Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,178001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
14,051–14,100 of 99,068
Healthcare · Slovakia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Slovenská lekárska knižnica is a Slovak national medical library operated under the Národné centrum zdravotníckych informácií, providing specialized medical literature and database access to healthcare professionals and institutions. The website serves as a portal for accessing online catalogs, registration services, and medical databases such as EBSCO and OVIDSP. The organization holds a strong position in the healthcare and government sectors within Slovakia, focusing on educational and research support. Technically, the site is built on Microsoft SharePoint with legacy components and uses older JavaScript libraries, indicating moderate digital maturity. The site is accessible, professionally designed, and provides relevant content, but lacks modern privacy and security features such as cookie consent and updated libraries. Security posture is adequate with HTTPS and form protections but could be improved with modern headers and updated dependencies. Overall, the site is trustworthy and serves its audience well but would benefit from modernization and enhanced privacy compliance.
- Národné centrum zdravotníckych informácií
ezdravotnictvo.sk
Healthcare · Slovakia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.ezdravotnictvo.sk is the official Slovak national electronic healthcare portal operated by the Národné centrum zdravotníckych informácií. It provides a range of electronic health services including electronic prescriptions, electronic health booklets, electronic sick leaves, and related support for healthcare professionals and patients. The site targets healthcare providers, patients, and government stakeholders, positioning itself as a critical infrastructure for Slovakia's healthcare digital transformation. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries such as jQuery and Bootstrap, and integrates Google Tag Manager and Google Maps API for analytics and location services. The site is mobile-optimized and accessible with good SEO practices. Security-wise, the site enforces HTTPS and uses some security headers but lacks comprehensive security policies and advanced headers. Privacy compliance is partially addressed with a privacy information page but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving an essential government function.
- NaturFreunde Rheinland-Pfalz
naturfreunde-rlp.de
Non-profit · Germany
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
NaturFreunde Rheinland-Pfalz is a regional non-profit organization dedicated to environmental protection, culture, tourism, and sports within the German state of Rheinland-Pfalz. The website serves as an information hub for members and interested parties, offering news, event listings, and project details. The organization maintains an active community presence and promotes sustainable and social activities. Technically, the website is built on Drupal 7 with common JavaScript libraries and is hosted on a stable infrastructure likely provided by 1&1 IONOS. The site is mobile-optimized and includes SEO best practices, though some accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially met with a privacy policy page but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.
- BUND Landesverband Rheinland-Pfalz e. V.
bund-rlp.de
Non-profit · Germany
63Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
BUND Landesverband Rheinland-Pfalz e. V. is a regional non-profit environmental organization dedicated to protecting nature and promoting sustainability in the German state of Rheinland-Pfalz. The website serves as an information hub for their projects, advocacy efforts, and community engagement, including membership and donation drives. The organization maintains a strong presence with educational resources and active social media channels. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism via tarteaucitron.js, reflecting a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for users interested in environmental issues in Rheinland-Pfalz.
- PPage Not Found
wald-rlp.de
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website wald-rlp.de currently serves a 404 error page indicating no site configuration found, which means the actual business content is inaccessible. The page is built on TYPO3 CMS as indicated by the error branding, but no business information, contact details, or policies are present. The technical infrastructure appears minimal with no detected scripts or analytics. Security posture cannot be fully assessed due to lack of HTTPS and security headers information. Overall, the site is non-functional from a user perspective and lacks essential compliance and trust elements.
Sharkness Media GmbH & Co. KGsharkness-media.de
Media · Germany
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Sharkness Media GmbH & Co. KG is a specialized full-service agency focused on providing information systems, website hosting, marketing, and design services primarily for political entities associated with the CDU/CSU parties in Germany. With over 15 years of experience, the company offers tailored solutions including integrated newsletters, social media integration, SSL security, and media servers for video and podcasts. Their market position is that of a niche provider with a strong focus on political clients and associations. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience optimized for mobile devices. Security posture is adequate with SSL encryption and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with its business goals.
1&1 Versatel GmbHversatel.de
Telecommunications · Germany
72Medium
NIS2 52 · GDPR 83
NIS2 52 · GDPR 83
1&1 Versatel GmbH is a leading German telecommunications provider specializing in fiber optic internet, telephony, networking, and security solutions for business customers. The company operates under the umbrella of United Internet AG and targets medium to large enterprises seeking high-performance digital infrastructure. Their website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. Technically, the site is built on Drupal CMS with modern frontend technologies, optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and vulnerability disclosure are recommended. Overall, the domain's WHOIS data is unavailable, which slightly impacts trust but does not detract from the company's legitimacy given the strong business signals and market position.
Refokusrefokus.io
Technology
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Refokus is a boutique digital agency specializing in high-end web design, branding, and development services primarily targeting B2B startups, venture capital firms, and large innovative organizations. The company leverages modern technologies such as Webflow, AI, and proprietary frameworks to deliver fast, scalable, and visually compelling websites. Their market position is that of a high-quality, award-nominated agency focused on speed and quality. Technically, the website is built on Webflow with integrations of advanced JavaScript libraries like GSAP and ThreeJS, and uses analytics tools including Google Analytics and Ahrefs. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and some consent management for analytics but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. The WHOIS data is missing or indicates the domain may be very new or unregistered, which slightly reduces trustworthiness despite the professional site content. Overall, the website presents a strong business and technical profile but should address privacy and security policy transparency and clarify domain registration details to enhance trust.
- MMASSIF CENTRAL
massifcentral.rocks
Hospitality · Germany
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Massif Central is a vibrant urban cultural and hospitality venue located in Frankfurt am Main, Germany. It functions as a melting pot for diverse urban activities including design, architecture, fan culture, street art, and e-mobility, complemented by food and beverage services such as organic food, daily menus, BBQ, and drinks. The venue hosts a variety of events, workshops, and cultural programs targeting urban creatives and the local community. Technically, the website is built on WordPress using modern frameworks like Foundation and integrates marketing tools such as MailerLite. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website presents a professional and trustworthy business presence with room for security and compliance improvements.
Frederik Steensteen.in
Media · Germany
51Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Frederik Steen operates a professional media services website based in Bonn, Germany, offering moderation for online and live events, podcast and video hosting, and comprehensive media training. The site targets a general audience interested in media communication and training services. The business is positioned as a niche local media professional with a small company size and a clear focus on media and communication sectors. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS enforced and GDPR compliance via cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns.
- Polarlicht Mediengestaltung GmbH
polarlicht.com
Media · Germany
67Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Polarlicht Mediengestaltung GmbH is a small media design company based in Wiesbaden, Germany, specializing in web and logo design services. The company targets businesses and individuals seeking professional media design solutions. The website is built on the Wix platform, indicating a moderate level of digital maturity with use of modern JavaScript libraries and error monitoring via Sentry. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional website and structured data suggest a genuine business presence. Security posture is moderate with HTTPS usage and some security best practices, but lacks security headers and formal privacy or cookie policies. Overall, the site is accessible and functional but would benefit from enhanced compliance and security measures.
Wenn Rock, dann BOB! | RADIO BOB! nationalradiobob.de
—
58Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
- GMM AG
g-m-m.de
Media · Germany
51Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
GMM AG is a well-established German media and communication agency with over three decades of experience, specializing in integrated 360-degree communication solutions including film production, web projects, social media, branding, and live streaming. The company targets businesses and organizations seeking comprehensive media and communication services, positioning itself as a reliable partner with a broad service portfolio and strong client references. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and analytics tools such as Matomo and Google Analytics, demonstrating a mature digital infrastructure. The site is mobile-optimized and features a professional design with clear navigation and rich content. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and incident response information. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities, reflecting a strong security posture and business credibility.
HSEhse.de
E-commerce · Germany
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
HSE operates a comprehensive e-commerce platform primarily serving the German-speaking market, offering a wide range of products including fashion, beauty, jewelry, and home living items. The platform integrates modern digital shopping experiences such as livestream shopping and daily promotional campaigns, positioning itself as a large and established player in the retail e-commerce sector. The website demonstrates a high level of digital maturity with a React-based frontend, integration of consent management via Usercentrics, and advanced analytics through Google Tag Manager and Tealium. Hosting and content delivery leverage Akamai infrastructure, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with no indications of blocking or WAF interference.
UPLINK Network GmbHuplink-network.de
Telecommunications · Germany
58Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
UPLINK Network GmbH is a prominent German telecommunications and broadcasting service provider specializing in the planning, construction, and operation of critical decentralized IT and radio technology infrastructure. They hold a leading market position as Germany's largest operator of FM radio frequencies, serving a broad range of private and public radio broadcasters. Their key services include broadcasting network operation, audio streaming via their subsidiary UPLINK DIGITAL GmbH, radio technology solutions, and Industry 4.0 IoT network deployments such as LoRaWAN. The company targets broadcasting companies, telecom clients, and industrial IoT customers with a service-oriented business model focused on infrastructure and technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as WPBakery and Bootstrap, ensuring good mobile optimization and SEO. The site uses HTTPS with Google Analytics and reCAPTCHA for user interaction and tracking, complemented by a GDPR-compliant cookie consent mechanism. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, though security headers are not explicitly present. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, UPLINK Network GmbH presents a professional and credible online presence with good privacy compliance and technical implementation. Strategic improvements in security policy transparency and vulnerability disclosure could further enhance trust and security posture.
Media Broadcastmedia-broadcast.com
Media · Germany
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Media Broadcast is a leading German full-service provider specializing in broadcast and media solutions for television, radio, and digital platforms. The company offers a comprehensive range of services including signal transmission, network planning, professional services, and innovative 5G campus network solutions. Their market position as a leader in Germany's media infrastructure sector is supported by a professional and content-rich website that clearly targets broadcasters, media companies, and industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and optimized for mobile devices. The site demonstrates good SEO practices and moderate performance, with a cookie consent mechanism in place to comply with privacy regulations. However, the absence of a privacy policy and terms of service pages indicates gaps in privacy compliance. From a security perspective, the site enforces HTTPS with HSTS and uses standard security headers, reflecting a good security posture. No vulnerabilities or exposed sensitive data were detected. The lack of a security policy or incident response contact information suggests room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures. The missing WHOIS data raises questions about domain registration legitimacy, warranting further verification. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and improving accessibility features to strengthen compliance and user trust.
Government · Germany
51Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
The website www.fsk.de represents the Freiwillige Selbstkontrolle der Filmwirtschaft (FSK) GmbH, a German organization responsible for youth protection and film age classification. It serves as an authoritative platform providing transparent and legally compliant information about film ratings, youth media protection, and services for families and the film industry. The site is well-positioned in the German government sector as a trusted regulatory body. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Google Tag Manager, Vimeo embeds, and security plugins like Wordfence. The site employs a comprehensive cookie consent mechanism and uses HTTPS with good SSL configuration, ensuring secure data transmission and user privacy. Security measures include spam protection via Google reCAPTCHA and firewall protections. Overall, the website demonstrates a strong security posture with no critical vulnerabilities detected. The content is professionally presented, mobile-optimized, and accessible, targeting a general audience with a focus on families and youth protection. The domain registration data aligns with the business identity, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers with Content-Security-Policy, maintaining up-to-date software, and conducting regular security audits to sustain and improve the security posture.
Kinowelt TVkinowelt.tv
Media · Germany
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Kinowelt TV is a German-language media company operating a specialized TV channel focused on high-quality feature films. The website serves as a digital platform providing programming schedules, film series information, and subscription options through various cable and IPTV providers. The company targets movie enthusiasts in the German-speaking market, positioning itself as a trusted source for curated cinematic content. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Slick Carousel, and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is well-optimized for SEO and accessibility, with a responsive design and clear navigation. Security-wise, the site uses HTTPS and incorporates some best practices, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data due to privacy protection limits transparency but is not uncommon for media businesses. Overall, the website is professional, trustworthy, and user-friendly, with moderate room for enhancing privacy compliance and security posture.
Other · Belgium
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website gemeindewahlen.be is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. The domain is registered to Demetec Sprl, a Belgian company, since 2017, which aligns with the .be domain and suggests a legitimate registration. However, no business information, contact details, or policies are visible on the page due to the security mechanism. The technical infrastructure includes Cloudflare protection but no detectable CMS or additional technologies. Security posture cannot be fully assessed because of the blocked content. Overall, the site appears to be protected by strong WAF measures but lacks publicly accessible content for further analysis.
- DDemetec Sprl
ostbelgienfamilie.be
Government · Belgium
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ostbelgienfamilie.be is an official government portal serving the German-speaking community of Belgium, focusing on family-related services such as child benefits, childcare, and family support. The website is professionally designed with clear navigation and provides comprehensive information and online tools to its target audience of families and service providers. The site is built on a modern ASP.NET framework using the contentXXL CMS, supported by Demetec Sprl, a known CMS provider. It employs standard web technologies including jQuery and Telerik UI components, and integrates etracker analytics with respect for user privacy.
- DDemetec Sprl
ostbelgieneuropa.be
Government · Belgium
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ostbelgien Europa is an official governmental portal serving the German-speaking Community of Belgium, focusing on European Union funding, regional projects, and cooperation. The website provides comprehensive information about EU programs such as Interreg, Erasmus+, and others, targeting residents, organizations, and institutions within the community. The portal is developed and maintained by Demetec Sprl, a company credited in the website footer, and uses the contentXXL CMS platform. The site is well-structured, with clear navigation and a consistent branding approach, reflecting its official status and purpose. Technically, the website employs ASP.NET WebForms technology, jQuery, and modern JavaScript libraries like Modernizr. It integrates a cookie consent mechanism via Klaro and uses etracker for analytics, indicating a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the website enforces HTTPS and includes some security headers, though there is room for improvement by adding explicit Content-Security-Policy and other headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security or incident response policies are published. Overall, Ostbelgien Europa presents a trustworthy and professional online presence for its governmental function. The domain registration aligns with the website's developer, and no suspicious patterns were found. Recommendations include enhancing security headers, publishing incident response information, and adding clearer contact details to improve user trust and compliance.
- DDemetec Sprl
ostbelgienlive.be
Government · Belgium
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ostbelgien Live is an official government information portal serving the German-speaking Community of Belgium. It provides comprehensive public information, access to government services, and community updates tailored to residents and citizens. The website is well-structured, primarily in German, and integrates multiple partner sites covering various regional topics such as education, tourism, and local governance. The platform uses a commercial CMS (contentXXL) and standard web technologies including ASP.NET and jQuery, indicating a mature technical infrastructure. Analytics and cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government entity.
Rosendahl Borngräberrosendahl-berlin.de
Media · Germany
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Rosendahl Borngräber is a Berlin-based agency specializing in brand and communication design, serving a diverse clientele including companies, institutions, and non-profit organizations. Established in 1998, the agency offers a broad range of services such as branding, corporate design, digital and publication design, signage, and website development. Their market position is reinforced by multiple prestigious design awards, reflecting a strong reputation in the media and design industry. Technically, the website is built on the CELLMS content management system and employs a modern technology stack including jQuery, Lottie animations, and device detection scripts. The site is hosted on flatservice.de nameservers, optimized for mobile devices, and demonstrates good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not published, and security headers are not detected, indicating areas for enhancement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user experience. Strategic improvements in security policy transparency and technical security controls would further strengthen the site's security posture and trustworthiness.
Kommission für Jugendmedienschutz (KJM)kjm-online.de
Government · Germany
55Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Kommission für Jugendmedienschutz (KJM) website serves as the official platform for Germany's central regulatory authority for youth media protection. It provides comprehensive information on their mandate, regulatory activities, publications, and complaint mechanisms. The site targets children, youth, guardians, educators, and media providers, positioning itself as a trusted government entity in the youth protection sector. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs modern web technologies with good mobile optimization and accessibility. Privacy is well respected with Matomo analytics configured to disable cookies and honor DoNotTrack. Security posture is solid with HTTPS and some security headers, though improvements are recommended in header policies and incident response visibility. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.
Media · Germany
55Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Kommission zur Ermittlung der Konzentration im Medienbereich (KEK) is a German regulatory commission focused on ensuring media plurality and preventing concentration of opinion power among private television broadcasters. The website serves as an official platform providing transparency on media ownership, publishing concentration reports, and offering insights into media market developments. It targets regulators, media professionals, researchers, and the general public interested in media diversity. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs Matomo analytics configured with privacy considerations. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit policies could be improved. Contact information is clearly provided, including email, phone, and physical address. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.
m2 MedienMittwoch Stiftungmedienmittwoch.de
Media · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The m2 MedienMittwoch Stiftung operates a professional networking platform focused on media topics within the FrankfurtRheinMain region. The website serves as a hub for event information, academic cooperation, and media discourse, positioning itself as a regional think-tank and networking forum. The business model is non-profit, targeting media professionals, academics, and government officials. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Matomo analytics, hosted on Gandi.net infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS and privacy-conscious analytics configuration, but lacks published security policies and cookie consent mechanisms. Overall, the domain registration aligns with the business history, supporting legitimacy. Strategic improvements include enhancing privacy compliance, publishing security and incident response policies, and implementing cookie consent.
- Medien kindersicher
medien-kindersicher.de
Media · Germany
63Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Medien kindersicher is a German-language portal dedicated to informing parents about technical protection solutions for their children's devices, services, and apps. It offers a specialized assistant tool that creates tailored protection solutions based on the child's age and used devices. The website is supported by multiple German regional media authorities, indicating a strong institutional backing and trust. The content is professionally curated, highly relevant to its target audience of parents and guardians, and presented with excellent design and navigation.
- Medienanstalt Hessen
mediathek-hessen.de
Media · Germany
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Mediathek Hessen is a regional media platform operated by the Medienanstalt Hessen in cooperation with GMM AG, providing a diverse range of video and audio content from non-commercial, open, and private broadcasters in the Hessen region. The platform targets media consumers, creators, and educational institutions within Hessen, emphasizing media education and democratic participation. The website is well-branded, professionally designed, and offers good content relevance with clear navigation and mobile optimization. Technically, it employs modern web technologies including Bootstrap, jQuery, Video.js, and integrates Matomo analytics and Usercentrics for GDPR-compliant consent management. Security posture is moderate with HTTPS usage and consent mechanisms but lacks explicit security headers and published security policies. Overall, the site is trustworthy, safe, and compliant with privacy regulations, though it could improve transparency by publishing terms of service, security policies, and incident response contacts.
Rocket.Chatrocket.chat
Technology
71Medium
NIS2 37 · GDPR 73
NIS2 37 · GDPR 73
Rocket.Chat is a technology company specializing in secure, mission-critical communication solutions designed for government, defense, critical infrastructure, and enterprise sectors. Their platform centralizes real-time messaging, voice, video, AI, and app integrations to provide a unified communication experience with a strong emphasis on data sovereignty, compliance, and operational resilience. The company positions itself as a trusted provider for high-security environments, including classified networks and federal agencies. Technically, the website is built on a modern stack leveraging Webflow CMS, multiple analytics and marketing tools, and supports multilingual content through Weglot. The site is well-optimized for mobile and desktop, with professional design and clear navigation. Embedded third-party scripts and tracking pixels indicate extensive user behavior analysis and marketing efforts. From a security perspective, the platform enforces HTTPS and promotes a zero-trust security model, though the website lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. Privacy policies and terms of service are comprehensive and GDPR compliant. The WHOIS data is privacy protected, which aligns with the company's security focus. Overall, the website and business present a high level of trustworthiness and professionalism. The risk assessment is low, with no critical vulnerabilities detected in the website content. Strategic recommendations include enhancing security header implementation, publishing explicit security and incident response policies, and increasing transparency around certifications. These steps would further strengthen the company's security posture and trust with its audience.
- Staatskanzlei Rheinland-Pfalz
rlp-tag.de
Government · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Rheinland-Pfalz-Tag website serves as the official digital presence for the annual state festival in Rhineland-Palatinate, Germany. It provides comprehensive event information, news updates, partner and sponsor details, and service resources primarily targeting residents and visitors interested in the cultural event. The site is managed by the Staatskanzlei Rheinland-Pfalz, reflecting a government-backed initiative with a clear focus on public engagement and regional promotion. Technically, the website is built on TYPO3 CMS with Bootstrap framework, offering a responsive and accessible user experience. The infrastructure appears stable and moderately performant, hosted likely on regional government or partner infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no cookie consent mechanism is present, which could be improved for compliance. The site maintains a strong social media presence across major platforms, enhancing outreach and engagement. Overall, the website is trustworthy, professional, and well-aligned with its government event purpose.
- BBundeskonferenz der Kommunalen Jugendbildungsstätten (BKJ)
freiwilligendienste-kultur-bildung.de
Non-profit · Germany
50Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website freiwilligendienste-kultur-bildung.de serves as an informational and engagement platform for cultural and educational volunteer services in Germany, including FSJ Kultur, FSJ Schule, FSJ Politik, FJ Beteiligung, and BFD Kultur und Bildung. It targets individuals of all ages interested in volunteering within cultural and educational institutions. The platform is supported by the Bundeskonferenz der Kommunalen Jugendbildungsstätten (BKJ) and funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth (BMFSFJ), positioning it as a reputable non-profit entity in this sector. Technically, the site is built on TYPO3 CMS, hosted via Schlundtech, and employs modern web technologies including Google Fonts and Matomo analytics for user tracking. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be enhanced with additional security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Social media presence on Facebook, Twitter, and Instagram supports community engagement. Overall, the website demonstrates a strong alignment between its domain registration, hosting, and business purpose, reflecting a trustworthy and professional online presence for a non-profit cultural volunteer service. Strategic improvements in security policy transparency and accessibility could further enhance its digital maturity and user trust.
- GGoDaddy.com LLC
combus.org
Technology
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The domain combus.org is currently a parked domain page managed by GoDaddy.com LLC, a leading domain registrar and hosting provider. The page primarily serves as a placeholder with promotional content encouraging visitors to acquire the domain or explore GoDaddy's hosting and domain auction services. There is no active business or service operating on this domain, and no direct contact or company information is provided. The target audience is primarily domain buyers and website owners looking for domain acquisition or hosting solutions. Technically, the site uses modern JavaScript frameworks likely React, integrates third-party widgets such as Trustpilot for trust signals, and employs Google Adsense for advertising revenue. The hosting and domain management are handled by GoDaddy, ensuring a stable platform but with minimal custom content or CMS usage. Mobile optimization is adequate, but overall content and navigation are basic, reflecting the nature of a parked domain. From a security perspective, the domain benefits from registrar-level domain status locks but lacks advanced security headers or explicit security policies. DNSSEC is not enabled, which is a recommended improvement. Privacy and cookie policies link to GoDaddy's main privacy documentation, indicating basic compliance but no domain-specific policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the domain is low risk but also low value in terms of active business presence. Strategic recommendations include enabling DNSSEC, adding security headers, and providing clearer business or contact information if the domain is to be developed further. The site is safe for general audiences with no adult or explicit content detected.
- OOIE AG
oie-ag.de
Energy · Germany
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
OIE AG is a regional energy provider based in Germany, specializing in sustainable and renewable energy solutions including 100% green electricity, gas, and heat electricity tariffs. The company emphasizes regional engagement through initiatives like 'OIE Heimatliebe' and supports local projects in sports, culture, and climate protection. The website is professionally designed using Adobe Experience Manager and modern web technologies, with a focus on customer service and digital accessibility. Security posture is solid with HTTPS and consent management implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a trustworthy and credible regional energy business with moderate technical sophistication and good privacy compliance.
Bonet Systems s.r.o.bonet.systems
Technology · Slovakia
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Bonet Systems s.r.o. is a Slovak-based IT services company specializing in the design, management, and integration of IT systems. Their offerings include cloud infrastructure (IaaS, PaaS), managed services covering network, servers, and security, as well as consulting services focused on architecture, network design, and system integration. The company targets businesses seeking reliable and professional IT infrastructure solutions and has established a solid market presence with notable clients and partnerships with industry leaders such as Cisco, Palo Alto, and Fortinet. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular plugins such as Gravity Forms for contact and Akismet for spam protection. The site is mobile-optimized and includes multilingual support via WPML. Performance is moderate with good SEO and accessibility basics in place. Analytics are implemented through Google Analytics and Jetpack Stats, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and employs anti-spam measures in forms. However, it lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for small businesses, and does not raise immediate concerns. Overall, Bonet Systems presents a professional and trustworthy online presence with a solid business model and technical foundation. Enhancing privacy compliance and security transparency would further strengthen their security posture and user trust.
- PPublic Health My Produkty
hackvirus.sk
Healthcare · Malaysia
57Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Public Health My Produkty operates a website focused on public health initiatives, particularly addressing the COVID-19 pandemic's impact in Slovakia through virtual hackathons, volunteer mobilization, and technological tools. The platform collaborates with notable partners including Microsoft and the European Commission, positioning itself as a niche player in healthcare and community support. The website is built on WordPress with WooCommerce and uses common plugins and themes, reflecting a moderate level of digital maturity. While the site is accessible and well-structured with good content quality, it lacks some privacy compliance features such as cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and enabling DNSSEC. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
- GGransy s.r.o.
slovensko.help
Non-profit · Slovakia
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
slovensko.help is a Slovak community-driven initiative primarily composed of IT sector volunteers aiming to assist Slovakia in managing the COVID-19 pandemic. The website offers several projects including a chatbot for COVID-19 information, an improved official infoline, and downloadable posters to promote responsible behavior. The target audience is the general Slovak public seeking reliable pandemic-related information and support. The initiative operates as a non-profit with a small organizational size and has been active since at least 2016, as indicated by domain registration data. Technically, the website is built using the Jekyll static site generator and incorporates Google Analytics and Google Tag Manager for visitor tracking. Hosting appears to be provided by Websupport.sk, a Slovak hosting provider. The site is mobile optimized with good SEO practices and clear navigation. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and security headers such as Content Security Policy or HSTS, which are recommended to enhance security posture. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. No forms or input fields are present, reducing attack surface. WHOIS data is consistent with the website's Slovak focus and shows no privacy protection, enhancing transparency. Overall, slovensko.help is a trustworthy, well-intentioned community resource with good content quality and business credibility. Security and privacy compliance can be improved by adding policies, enabling DNSSEC, and implementing security headers. These improvements would enhance user trust and regulatory compliance.
Healthcare · Slovakia
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Národné centrum zdravotníckych informácií (NCZI) is the official Slovak government agency responsible for collecting, managing, and publishing healthcare data, statistics, and standards. The website serves healthcare professionals, government bodies, researchers, and the public by providing access to national health registries, statistical reports, and electronic healthcare applications. It holds a strong market position as the authoritative source of healthcare information in Slovakia. Technically, the site is built on Microsoft SharePoint with legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS usage but lacks modern security headers and up-to-date libraries. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but would benefit from technical and security modernization.
- Bot.Media
bot.media
Technology
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Bot.Media is a technology company specializing in AI-driven video avatar solutions and interactive video platforms. Their offerings include Real-Time Avatars, scena.ai for interactive AI video, and a service for creating professional AI video avatars without contracts or subscriptions. The company targets businesses and professionals seeking innovative communication and sales tools, with a client base including major brands such as Mercedes and Coca-Cola. The website is professionally designed, mobile-optimized, and uses modern technologies including GravCMS, Bootstrap, jQuery, Google Analytics, and Intercom for customer engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no public security policies or vulnerability disclosures are present. WHOIS data is privacy-protected, which is typical for tech companies, and no suspicious patterns were detected. Overall, the website is trustworthy and business credible, with room for improvement in transparency and security best practices.
Immanuel Albertinen Diakonie gGmbHamalie-tumormedizin.de
Healthcare · Germany
65Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website represents the Evangelisches Amalie Sieveking Krankenhaus's tumor medicine center, operated under Immanuel Albertinen Diakonie gGmbH. It provides specialized oncological care with a focus on interdisciplinary collaboration, patient support, and comprehensive cancer treatment services. The site targets patients and healthcare professionals in the Hamburg region, positioning itself as a reputable regional healthcare provider with strong partnerships and a clear service offering. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and demonstrates good mobile optimization and accessibility. The presence of a cookie consent banner and GDPR-compliant privacy policy indicates a mature approach to privacy compliance. Performance is moderate, with room for improvement in security headers and explicit incident response information. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies and vulnerability disclosure mechanisms suggests areas for enhancement. Overall, the site is professional, trustworthy, and compliant with relevant regulations, supporting its role as a healthcare information and service portal.
Immanuel Albertinen Diakonie gGmbHamalie-pouch-zentrum-hamburg.de
Healthcare · Germany
64Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
The Amalie Pouch Zentrum Hamburg website represents a specialized healthcare center focused on plastic reconstructive surgeries of the gastrointestinal tract, particularly pouch surgeries. It operates under the umbrella of Immanuel Albertinen Diakonie gGmbH, a reputable healthcare group in Germany. The website targets patients and medical professionals seeking expert surgical solutions as alternatives to artificial bowel outlets. The site showcases detailed service offerings, a professional medical team, and multiple certifications, reinforcing its market position as a trusted specialist center. Technically, the website is built on TYPO3 CMS, employing modern web standards with good mobile optimization and accessibility features. It includes comprehensive metadata, Open Graph tags, and a cookie consent mechanism compliant with GDPR. The site uses Matomo for privacy-conscious analytics, avoiding third-party tracking services. Performance is moderate, with room for optimization. From a security perspective, HTTPS is enforced, and no sensitive data is exposed. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided. The domain WHOIS data is limited but consistent with the business claims. No WAF or blocking mechanisms are present, allowing full content access. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy digital presence for the healthcare entity. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.
- Ssukses bersama
kantinslot.us
Other · Indonesia
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website kantinslot.us currently serves only a 404 Not Found error page, indicating that no active content or business presence is available at this domain. The WHOIS data shows the domain is registered to an entity named 'sukses bersama' based in Indonesia, but the domain creation date is suspiciously set in the future (June 2025), which raises concerns about the legitimacy and accuracy of the registration information. There is no visible business description, services, or contact information on the site, making it impossible to assess the company's market position or offerings. Technically, the site is hosted on LiteSpeed Web Server with DNS managed by Cloudflare, but no security headers or HTTPS details are available from the provided data. The absence of privacy, cookie, or terms of service policies further indicates a lack of compliance and professionalism. Overall, the site is non-functional and lacks any meaningful content or security posture.
QR.ioqr.link
Technology
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
QR.io operates the qr.link domain as a service offering dynamic QR code generation and tracking solutions primarily targeted at businesses and marketers. The website content clearly explains the service and provides direct links to the parent company QR.io, which is the main brand behind the offering. The business model is SaaS-based, focusing on QR code creation and analytics. The domain is relatively young, created in 2018, which aligns with the modern technology service it provides. The site is professionally designed with good content quality and consistent branding. Technically, the website uses modern front-end libraries such as FontAwesome and PrismJS, and is hosted behind Cloudflare DNS, indicating a reliable infrastructure. The site is mobile optimized and SEO friendly, although accessibility features are basic. Performance is moderate with no major issues detected. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, which are positive indicators. There is no evidence of exposed vulnerabilities or sensitive data leaks. Incident response contact is available via a support email. However, the absence of a formal security policy, vulnerability disclosure, and cookie consent mechanism are gaps in compliance and transparency. The site uses a tracking pixel from whos.amung.us but does not provide explicit cookie consent. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to enhance trust and compliance.
- Total Avengers s.r.o.
idsbk.sk
Transportation · Slovakia
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.idsbk.sk serves as the official portal for the Integrated Transport System in the Bratislava Region, Slovakia. It provides comprehensive public transportation information including schedules, ticketing options, news updates, and mobile application access. The site targets residents and visitors of the Bratislava region, positioning itself as a key regional transport information hub. The business behind the site is Total Avengers s.r.o., a Slovak company, which aligns with the domain registration and website content. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses the Componentator SPA framework alongside Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and content structure, although accessibility features are basic. The CMS appears to be TotalJS, consistent with the author metadata. Security-wise, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and a privacy or cookie policy, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. The absence of a security.txt file and vulnerability disclosure policy indicates room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and functional with a moderate to good security posture. However, it should enhance privacy compliance and security best practices to reduce risk and improve user trust.
Bombardier Recreational Products Inc.brp-world.com
Transportation · Germany
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website represents Bombardier Recreational Products Inc. (BRP), a large multinational company specializing in manufacturing and distributing recreational vehicles such as Ski-Doo and Lynx snowmobiles, Can-Am off-road and on-road vehicles, and Sea-Doo watercraft. The site targets consumers in Germany and Europe interested in powersports and recreational vehicles. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS, React components, and various JavaScript libraries for rich multimedia content and user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with consent management implemented via Axeptio. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and branding strongly align with a reputable global company. Overall, the site is professional, well-branded, and user-friendly, with moderate tracking and analytics integration.
Pierer Industrie AGgasgas.com
Transportation · Austria
75Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
GASGAS, operated by Pierer Industrie AG, is a well-established brand specializing in offroad motorcycles and e-bikes. The company targets enthusiasts seeking adrenaline and high-performance vehicles, positioning itself strongly in the transportation sector with a focus on quality and adventure. The website reflects a professional digital presence with clear branding and comprehensive product information. Technically, the site is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent tools to ensure compliance and user tracking. Security posture is moderate with room for improvement in security headers and vulnerability management. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data is a notable anomaly requiring monitoring.
- MSC Suzuki Slovensko
suzuki.sk
Transportation · Slovakia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
MSC Suzuki Slovensko operates as the exclusive importer and dealer of Suzuki automobiles and motorcycles in Slovakia. The website serves as a corporate portal providing information about Suzuki vehicles and related services targeted primarily at Slovak customers. The business holds a stable market position as the official Suzuki representative in the country, founded in 2014, with a medium-sized operational scale. The website content is professionally presented in Slovak language with consistent branding and clear navigation.
Vibrationvibration.sk
Technology · Slovakia
52Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Vibration is a Slovak software studio specializing in custom web and e-commerce solutions, with a proprietary cloud platform called Sellio. Established in 2010, the company serves a medium-sized client base with a focus on B2B and B2C e-commerce, web applications, and mobile apps. Their market position is supported by multiple client references and case studies, indicating a strong presence in the regional technology and e-commerce sectors. Technically, the website is built on WordPress with modern SEO and performance optimizations, including Google Tag Manager, Analytics, and CookieHub for privacy compliance. Security posture is solid with HTTPS, reCaptcha, and cookie consent, though lacking explicit security policies or incident response information. Overall, the site is professional, well-structured, and trustworthy, with room for improvement in privacy and security transparency.
- DDemetec Sprl
ostbelgienmedien.be
Media · Belgium
73Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ostbelgien Medien serves as the official media portal for the German-speaking Community of Belgium, providing comprehensive information and services related to media, culture, and public administration. The website is government-affiliated, operated under the registrar Demetec Sprl, and targets residents and stakeholders within the German-speaking region. It offers a variety of media-related services including media lending, film and television information, and public service announcements. The portal is well-positioned as a trusted source of regional media and governmental information.
Die Medienanstaltendie-medienanstalten.de
Media · Germany
55Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Die Medienanstalten is a German regulatory authority responsible for licensing and supervising private radio and television broadcasters, ensuring media diversity and freedom. The website is professionally designed using TYPO3 CMS and employs Matomo analytics with privacy-conscious settings. The organization maintains a strong market position as a central coordinator for media regulation in Germany, serving private broadcasters and the public. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security best practices, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, content-rich, and serves its regulatory mission effectively.
- Verbraucherzentrale Baden-Württemberg
verbraucherzentrale-bawue.de
Non-profit · Germany
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Verbraucherzentrale Baden-Württemberg is a well-established non-profit consumer protection organization serving the Baden-Württemberg region in Germany. It provides comprehensive consumer advice, information, and advocacy services across multiple sectors including energy, health, digital world, and contracts. The website is professionally designed using Drupal 10, featuring rich content, educational resources, and multiple user engagement channels such as newsletters and social media. The organization targets a broad audience including vulnerable groups such as seniors, refugees, and caregivers. Technically, the website employs modern web technologies and analytics tools like Matomo, ensuring good performance and accessibility. The site is mobile-optimized and SEO-friendly, with clear navigation and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit policies could be improved. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious content. The organization maintains a moderate level of privacy compliance with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is available primarily via phone and contact forms, with no direct email addresses published. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing cookie consent to improve privacy compliance and user trust.