves a niche business function but requires improvements in compliance, transparency, and SEO to enhance credibility and user trust.
LUKi e.V.luki.org
Technology · Germany
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
LUKi e.V. is a small, established non-profit organization founded in 2001 in Germany, dedicated to promoting Linux and free software usage within church communities. The website serves as a community hub offering educational content, event information, and advocacy for free software in religious contexts. The organization maintains a consistent brand presence and provides multilingual resources to reach a broader audience. Technically, the website is built on WordPress with modern optimization plugins and uses HTTPS with a good SSL configuration, though it lacks DNSSEC and some security headers. No major security vulnerabilities or privacy compliance issues are evident, but cookie consent mechanisms are missing. Contact is primarily via a contact form, with no direct email or phone numbers visible. Overall, the site is professional, trustworthy, and well-positioned within its niche.
Forschungsstelle Kaiserpfalz der Stadt Ingelheimkaiserpfalz-ingelheim.de
Other · Germany
55Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website kaiserpfalz-ingelheim.de represents the Forschungsstelle Kaiserpfalz der Stadt Ingelheim, a small cultural heritage and archaeological research entity focused on the preservation and public education of the early medieval Kaiserpfalz site in Ingelheim, Germany. The site offers comprehensive information about the history, research, exhibitions, and visitor information, including digital tools such as virtual tours and a dedicated app. The organization positions itself as a key regional cultural institution with a strong educational mission. Technically, the website is built on WordPress with Elementor and several plugins for SEO, accessibility, and analytics. It is hosted on a German hosting provider (webgo.de) and uses HTTPS with a good security posture. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. Analytics are minimal and privacy-conscious, using Koko Analytics without cookies. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. The domain WHOIS data is consistent with the website's German cultural focus and shows no suspicious patterns. Overall, the website is a professional, trustworthy, and well-maintained digital presence for a cultural heritage institution. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and providing clearer contact information to improve trust and compliance.
Mehrgenerationenhaus Ingelheimmgh-ingelheim.de
Non-profit · Germany
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Mehrgenerationenhaus Ingelheim is a local non-profit community center in Ingelheim am Rhein, Germany, providing a wide range of social, cultural, educational, and health-related services to residents of all ages. The organization focuses on fostering community engagement, volunteering, and multi-generational interaction. Their website reflects a well-structured and community-oriented approach with clear contact information and social media presence on Facebook and Instagram. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and uses several JavaScript libraries including jQuery 1.11.3, FontAwesome, and Slick Slider. The site is mobile responsive and includes a cookie consent mechanism compliant with GDPR. However, some technical improvements could be made, such as updating jQuery to a more secure version and implementing security headers. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's community focus and shows no privacy protection, indicating transparency. Overall, the website is trustworthy, safe, and professionally maintained, with minor technical and security enhancements recommended to improve its posture and compliance further.
Swiss Top Events - Schweiz - Switzerlandswisstopevents.ch
Other · Switzerland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Swiss Top Events is a small-scale event promotion website focused on major Swiss cultural and sports events such as the Montreux Jazz Festival and Omega European Masters. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. The technical infrastructure is standard for Wix sites, including JavaScript polyfills and error monitoring via Sentry. The site is accessible without any WAF or security challenges, uses HTTPS, and has moderate performance and mobile optimization. However, it lacks critical privacy and cookie policies, contact information, and security headers, which impacts its compliance and security posture. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices.
- Teatro alla Scala
lascala.tv
Media · Italy
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
LaScalaTv is the official streaming platform of Teatro alla Scala, a world-renowned opera house based in Italy. The platform offers streaming services for opera, ballet, and classical music performances, targeting cultural and classical music enthusiasts globally. The business model is focused on subscription and pay-per-view access to high-quality performing arts content, leveraging the prestigious brand of Teatro alla Scala. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience.
- Fachzeitungen.de
fachzeitungen.de
Media · Germany
51Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Fachzeitungen.de operates as an independent German-language portal specializing in the aggregation and presentation of specialist magazines, Fachpublikationen, and eBooks across a wide range of professional and hobbyist categories. The platform offers categorized listings, search functionality, advertising opportunities, and a press release portal, targeting professionals and enthusiasts seeking specialized publications. The website is well-structured with clear navigation and a consistent brand presence, serving a niche media market in Germany. Technically, the site is built on Drupal CMS, employs Matomo for privacy-respecting analytics, and uses modern JavaScript libraries such as Owl Carousel and Tarteaucitron.js for cookie consent management. The site is mobile-optimized and implements HTTPS, but lacks some advanced security headers and explicit security policies. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. However, no direct contact information or incident response channels are publicly visible, which could be improved for trust and compliance. WHOIS data is minimal, limiting full domain trust assessment but no suspicious patterns are evident. Overall, Fachzeitungen.de presents a professional and trustworthy media portal with room for enhanced security and transparency.
Media · Germany
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
music-job.com operates as a specialized online job marketplace focused on the music industry, particularly orchestra musicians. Established in 2000, it positions itself as the world's largest job market for orchestra musicians, offering job listings across orchestras, music schools, universities, and music management sectors. The website targets music professionals seeking employment and organizations looking to hire within the music domain. Technically, the site is built on WordPress with WooCommerce and WPBakery Page Builder, enhanced by multilingual support via WPML and accessibility features through the digiaccess plugin. Hosting is provided by IONOS SE, a reputable provider, and the site uses HTTPS with a valid SSL certificate, ensuring secure communications. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security measures include Google reCAPTCHA and accessibility compliance, but security headers are not detected, suggesting room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.
- PPage Not Found
kuenstlerhaus-edenkoben.de
Other
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website kuenstlerhaus-edenkoben.de currently serves a 404 error page indicating no site configuration found, rendering it inaccessible for meaningful content or business information extraction. The site is built on TYPO3 CMS as evidenced by the branded error page. There is no metadata, structured data, or contact information available, and no privacy or cookie policies are present. The domain uses German-based animate.de name servers and shows a domain status of 'connect' in WHOIS data, suggesting it is registered and active but the website content is not deployed or misconfigured. From a technical perspective, the site lacks visible security headers, HTTPS status is unknown, and no analytics or advertising technologies are detected. The absence of accessible content and policies results in a poor user experience and low trustworthiness. No business or security policies are found, and no contact or incident response information is available. Security posture is weak due to lack of HTTPS confirmation and missing security best practices. The domain registration appears consistent and legitimate, but the lack of content and configuration severely limits the website's credibility and operational readiness. Overall, the site is currently non-functional from a visitor perspective and requires immediate remediation to deploy content and security controls. Recommendations include implementing HTTPS, deploying a valid website configuration, adding privacy and cookie policies, providing contact and security incident response information, and applying standard security headers to improve trust and compliance.
Sciosciolink.cz
Education · Czech Republic
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
ScioLink is a Czech-based online proctored testing platform designed primarily for universities and educational institutions in the Czech Republic and Slovakia. The platform leverages modern technologies including AI-assisted remote monitoring and Microsoft Azure cloud hosting to deliver secure, fair, and efficient online exams. The company has nearly 30 years of experience in educational assessment and is recognized with awards such as the Financial Times Tech Champion 2021. The website is professionally designed, mobile-optimized, and provides comprehensive content including case studies, blog articles, and white papers to support its services. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. The platform emphasizes data protection and GDPR compliance, supported by a detailed privacy policy and cookie consent mechanisms.
Landeshauptstadt Mainzkultursommer-eroeffnung.de
Government · Germany
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Landeshauptstadt Mainz operates an official municipal website providing comprehensive information about cultural events such as the Kultursommer Eröffnungsfest 2025. The site targets residents and visitors interested in cultural and community activities, offering detailed event programs, partner information, and accessibility features. The website is well-branded, consistent, and professionally maintained, reflecting the city's commitment to public service and cultural promotion. Technically, the site uses a custom CMS (Sitepark Information Enterprise Server) with modern JavaScript libraries like jQuery and Modernizr, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. WHOIS data confirms the domain's legitimacy as an official city domain. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.
- Kulturstiftung RLP
echtjetzt.info
Non-profit · Germany
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Echt jetzt! is a cultural non-profit initiative managed by Kulturstiftung RLP that promotes theater performances for children and youth across Rheinland-Pfalz. The website serves as an informational and application portal for theater guest performance funding, providing resources such as theater tips, current news, and contact options. The site is professionally designed using WordPress with modern plugins for SEO and cookie consent, reflecting a mature digital presence suitable for its target audience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for non-profit cultural projects, and no suspicious indicators were found. Overall, the website is trustworthy, well-maintained, and compliant with GDPR regulations.
Deutsche Lutherweg-Gesellschaft e. V.lutherweg-bayern.de
Non-profit · Germany
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Deutsche Lutherweg-Gesellschaft e. V. operates the Lutherweg Bayern website, promoting a cultural and religious pilgrimage route network centered on Martin Luther's historical sites. The organization targets pilgrims, hikers, and visitors interested in the Reformation and cultural heritage, positioning itself as a regional non-profit entity focused on tourism and education. The website provides route information, pilgrimage offers, maps, and a newsletter subscription to engage its audience. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme and several plugins including Complianz GDPR for cookie consent and WPForms for user interaction. It is hosted on webgo.de servers with HTTPS enforced, indicating a modern and secure infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. Security posture is solid with HTTPS, GDPR compliance, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response information, which could be improved to enhance trust and readiness. Privacy compliance is well handled with clear cookie consent and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-maintained, serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.
- medio GmbH
busstag.de
Government · Germany
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.busstag.de serves as an informational and campaign platform for the Buß- und Bettag, a religious day of reflection observed by evangelical Christians in Germany. It is operated under the auspices of the Evangelische Kirche and developed by medio GmbH, a TYPO3 CMS specialist. The site provides event information, prayer submissions, and live broadcast details, targeting a German-speaking religious audience. Technically, the site uses a modern stack including TYPO3, Bootstrap, Font Awesome, and Matomo analytics, hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS and privacy-respecting analytics, though some security headers and policies could be improved. Privacy compliance is supported by a cookie consent banner and a privacy policy page. Overall, the site is professional, trustworthy, and well-aligned with its mission as a church campaign platform.
Tobit.Softwarechayns.org
Technology · Germany
75Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
chayns.site is a cloud-based digital platform operated by Tobit.Software, offering a comprehensive operating system for digitalization. It enables users to create personalized sites, integrate applications, and connect with communities through an intuitive interface and extensive API support. The platform targets businesses, developers, and organizations aiming to enhance their digital presence and operational efficiency. Technically, the website leverages modern web technologies including React and JavaScript, hosted on reputable infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is evident through a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. Overall, the website presents a professional, trustworthy, and well-structured digital platform with strong business credibility and technical maturity.
Other
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at www.impresspages.org is currently inaccessible or blocked, presenting only an empty HTML structure with no metadata, content, or visible elements. The WHOIS data is malformed and lacks critical registration details such as registrar, creation date, expiry date, and registrant information, which severely limits the ability to verify domain legitimacy or business identity. Due to the absence of content and metadata, no business description, services, or market positioning can be determined. Technically, the site lacks any detectable technologies, scripts, or frameworks, and no security or privacy policies are present. The security posture is weak, with no HTTPS detected and no security headers or best practices implemented. Overall, the site appears either under construction, abandoned, or protected by a security mechanism that blocks content delivery.
Reactflowcdnflow.co
Technology
63Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Reactflow is a SaaS company specializing in conversion optimization tools such as session replay, heatmaps, funnel analytics, bug tracking, and customer feedback collection. The company targets marketers, UX designers, developers, and product managers aiming to improve website performance and user experience. The website is professionally designed, well-structured, and provides comprehensive information about its services and benefits. The technical infrastructure leverages modern JavaScript libraries and frameworks, with hosting and DNS managed via Cloudflare, ensuring good performance and availability. Security posture is solid with HTTPS enforced, data masking, and encryption in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is emphasized with GDPR adherence and data masking technologies, but no cookie consent mechanism was detected. Overall, the website and business demonstrate a mature and trustworthy presence in the technology SaaS market.
Pingmeterpingmeter.com
Technology
58Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Pingmeter is a specialized technology company offering smart website uptime monitoring, alerting, and automated recovery services. Established in 2016, it targets website owners and IT administrators seeking reliable uptime assurance with features such as multi-location scanning, DNS failover, and recovery SSH actions. The business operates on a subscription SaaS model with multiple pricing tiers catering to different user needs. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience.
- CCDN Library
edgecdnplus.com
Technology
57Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
EdgeCDNPlus.com is a small technology-focused website offering a CDN library service that provides developers with direct links to popular frontend libraries such as Bootstrap, React, Font Awesome, Material UI, Chart.js, and Animate.css. The site targets developers seeking easy access to these resources via a simple interface. The business model appears to be centered on content delivery for web development assets, although no explicit commercial or enterprise positioning is evident. The website content is basic but relevant to its developer audience. From a technical perspective, the site uses standard web technologies including Bootstrap 4.3.1 and jQuery 3.3.1 slim, hosted on Cloudflare infrastructure as indicated by the nameservers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or complex backend platform. The site is straightforward with minimal interactive elements. Security posture is limited; no security headers or HTTPS enforcement details are visible in the provided data. DNSSEC is not enabled despite Cloudflare DNS usage. The WHOIS data is suspicious due to a domain creation date set in the future (2025), which undermines trust and raises questions about legitimacy. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is provided, indicating low maturity in compliance and security transparency. Overall, the site is safe for general audiences with no adult or questionable content. However, the lack of business transparency, privacy compliance, and suspicious WHOIS data reduce trustworthiness. Strategic improvements in security policies, compliance documentation, and domain registration transparency are recommended to enhance credibility and security posture.
Reactflowreactflow.com
Technology
63Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Reactflow is a technology company specializing in conversion optimization tools such as session recordings, heatmaps, funnel analytics, bug tracking, and feedback collection. Their platform targets marketers, UX designers, developers, and product managers aiming to improve website performance and customer experience. The company has been operational since 2016 and positions itself as a competitive alternative to established players like Hotjar, emphasizing privacy and GDPR compliance. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various analytics and tracking tools, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced, data masking, and containerized services, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a clear privacy policy, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, with extensive user tracking balanced by stated privacy measures.
Digitalstadt Ahausdigitalstadt-ahaus.de
Government · Germany
65Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Digitalstadt Ahaus is a smart city initiative based in Ahaus, Germany, focused on integrating digital services to enhance the lives of citizens and visitors. The website showcases various innovative digital hotspots and services such as cashier-less supermarkets, digital gastronomy, eBike sharing, and automated boat rentals. It positions itself as a leading example of smart city development in Germany, leveraging the Tobit Chayns platform for its digital infrastructure. The site targets a broad audience including residents, tourists, businesses, and government stakeholders interested in smart city solutions. Technically, the website uses modern web technologies including React and the Chayns CMS platform, hosted on Tobit's cloud infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business goals.
- chayns®
chayns.space
Technology · Germany
65Medium
NIS2 10 · GDPR 25
NIS2 10 · GDPR 25
chayns® is a technology platform operated by Tobit AG that facilitates direct connections between people, companies, and organizations through websites, apps, push notifications, and digital services such as payments and wallets. The platform targets a broad audience including service providers and end users, offering a unified user experience across devices. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and proprietary Chayns frameworks. Hosting and DNS are managed via Cloudflare and Tobit infrastructure, ensuring good performance and security. Security posture is solid with HTTPS enforced, but lacks explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliance appears addressed, though contact information and incident response details are not clearly provided. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy and security transparency.
Sherlock'ssherlocks-ahaus.de
Hospitality · Germany
60Medium
NIS2 10 · GDPR 25
NIS2 10 · GDPR 25
Sherlock's is a small, themed steakhouse located in Ahaus, Germany, offering a unique digital dining experience integrated with the chayns platform. The business leverages technology to provide customers with smartphone-based table reservations, ordering, and payment, enhancing convenience and modernizing traditional hospitality services. The website reflects a consistent brand identity centered around the Sherlock Holmes theme and promotes special event dinners to attract and engage customers. Technically, the site uses modern frameworks such as React and is hosted on reputable infrastructure, ensuring moderate performance and good mobile optimization. However, the absence of explicit privacy and cookie policies, as well as security headers, indicates areas for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Wohnbau Stadt Coburg GmbHwohnen-coburg.de
Real Estate · Germany
55Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Wohnbau Stadt Coburg GmbH operates as a real estate company providing housing and property management services primarily in Coburg, Germany. The website is built on WordPress using the Divi theme and incorporates Cookiebot for cookie consent management, indicating awareness of privacy compliance requirements. The technical infrastructure is standard for a medium-sized local business, hosted on German nameservers with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms policies suggests room for improvement. Contact information and incident response details are not clearly presented, which may impact user trust and compliance. Overall, the website is professional and safe, targeting local residents and tenants, but would benefit from enhanced transparency and security practices.
Media · Germany
71Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
The Nordbayerischer Kurier is a regional news media company serving the Oberfranken region in Germany, operated by Verlagsgruppe Hof, Coburg, Suhl, Bayreuth. The website provides local news coverage with a digital presence that includes social media integration and modern advertising and analytics technologies. The company has a solid market position as a regional news provider with a history dating back to 1946. Technically, the website uses a custom CMS with integrations for consent management, paywall, and multiple advertising networks, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, consent mechanisms, and no visible vulnerabilities, although explicit security and incident response policies are not publicly found. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.
Marigoldselligent.com
Technology
69Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Marigold operates a privacy-centric marketing automation platform branded as Selligent by Marigold, targeting enterprises seeking GDPR-compliant, flexible cross-channel marketing solutions. The company emphasizes local expertise combined with global reach, offering tools for data unification, customer engagement, and campaign automation. Technically, the website is built on Webflow CMS, integrates HubSpot forms, Google Tag Manager, and TrustArc for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, domain protection statuses, and form protections via reCAPTCHA, though explicit security headers are not evident. Privacy compliance is strong, with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site projects professionalism and trustworthiness, though direct contact details and incident response info are absent, representing areas for enhancement.
- DD-BOX Technologies Inc.
d-box.com
Technology · Canada
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
D-BOX Technologies Inc. is a Canadian technology company specializing in haptic motion technology that enhances entertainment and simulation experiences. Their offerings span multiple sectors including movie theaters, home entertainment, sim racing, gaming, simulation and training, and theme parks. The company positions itself as an innovator in immersive technology with a global reach and a strong digital presence. The website is built on HubSpot CMS, leveraging modern marketing and analytics tools, and demonstrates good mobile optimization and user experience. Security posture is solid with HTTPS enforced and secure forms, though some security headers and policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to professional content and investor relations transparency.
Messer SE & Co. KGaAgasesforlife.de
Manufacturing · Germany
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Messer SE & Co. KGaA operates the website gasesforlife.de, which serves as an informational and promotional platform for their industrial and specialty gases business. The company is a large, established player in the manufacturing and energy sectors, providing gases for diverse applications including healthcare, environmental protection, food industry, and scientific research. The website is well-structured, professionally designed, and targets industrial clients and related sectors. Technically, the site is built on TYPO3 CMS with modern libraries and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. Overall, the site demonstrates high business credibility and compliance with privacy regulations, though it lacks a terms of service page and vulnerability disclosure information.
Messer SE & Co. KGaAmesser-careers.com
Energy
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Messer SE & Co. KGaA is a leading privately owned specialist in industrial, medical, and specialty gases with a global presence across Asia, Europe, and the Americas. The company operates a professional career site powered by the Teamtailor platform, offering a wide range of job opportunities and showcasing its culture and values. The website reflects a mature digital presence with strong branding and comprehensive content aimed at attracting potential employees. Technically, the site leverages modern JavaScript frameworks and is hosted on Teamtailor's AWS-backed CDN infrastructure, ensuring fast performance and excellent mobile optimization. The use of cookie consent mechanisms and privacy policies indicates good privacy compliance, although explicit security headers and incident response information are not publicly disclosed. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but could improve by publishing security policies and providing clear channels for incident reporting. The absence of WHOIS data for the subdomain is typical and does not detract from the site's legitimacy, which is supported by consistent branding and multiple regional subsidiary links. Overall, the site presents a low-risk profile with strong business credibility and technical implementation, suitable for its purpose as a corporate career portal.
- Albert Bayer GmbH
albert-bayer.de
Energy · Germany
62Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Albert Bayer GmbH is a well-established German family business specializing in comprehensive home renovation services, including professional bathroom remodeling, sustainable heating solutions, and innovative electrical installations. With over 100 years of experience and a strong partner network, the company positions itself as a reliable one-stop provider for various home improvement needs. The website reflects a professional and consistent brand image targeting a broad audience interested in energy-efficient and modern home solutions. Technically, the site uses legacy JavaScript libraries alongside modern tools like Klaro for cookie consent, hosted on a domain controlled by a reputable registrar. Security posture is adequate with HTTPS enforced and basic security best practices, though some outdated libraries present potential vulnerabilities. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, but no explicit security or incident response policies are found. Overall, the site is trustworthy, well-structured, and provides clear contact information and partner affiliations.
- asecos GmbH
asecos.com
Manufacturing · Germany
55Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
asecos GmbH is a leading German manufacturer specializing in high-insulation safety cabinets and mobile storage rooms for flammable substances, recognized as an expert in safe storage and handling of hazardous materials and flammable liquids. The company targets industries such as laboratories, research, industry, and agriculture, offering a broad product range including safety cabinets, gas cylinder cabinets, and filtration systems. asecos emphasizes compliance with European standards and certifications such as EN ISO 9001 and 14001, GS, and VDMA 24994. The website reflects a mature digital presence with multilingual support, detailed product information, and integrated customer service features including expert consultation and training academies. Technically, the site uses established JavaScript libraries and tracking tools, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid but could be enhanced by adding explicit security headers and incident response information. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the professional and comprehensive website content supports the legitimacy of the business. Overall, asecos presents a trustworthy and authoritative presence in its niche market.