Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
17,451–17,500 of 99,068
Tripnbikers : Motorcycle case and bagstripnbikers.ie
Retail
68Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Tripnbikers.ie is a newly established e-commerce retailer specializing in motorcycle luggage, cases, bags, and related accessories. The website offers a wide range of products including top cases, side luggage, soft luggage, rider backpacks, and navigation devices, targeting motorcycle enthusiasts and riders. The business model is retail-focused with an emphasis on discounted pricing and customer service features such as secure payment and easy returns. Technically, the website is built on a Magento-based platform (OpenMage variant) and integrates modern analytics and advertising tools such as Google Analytics, Google Tag Manager, Google Ads, and Actito for marketing automation. The site is hosted by Gandi and secured with HTTPS, but lacks advanced DNS security features like DNSSEC and some recommended HTTP security headers. Privacy compliance is basic with no explicit privacy or cookie policies found, although a consent mechanism is implemented. Contact information and security policies are not explicitly provided, which may impact user trust. Overall, the website is functional, well-structured, and professionally branded but would benefit from enhanced security headers, explicit privacy documentation, and clearer contact details to improve compliance and trust.
House of Rugby: the rugby specialisthouse-of-rugby.ie
Retail
68Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
House-of-rugby.ie is an e-commerce website specializing in rugby sportswear and equipment, offering a wide range of products including jerseys, shoes, protective gear, and accessories from top brands such as Nike, Adidas, and Gilbert. The site targets rugby players and fans, positioning itself as a niche specialist retailer with a focus on fast shipping and secure payment options. Technically, the website is built on the Magento OpenMage platform, leveraging modern tracking and advertising technologies including Google Analytics, Google Ads, and a consent management platform for GDPR compliance. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but lacking explicit privacy policy and terms of service pages. Overall, the website is functional and trustworthy for its business scope but would benefit from enhanced compliance and security practices.
Handball-Store: online handball specialisthandball-store.ie
E-commerce · Ireland
66Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Handball-Store.ie is a specialized e-commerce website focused on selling handball-related equipment, including shoes, balls, clothing, and protective gear. The site targets handball players and enthusiasts primarily in Ireland, offering a wide range of branded products with fast delivery and competitive pricing. The business appears to be newly established in 2023, consistent with the domain registration date. Technically, the website is built on Magento (OpenMage), uses modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito, and enforces HTTPS for secure communications. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with room for improvement in security headers and DNSSEC implementation. Overall, the site presents a professional and user-friendly shopping experience but should enhance its compliance and security transparency.
SPACEFOOT SASgallop-store.ie
Retail · France
68Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Gallop-Store is an e-commerce retailer specializing in equipment for horses, riders, pets, and farm animals. Operated by SPACEFOOT SAS, a French company founded recently in 2023, the website offers a wide range of products including horse gear, pet accessories, and farm supplies. The business targets equestrian enthusiasts, pet owners, breeders, and farm workers, positioning itself as a niche retailer with a strong focus on customer service and secure online transactions. The company maintains multiple related retail domains across Europe, indicating a broader retail group presence. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern marketing and analytics tools such as Google Analytics, Google Ads, and Actito marketing automation. The site implements GDPR compliance mechanisms including consent management and privacy policies. Performance and mobile optimization are good, though accessibility features are basic. Hosting is provided by Gandi, and the domain registration is consistent with the business information. From a security perspective, the site enforces HTTPS and uses invisible reCAPTCHA on forms, enhancing protection against automated abuse. However, DNSSEC is not enabled, and several recommended HTTP security headers are missing, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent mechanisms in place. Overall, Gallop-Store presents a professional, trustworthy, and well-maintained e-commerce platform with a solid business foundation. Strategic improvements in security headers and DNS security would further enhance its security posture and trustworthiness.
Foot-store : Store 100% Football | Shirts and bootsfoot-store.ie
E-commerce
70Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Foot-store.ie is an e-commerce website specializing in football-related products including boots, shirts, balls, and protective gear. The site targets football players and fans, offering a range of branded sportswear and equipment with a focus on fast delivery and competitive pricing. The business appears to be newly established in 2023, with a domain registered through Gandi and consistent branding throughout the site. The website uses Magento (OpenMage) as its CMS platform and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Google AdWords. A consent management platform is implemented, indicating some level of GDPR compliance awareness, although explicit privacy and cookie policies are not found in the provided content. Security posture is generally good with HTTPS enforced and reCAPTCHA used, but there is room for improvement in security headers and published security policies. Overall, the site presents a professional and trustworthy e-commerce platform for football enthusiasts.
SPACEFOOT SASespace-golf.ie
Retail · France
66Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Espace Golf is a specialized e-commerce retailer focused on golf equipment, clothing, and accessories, targeting golf enthusiasts primarily in Ireland and Europe. The company operates under the legal entity SPACEFOOT SAS, based in France, and was founded recently in 2023. The website offers a broad range of products from well-known golf brands and emphasizes secure payment and customer service based in France. The business model is retail e-commerce with a multi-country presence, indicating regional growth ambitions. Technically, the website is built on a Magento (OpenMage) platform with modern marketing and analytics integrations including Google Analytics, Google Ads, and a GDPR-compliant consent management platform. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Hosting is managed via Gandi, consistent with the domain registrar. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and implements clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled and HTTP security headers are not explicitly detected, representing areas for improvement. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional front for a new but legitimate business. The domain registration data aligns well with the business information, and no critical security or content safety issues were found. Strategic recommendations include enhancing DNS security, adding HTTP security headers, and publishing a formal security policy to further strengthen trust and compliance.
Direct-Volley : Number 1 website for online volleyballdirect-volley.ie
Retail · Ireland
54Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Direct-Volley.ie is a niche e-commerce platform specializing in volleyball equipment, apparel, and accessories. The website offers a comprehensive catalog of products including shoes, volleyballs, protective gear, and club equipment, targeting volleyball players and fans primarily in Ireland. The business appears to be newly established in late 2023, with a clear focus on fast delivery and competitive pricing. The site demonstrates a consistent brand presence and a well-structured navigation system that supports user experience and product discovery. Technically, the website is built on the Magento (OpenMage) platform, leveraging modern web technologies and integrating Google Analytics, Google AdWords, and marketing automation tools such as Actito. The site is secured with HTTPS and employs reCAPTCHA to mitigate bot activity. However, the absence of explicit privacy and cookie policy pages, as well as contact information, indicates areas for compliance and trust improvement. The domain registration is transparent and consistent with the business purpose, though DNSSEC is not enabled, representing a minor security gap. Overall, the website is functional and professionally presented but would benefit from enhanced privacy disclosures and contact transparency to improve user trust and regulatory compliance.
Direct-Running: Shoes, Textiles and Running Equipmentdirect-running.ie
Retail · Ireland
68Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Direct-Running.ie is a specialized e-commerce retailer focusing on running shoes, sportswear, and related equipment. The website offers a broad selection of well-known brands such as Adidas, Asics, Nike, and others, targeting runners and sports enthusiasts primarily in Ireland. The business appears to be newly established in late 2023, with a clear focus on online sales and fast delivery services. The site is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages Magento (OpenMage), Google Analytics, Google Ads, and reCAPTCHA, indicating a modern and mature digital infrastructure. Security posture is generally good with HTTPS enforced and some security best practices in place, although improvements are recommended in DNSSEC deployment and security headers. Privacy compliance is basic, with a consent mechanism present but no explicit privacy or cookie policies detected in the scanned content. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security documentation.
Basket-Center: Basketball equipment and accessoriesbasket-center.ie
Retail · Ireland
68Medium
NIS2 17 · GDPR 45
NIS2 17 · GDPR 45
Basket-Center.ie is an e-commerce retail website specializing in basketball equipment, apparel, and accessories. It serves basketball players and fans by offering official distributor products from major brands such as Mitchell & Ness, Spalding, Adidas, Nike, and Wilson. The website features a comprehensive catalog including clothing, shoes, NBA merchandise, basketballs, and gear. The business is relatively new, with the domain registered in December 2023, and targets the Irish market. The platform is built on a Magento-based CMS, leveraging modern web technologies and Google services for analytics and advertising. Security measures include HTTPS enforcement and Google reCAPTCHA integration, but the site lacks visible privacy and terms of service policies, which impacts compliance and user trust. Overall, the site presents a professional and functional e-commerce experience with room for improvement in transparency and security hardening.
Vetstoriavetstoria.com
Healthcare
65Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Vetstoria is a specialized SaaS provider offering online booking, secure payments, and customizable websites tailored for veterinary practices. The company positions itself as a solution to reduce administrative burdens and increase revenue for veterinary professionals. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Redux frameworks. Social media presence across major platforms supports brand visibility. However, the absence of clear privacy and cookie policies on the site and incomplete WHOIS domain registration data raise concerns about compliance and transparency. Security posture is generally good with HTTPS enabled, but lacks visible security headers and formal incident response contacts. Overall, Vetstoria presents a credible business front with room for improvement in compliance and security transparency.
Kuoni Reisenkuoni.at
Hospitality · Austria
68Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Kuoni Reisen is a prominent Austrian travel agency offering a wide range of travel services including package holidays, flights, hotels, cruises, and car rentals. The website targets travelers primarily in Austria, providing comprehensive travel options with a focus on luxury and affordability. Kuoni maintains a strong market position supported by customer trust, evidenced by awards and positive reviews. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Vue.js, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, consent management via Usercentrics, and error monitoring with Sentry, though some security headers could be improved. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and a professional online presence.
Vélo-Storevelo-store.shop
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Vélo-Store is a specialized e-commerce retailer focused on bicycle parts, gear, and accessories, targeting cycling enthusiasts primarily in France, the US, the UK, and other European countries. The company operates multiple country-specific domains and offers a wide range of products with fast delivery and secure payment options. The website demonstrates a professional and consistent brand presence with clear customer service contact points based in France. Technically, the site is built on modern frameworks such as SvelteKit, hosted behind Cloudflare, and integrates essential marketing and analytics tools like Google Analytics and Trustpilot for customer reviews. The site is mobile-optimized and performs well with good SEO and accessibility features. Security-wise, the website enforces HTTPS, uses security headers, and implements GDPR-compliant cookie consent mechanisms, although DNSSEC is not enabled and no explicit security policy or vulnerability disclosure page is found. Overall, the domain registration details align well with the business claims, indicating a legitimate and trustworthy operation.
Trek-Experttrek-expert.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Trek-Expert is a specialized e-commerce retailer focused on mountain and outdoor equipment, including clothing, footwear, and sports gear. Founded in 2020 and based in France, the company targets outdoor enthusiasts and sports equipment buyers, offering products at discounted prices with secure payment options. The website is professionally designed with good navigation, mobile optimization, and clear branding. It integrates customer trust signals such as Trustpilot reviews and secure payment logos. Technically, the site uses modern frameworks like SvelteKit, is hosted behind Cloudflare, and employs Google Analytics and Google Ads for marketing and tracking. Security posture is strong with HTTPS, security headers, and a cookie consent mechanism, although DNSSEC is not enabled. No critical vulnerabilities or suspicious content were detected, and the domain registration details align well with the business profile, indicating legitimacy and trustworthiness.
Training-Fittraining-fit.com
E-commerce · France
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Training-Fit is a France-based e-commerce retailer specializing in fitness and bodybuilding equipment, offering a wide range of products from major brands. The company targets fitness enthusiasts and athletes globally, providing fast delivery and secure payment options. The website demonstrates a mature digital presence with modern technology and good user experience. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent mechanisms. No critical vulnerabilities or suspicious indicators were found. Overall, the business appears legitimate and professionally managed.
Sport is goodsportisgood.com
Retail · France
64Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Sport is good is a professional e-commerce retailer specializing in sportswear, lifestyle clothing, and sports equipment. Founded in 2018 and based in France, the company targets consumers interested in major sports and fashion brands, offering fast delivery and secure payment options. The website is well-branded and consistent across multiple country-specific domains, indicating a medium-sized business with a strong online presence in Europe and the US. Technically, the site uses modern frameworks such as SvelteKit, integrates with major analytics and marketing tools, and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website is trustworthy, professional, and secure, with room for enhancements in security policy transparency and DNS security.
Pet and Gardenpet-and-garden.shop
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Pet and Garden is a newly established e-commerce retailer specializing in pet supplies, garden center products, and agricultural equipment. The company targets pet owners, gardeners, and agricultural customers primarily in France and other European countries, as evidenced by their multiple localized domains. Their business model focuses on online retail with a strong emphasis on customer service, secure payment options, and convenient return policies. The website is professionally designed with clear navigation and a consistent brand presence, supporting a positive user experience. Technically, the website leverages modern web technologies including the SvelteKit framework, Cloudflare DNS and CDN services, and integrates Google Analytics and Google Ads for marketing and analytics. The site is mobile-optimized and performs well, with good SEO and accessibility features. Cookie consent and GDPR compliance mechanisms are implemented effectively, demonstrating attention to privacy regulations. From a security perspective, the website enforces HTTPS and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and some recommended security headers are missing. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is a minor gap. Overall, the security posture is solid but could be improved with additional headers and transparency. The domain registration data aligns well with the website's business claims, showing consistency in country and registrant information. The domain is relatively new, matching the startup nature of the business. No suspicious patterns were found. The overall risk assessment is low, with recommendations focusing on enhancing DNS security, security headers, and incident response transparency to further strengthen trust and compliance.
Pecheur-Storepecheur-store.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Pecheur-Store is a specialized e-commerce retailer focused on fishing tackle including rods, reels, baits, and accessories. Founded in 2022 and based in France, it serves a niche market of fishing enthusiasts with a multi-country presence. The website demonstrates a modern technical infrastructure leveraging SvelteKit, Cloudflare DNS/CDN, and integrates Google Analytics, Google Ads, and Trustpilot for analytics and customer trust. GDPR compliance is actively managed with a consent management platform and clear privacy policies. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Overall, the site is professional, secure, and trustworthy with good user experience and mobile optimization.
Nauti-wavenauti-wave.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Nauti-wave operates a professional e-commerce platform specializing in water sports equipment including wetsuits, swimsuits, and related accessories. The company targets water sports enthusiasts and athletes primarily in France and other international markets via country-specific domains. Their business model focuses on online retail with fast delivery and secure payment options, positioning them as a niche retailer in the water sports segment. Technically, the website leverages modern technologies such as SvelteKit, Cloudflare hosting, and integrates Google Analytics and Google Ads for marketing and analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.
La sellerie de Maéselleriemae.shop
E-commerce · France
69Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
La Sellerie de Maé is a specialized e-commerce retailer focused on equestrian equipment and accessories for riders and horses. The company operates primarily from France and targets equestrian enthusiasts internationally through multiple country-specific domains. Their product offerings include riding helmets, boots, saddle pads, grooming products, and other horse tack essentials. The website demonstrates a professional and consistent brand presence with clear navigation and a focus on customer service, including secure payment options and express delivery.
TripNBikerstripnbikers.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
TripNBikers is a specialized e-commerce retailer focused on motorcycle luggage and accessories, offering a wide range of products including top cases, side cases, soft luggage, and rider gear. The company targets motorcycle enthusiasts seeking quality luggage solutions with competitive pricing and secure payment options. The website demonstrates a solid market position within its niche, supported by partnerships with recognized brands and stores. Technically, the site is built on a modern SvelteKit framework, leveraging Cloudflare for DNS and CDN services, and integrates Google Analytics and Ads for marketing and tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, uses clientTransferProhibited domain status, and implements GDPR-compliant consent mechanisms. However, DNSSEC is not enabled and no explicit security.txt or incident response policies are published, representing areas for improvement. Overall, the site is trustworthy and professionally managed, with minor recommendations to enhance security posture and transparency.
Handball-Store: online handball specialisthandball-store.com
Retail
69Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Handball-Store.com is an established e-commerce retailer specializing in handball equipment, including shoes, balls, clothing, and protective gear. Founded in 2009, it operates multiple localized domains targeting various European markets, indicating a medium-sized business with a focused niche in sports retail. The website demonstrates a good level of technical maturity, leveraging modern tracking and marketing technologies such as Google Analytics, Facebook Pixel, and AWIN affiliate tracking. The platform appears to be built on Magento or a variant thereof, hosted under the registrar Gandi SAS, with SSL enabled and a secure domain status. However, explicit privacy and cookie policies are not found in the provided content, though a consent management framework is implemented, suggesting some GDPR compliance awareness. Security posture is solid but could be improved by enabling DNSSEC and publishing security policies and incident response contacts. Overall, the site is professional, well-branded, and safe for general audiences.
Gallop-Storegallop-store.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Gallop-Store is a specialized e-commerce retailer founded in 2022, focusing on equestrian equipment, rider apparel, and pet supplies including dogs, cats, rodents, and birds. The company operates multiple country-specific websites, targeting a broad audience of horse riders, breeders, and pet owners primarily in France and other European countries. Their business model centers on online retail with express delivery and clearance sales, supported by trusted brands and secure payment options. Technically, the website is built on a modern JavaScript framework (SvelteKit) and leverages Cloudflare for DNS and CDN services, ensuring fast performance and good mobile optimization. The site integrates Google Analytics, Google Ads, and AWIN affiliate tracking, with a compliant cookie consent mechanism in place. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Overall, the website presents a professional, trustworthy, and user-friendly experience with clear contact information and privacy policies. No critical vulnerabilities or suspicious content were detected.
Foot-Storefoot-store.com
Retail · France
69Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Foot-Store is a specialized e-commerce retailer focused on football-related products including boots, jerseys, balls, and protective gear. Established in 2014, it serves a broad international audience with a strong presence in France and offers fast delivery and secure payment options. The website demonstrates a professional and consistent brand image with a good user experience and clear navigation. Technically, the site leverages modern frameworks such as SvelteKit, integrates multiple marketing and analytics tools, and is hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR indicators. Overall, the site is trustworthy and well-positioned in the niche football retail market.
Espace Golfespace-golf.com
Retail · France
68Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Espace Golf is a specialized e-commerce retailer focused on golf equipment, apparel, and accessories, targeting primarily golf enthusiasts in France, the US, the UK, and other European countries. The company operates multiple localized domains and offers a broad range of products from well-known brands, emphasizing fast delivery and secure payment options. The website demonstrates a professional and consistent brand presence with clear customer service channels and trust signals such as customer reviews and secure payment logos. Technically, the site is built on a modern stack using SvelteKit, Cloudflare DNS/CDN, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile optimized and performs well with good SEO practices. Security posture is strong with HTTPS enforced, domain status protections, and GDPR-compliant cookie consent mechanisms, though minor improvements such as enabling DNSSEC and adding explicit security headers could enhance security further. Overall, the website is safe, trustworthy, and compliant with privacy regulations, making it a reliable platform for online golf retail.
museom service gmbhmuseom.at
Other · Austria
53Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Museom service gmbh is a specialized Austrian company founded in 2012, offering consulting, exhibition construction, and art handling services primarily for museums and art institutions. The company leverages decades of industry experience and maintains strong references with notable museums such as the Wien Museum and Jüdisches Museum Wien. Their website reflects a professional and focused business presence with clear contact information and project showcases. Technically, the website is built on standard web technologies with a custom CMS, is mobile-optimized, and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS enforced, though improvements in security headers and published policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Weinbau Mayerweinbau-mayer.at
Hospitality · Austria
57Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Weinbau Mayer is a small, family-owned winery and Heuriger located in Perchtoldsdorf, Austria, specializing in producing high-quality white and red wines, including rare varieties. The business combines traditional wine production with hospitality services and an online wine shop, targeting wine enthusiasts and local visitors. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content including downloadable price lists and menus. Technically, the site uses modern web technologies and privacy-conscious analytics (Matomo), with HTTPS enforced and secure form handling. However, it lacks explicit security policies and incident response information. Overall, the security posture is good but could be improved by adding security headers and vulnerability disclosure mechanisms. The site complies with GDPR, featuring privacy and cookie policies with consent mechanisms. No suspicious or malicious elements were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. The site is suitable for mature audiences due to its alcohol-related content but contains no explicit adult material.
igm Robotersysteme AGigm-group.com
Manufacturing · Austria
58Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
igm Robotersysteme AG is an Austrian manufacturer specializing in industrial robotic welding systems, primarily for arc welding applications. The company operates internationally, offering products, customer service, training, and demonstration centers. Their market position is supported by membership in industry groups and a parent company affiliation with Global Welding Technologies Group. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for industrial clients. Technically, the website uses modern JavaScript libraries and Google Analytics for tracking. It is served over HTTPS with good performance and basic accessibility features. However, some security best practices such as security headers and cookie consent mechanisms are missing. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency but does not directly contradict the legitimacy of the business based on website content and social presence. Security posture is generally good with encrypted connections and secure form usage, but improvements are recommended in security headers and incident response disclosures. Privacy compliance is partially met with a privacy policy page but lacks cookie consent banners. Overall, the website presents a trustworthy and professional image with moderate risk due to missing WHOIS data and some compliance gaps. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing vulnerability disclosure policies, and improving accessibility to strengthen trust and compliance.
Kunsttrans Spedition GesmbHkunsttrans.com
Transportation · Austria
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Kunsttrans Spedition GesmbH is a specialized Austrian company focused on the transportation, storage, and handling of art. Their services cater to art collectors, museums, galleries, and institutions requiring expert logistics solutions for valuable and delicate artworks. The company emphasizes secure, tailored transport and sustainable practices, positioning itself as a trusted niche provider in the art logistics sector. The website is professionally designed, bilingual (German and English), and provides comprehensive service descriptions and contact information, supporting a medium-sized business profile. Technically, the website employs modern web technologies including HTTPS, Matomo analytics for privacy-conscious tracking, and the June Framework for form handling. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers and cookie consent mechanisms are recommended. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional online presence. From a security perspective, the site benefits from HTTPS and secure form handling but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy page but lacks a cookie consent mechanism. Overall, the site demonstrates a solid security posture with room for enhancement in compliance and transparency. The overall risk assessment is moderate due to the missing WHOIS data and minor compliance gaps. Strategic recommendations include verifying domain registration, implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.
Transportation
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Fram2.com presents a specialized space exploration mission focused on the first human spaceflight to Earth’s polar regions. The website details the mission objectives, crew biographies, and scientific research planned for the flight. The project positions itself uniquely in the aerospace sector with a pioneering trajectory and international crew. Technically, the site uses modern JavaScript libraries such as three.js for interactive content and is hosted with Cloudflare DNS services, ensuring reliable performance and moderate mobile optimization. Security posture is adequate with HTTPS and domain registrar protections, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Österreichische Bergbahnen GmbHraxalpe.com
Transportation · Austria
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Österreichische Bergbahnen GmbH operates the Rax-Seilbahn, a cable car service providing access to hiking trails, snowshoe hiking, climbing tours, and mountain huts on the Raxalpe mountain in Austria. The company targets tourists, families, and outdoor enthusiasts, offering transportation, hospitality, and recreational services. The website is professionally designed with rich multimedia content and clear navigation, supporting a positive user experience and strong brand presence. Technically, the website employs modern analytics tools including Google Analytics, Matomo, and Facebook Pixel, alongside Google Tag Manager for marketing. The site is mobile optimized and accessible, with good SEO practices. However, some privacy compliance gaps exist, notably the absence of a cookie consent mechanism and terms of service page. Security posture is solid with HTTPS enforced, but security headers are missing, and no explicit incident response or vulnerability disclosure policies are published. The WHOIS data is unavailable, indicating possible recent registration or privacy protection, which slightly reduces trustworthiness. Nonetheless, the website's professional content, valid contact information, and certifications support its legitimacy. Overall, the site scores well in content quality, business credibility, and technical implementation, with room for improvement in privacy compliance and security best practices.
Forum Werteorientierung in der Weiterbildung e. V.forumwerteorientierung.de
Education · Germany
51Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Forum Werteorientierung in der Weiterbildung e. V. is a German non-profit organization dedicated to promoting ethical and value-oriented practices in the continuing education sector. The organization provides a quality seal and a professional code of conduct to its member organizations, aiming to enhance transparency and integrity in the education market. The website serves as an informational platform showcasing members, partners, sponsors, and providing updates on seminars and news relevant to the sector. Technically, the website is built on WordPress with common plugins and libraries such as jQuery and Owl Carousel, hosted on rzone.de servers. It demonstrates moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, though it could improve in security policy transparency and technical security hardening.
- EEvangelische Mission Biel
emb-online.ch
Non-profit · Switzerland
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Evangelische Mission Biel is a small non-profit religious organization based in Biel, Switzerland, focused on providing community and spiritual services including worship, youth and adult programs, and special events. The website is professionally designed with excellent content quality and clear navigation, targeting local community members and churchgoers. Technically, the site runs on WordPress with modern plugins and integrations such as Google Tag Manager and reCAPTCHA, ensuring a moderate to good performance and mobile optimization. Security posture is adequate with HTTPS and anti-bot measures but lacks explicit security headers and published incident response policies. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and legitimate, with consistent WHOIS data and clear business information.
Christliches Zentrum Zollhauszollhaus.ch
Non-profit · Switzerland
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Christliches Zentrum Zollhaus is a small non-profit Christian church based in Luzern, Switzerland, serving the Central Swiss community with physical locations and online livestream services. The website is professionally designed using Squarespace, featuring clear navigation, good mobile optimization, and a consistent brand presence. The organization maintains active social media channels and provides transparent contact information, enhancing trust and community engagement. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA, hosted on Squarespace with HTTPS and HSTS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy policy and terms of service pages, which are important for full compliance and user trust. Security posture is strong with no evident vulnerabilities or exposed sensitive data, but incident response and vulnerability disclosure information are absent. Overall, the website is trustworthy and well-maintained, suitable for its non-profit religious purpose.
Eglise des Uttinseglise-uttins-yverdon.ch
Non-profit · Switzerland
51Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Eglise Evangélique des Uttins is a small, community-focused evangelical church based in Yverdon-les-Bains, Switzerland. The organization emphasizes proximity, diversity, and conviviality, offering public worship services, youth activities, and community events. The website reflects a well-maintained digital presence using WordPress with the Avada theme and several plugins to manage events, membership, and contact forms. Social media integration and structured data for events enhance community engagement and search visibility. Technically, the site uses modern web technologies and APIs, including Google Maps and reCAPTCHA for spam protection. However, the absence of explicit privacy and cookie policies indicates a compliance gap with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding explicit security headers and publishing incident response information. Overall, the website is professional, trustworthy, and serves its target audience effectively, though it should address privacy compliance to reduce risk.
Retail · Italy
65Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Risparmista.it is a coupon and discount code aggregation website operated under the reputable Italian media cooperative Agenzia ANSA. The platform targets Italian online shoppers by providing daily updated discount codes and promotional offers across a wide range of online stores. The business model is primarily affiliate marketing, leveraging partnerships with various e-commerce brands to deliver value to consumers. The website is well-branded, consistent with its parent company, and offers comprehensive content about discount codes, their usage, and related shopping events in Italy. Technically, the site employs modern JavaScript libraries, JSON-LD structured data for SEO, and integrates Google Analytics and Tag Manager for tracking, alongside a cookie consent solution from Iubenda. Hosting is via Amazon CloudFront CDN, ensuring reliable content delivery. Security posture is solid with HTTPS enforced and a Content-Security-Policy header, though additional headers could enhance protection. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. No critical vulnerabilities or suspicious elements were detected. Overall, Risparmista.it presents a professional, trustworthy, and user-friendly platform for Italian consumers seeking online discounts.
- samra Co.,Ltd
smgroup.co.kr
Manufacturing · South Korea
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SM그룹 is a large South Korean conglomerate operating across multiple sectors including manufacturing, construction, shipping, media, and leisure. The company presents itself as a global leader with a diversified portfolio of subsidiaries, targeting general consumers, business partners, and potential employees. The website reflects a professional corporate identity with consistent branding and comprehensive information about its subsidiaries and business areas. Technically, the website uses modern JavaScript libraries and tracking tools such as Google Analytics and Tag Manager, hosted by Megazone, a Korean hosting provider. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security-wise, the domain registration is transparent and consistent with the business, but the website lacks DNSSEC and security headers, and no cookie consent mechanism is present, which may affect compliance. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance to align with best practices.
- Showtime
sho.com
Media · United States
56Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Paramount+ with Showtime is a major subscription streaming service combining content from Paramount+ and Showtime, offering popular original series and live TV. The website is professionally designed, mobile-optimized, and targets a general audience interested in entertainment media. The platform is positioned as a leading streaming service under the parent company Paramount Global. Technically, the site uses modern JavaScript frameworks such as React, integrates advanced monitoring tools like New Relic, and employs consent management solutions from Ketch and OneTrust, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, although WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.
AmericaTVListings.comamericatvlistings.com
Media · United States
56Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
AmericaTVListings.com is a niche media website providing comprehensive TV schedule listings for the United States and other countries. The site offers multi-language support and covers a wide range of TV categories including American, local, Spanish, movies, sports, music, documentaries, news, and children's programming. The business model appears to be advertising-supported, leveraging Google Adsense and other marketing tools. The domain is relatively new, registered in 2022, and uses GoDaddy as registrar with Cloudflare DNS services. The website is built on modern frontend technologies including Bootstrap 5 and integrates Google Analytics and Facebook SDK for tracking and analytics. Security posture is moderate with HTTPS enabled and domain locks in place, but lacks DNSSEC and some recommended security headers. Privacy compliance is minimal with no explicit privacy or cookie policies found, though a cookie consent mechanism is present. Contact and incident response information are not clearly provided, which may impact user trust and compliance. Overall, the site is functional, well-branded, and serves its target audience effectively but could improve in security and privacy transparency.
ELSTERelster.de
Government · Germany
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ELSTER is the official German government online tax portal providing digital tax filing and related services to individuals, employers, and other user groups. The website offers a comprehensive suite of services including form submissions, digital document management, and user account functionalities. It targets a broad audience including private persons, businesses, and tax professionals. The platform is positioned as a trusted government service with a strong emphasis on security and user guidance. Technically, the site uses modern JavaScript libraries for cryptography and file handling, is hosted on reputable infrastructure providers including Akamai and Deutsche Telekom, and implements HTTPS with session management and CSRF protections. However, explicit privacy and cookie policies are not visible on the start page, and no public security or incident response policies are published. Overall, the site demonstrates a high level of professionalism, security awareness, and user-centric design, suitable for its critical government function.
Haufe Group SEhaufegroup.com
Technology · Germany
62Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Haufe Group SE is a leading B2B provider specializing in integrated business and workplace solutions, including content, software, and training services. The company targets enterprises and professionals primarily in Germany, positioning itself as a key player in the technology sector. The website reflects a mature, professional brand with clear leadership and subsidiary information, supporting its market position. Technically, the site is built on modern web technologies such as Webflow CMS, jQuery, and Swiper.js, with strong mobile optimization and good SEO practices. Security posture is solid with HTTPS, consent management, and encrypted communication options, though some security headers and incident response details could be improved. Overall, the domain appears legitimate despite missing WHOIS registration details, and the site demonstrates strong privacy compliance and business credibility.
Direct Runningdirect-running.com
Retail · France
50Partial
DNS & email only
DNS & email only
Direct Running is a specialized e-commerce retailer focused on running shoes, sportswear, and related equipment. The company offers a wide range of premium brands such as Adidas, Saucony, Puma, Mizuno, and Garmin, targeting runners and sports enthusiasts primarily in France and other European countries. The website demonstrates a solid market position within the niche of sports retail, emphasizing fast delivery and secure payment options. Technically, the site is built on modern frameworks like SvelteKit, hosted likely behind Cloudflare, and integrates multiple marketing and analytics tools including Google Tag Manager and Facebook Pixel. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Golf and cogolf-and-co.com
Retail · France
57Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Golf and co is a specialized e-commerce retailer focused on golf equipment and accessories, offering a wide range of products including clubs, balls, trolleys, shoes, clothing, gloves, and watches. The company targets golf enthusiasts primarily in France and other international markets with localized websites. Their business model centers on online retail with secure payment options and customer service support based in France. The website demonstrates a professional design with consistent branding and clear navigation, supporting a positive user experience. Technically, the site uses modern frameworks such as SvelteKit, is hosted behind Cloudflare, and integrates Google Analytics and a consent management platform to ensure privacy compliance. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, but lacks explicit published security policies or incident response contacts.
Basket-Centerbasket-center.com
Retail · France
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Basket-Center is a specialized e-commerce retailer focused on basketball and American sports equipment and apparel. Established in 2015, it serves a broad audience of basketball players, fans, and sports enthusiasts primarily in the US and Europe. The company offers official brand merchandise from well-known manufacturers such as Adidas, Nike, Wilson, and Mitchell & Ness, positioning itself as a trusted distributor with fast delivery and secure payment options. The website reflects a professional and consistent brand image with clear navigation and comprehensive product categorization. Technically, the website is built using modern technologies including SvelteKit, Cloudflare CDN, and integrates Google Analytics and Google Ads for marketing and tracking. It is well optimized for mobile devices and demonstrates good performance and accessibility standards. The presence of a consent management platform indicates attention to privacy compliance, particularly GDPR. From a security perspective, the site enforces HTTPS, employs standard security headers, and maintains a secure domain registration status. No critical vulnerabilities or exposed sensitive data were detected. However, enabling DNSSEC and publishing a formal security policy or vulnerability disclosure could further enhance trust and security posture. Overall, Basket-Center presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic improvements in DNS security and formal security disclosures are recommended to maintain and improve trustworthiness.
Vélo-Storevelo-store.co.uk
Retail · United Kingdom
68Partial
DNS & email only
DNS & email only
Vélo-Store is a specialized online retailer focused on bicycle parts, cycling gear, and related equipment, targeting cyclists primarily in the UK and Europe. The business operates multiple country-specific domains, indicating a strategic international presence. Their e-commerce platform offers a broad product catalog with competitive pricing and emphasizes fast delivery and secure payment options. The website demonstrates a professional and consistent brand image with clear navigation and relevant content for cycling enthusiasts. Technically, the site leverages modern web technologies including SvelteKit, Google Analytics, Google Tag Manager, and a consent management platform to ensure GDPR compliance. Hosting appears to be via Cloudflare, contributing to fast performance and robust security. The website is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. The use of multiple tracking and advertising tools is balanced with user consent mechanisms, reflecting a mature digital marketing approach. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. However, there is no dedicated security policy or incident response contact information published, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could benefit from formalized policies and vulnerability disclosure mechanisms. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include publishing a security policy, adding incident response contacts, implementing security.txt, and enhancing accessibility. These steps would further strengthen compliance and user trust while maintaining a strong market position.
Trek-Experttrek-expert.co.uk
Retail · United Kingdom
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Trek-Expert is a UK-based e-commerce retailer specializing in outdoor and sports equipment, offering products such as hiking shoes, clothing, and gear with discounts up to 70%. The company operates multiple country-specific websites and targets outdoor enthusiasts primarily in the UK and Europe. The website demonstrates a modern technical infrastructure using SvelteKit, integrates Google Analytics and advertising platforms, and employs GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and secure payment options, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-optimized for performance and mobile use.
Espace Golfespace-golf.co.uk
Retail · United Kingdom
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Espace Golf is a specialized e-commerce retailer focused on golf equipment, apparel, and accessories, targeting golf enthusiasts primarily in the UK and Europe. The company operates multiple country-specific domains and offers a broad range of products from well-known brands, supported by customer service based in France. Their business model centers on online retail with secure payment options and customer-friendly policies such as installment payments and easy returns. Technically, the website is built on a modern JavaScript framework (SvelteKit) and leverages Google Analytics, Google Ads, and a consent management platform to ensure GDPR compliance. Hosting appears to be via Cloudflare, contributing to good performance and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no dedicated security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for its target audience.
Boulevard du Golfgolf-and-co.co.uk
Retail · United Kingdom
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Boulevard du Golf operates the Golf and co website, a specialized e-commerce platform focused on selling golf equipment and accessories from leading brands. The company targets golf enthusiasts primarily in the UK and Europe, offering a broad product range including clubs, balls, trolleys, shoes, and apparel. The business model is retail-centric with an emphasis on competitive pricing and customer service based in France. The website demonstrates a professional design and consistent branding, supporting a positive market position within the niche golf retail sector. Technically, the website is built using modern web technologies including SvelteKit, with integration of Google Analytics and a consent management platform to ensure GDPR compliance. Hosting appears to be supported by Cloudflare, contributing to fast performance and good mobile optimization. The site includes structured navigation and SEO-friendly metadata, enhancing user experience and search visibility. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses a consent mechanism for cookies and tracking. Payment methods are secured and clearly displayed, though no explicit security policy or incident response information is published. No vulnerabilities or suspicious content were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website presents a low-risk profile with strong compliance and security fundamentals. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and transparency.
Basket-Centerbasket-center.co.uk
Retail · United Kingdom
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Basket-Center is a specialized e-commerce retailer focused on basketball and American sports equipment and apparel, serving primarily the UK and European markets. The company offers official merchandise from well-known brands such as Mitchell & Ness, Spalding, Adidas, Wilson, and others, positioning itself as a niche leader in basketball-related retail. The website features a professional design with clear navigation, multiple product categories, and promotional offers, targeting basketball players, fans, and sports enthusiasts. The business was founded in 2022 and operates with a medium-sized footprint in the retail sector. Technically, the website is built using modern web technologies including SvelteKit, and integrates Google Analytics, Google Tag Manager, and Google Ads for marketing and analytics purposes. The site is hosted likely behind Cloudflare, ensuring good performance and security. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs multiple security headers. GDPR compliance is evident through a cookie consent mechanism and a comprehensive privacy policy. However, there is no explicit security policy or incident response information published, which could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Basket-Center presents a trustworthy and professional online presence with a solid security posture and compliance framework. Strategic recommendations include publishing a dedicated security policy, establishing incident response contacts, and enhancing accessibility features to further improve the site’s maturity and trustworthiness.
- Zzweier-prellball.de - Kategorien
zweier-prellball.de
Other
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website zweier-prellball.de is a domain parking page offering the domain for sale. It provides categorized links to various shopping and informational categories, likely monetized through affiliate or lead generation mechanisms. The site targets a general audience interested in purchasing the domain or browsing categorized content. The business model is primarily domain resale with minimal direct services or products. The market position is that of a domain marketplace listing without a clear operational business entity. Technically, the site uses standard HTML5, CSS3, and JavaScript with a custom captcha system to prevent automated bot access. The site is moderately optimized for mobile devices and has a clean, modern design. However, there is no evidence of a CMS or advanced frameworks. Performance is moderate with basic SEO and accessibility features. No hosting provider or SSL certificate information is available from the data provided. From a security perspective, the site employs a simple captcha and honeypot links to deter bots, but lacks visible HTTPS enforcement and security headers. There is no exposed sensitive data or vulnerable libraries detected, but the absence of HTTPS and security headers lowers the security posture. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. No contact or incident response information is provided, limiting trust and transparency. Overall, the site presents a low-risk profile but also low trustworthiness due to missing WHOIS data, lack of business information, and minimal security controls. Strategic recommendations include implementing HTTPS, adding security headers, improving privacy compliance, and providing clear contact and business information to enhance credibility and user trust.
- PrellballProjekt Berlin
prellballprojektberlin.de
Other · Germany
51Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
PrellballProjekt Berlin is a small non-profit organization dedicated to promoting the sport of Prellball among youth in Berlin and northern Germany. The website serves as a community hub providing information about training, events, and tournaments, supported by local clubs and volunteers. The organization has a clear focus on youth engagement and sports development, with active social media channels and regular blog updates. Technically, the site is built on WordPress with common plugins for forms and GDPR compliance, hosted by netcup. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained for its niche audience.