Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
17,801–17,850 of 99,068
Bin Newsbinnews.info
Media · France
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bin News is a French news media website focused on delivering live news updates and current events primarily in France. The site targets a general audience interested in timely news coverage. It operates on a WordPress platform using Elementor for page building and WP Rocket for performance optimization. The site integrates Google Tag Manager for analytics and tracking. The content is professionally presented with good SEO practices including structured data and meta tags. Security posture is solid with HTTPS and basic security headers, though additional headers could enhance protection. Privacy compliance is moderate with a cookie consent banner but lacks a clear privacy policy or terms of service. No direct contact information is provided, which may impact user trust. WHOIS data is privacy protected, consistent with typical news websites. Overall, the site is functional, well-designed, and secure but could improve transparency and privacy compliance.
Voyagenbusvoyagenbus.com
Transportation · France
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Voyagenbus is a French travel and transportation information website offering a variety of articles and guides related to activities, travel tips, administrative procedures, accommodation, and transport. The site targets French-speaking travelers seeking practical advice and destination insights. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, leveraging modern web technologies and optimized for performance and mobile devices. Security posture is strong with HTTPS enforced and a Content-Security-Policy header, though additional security headers could enhance protection. Privacy compliance is basic, with a privacy banner present but lacking a detailed cookie policy or terms of service pages. The absence of WHOIS registration data is a notable concern, reducing trustworthiness despite the professional site presentation. Overall, the site is functional, content-rich, and secure but would benefit from improved transparency and contact information.
Pingoopingoo.org
Media
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Pingoo is a French-language media website focused on news and advice content, operating on the WordPress platform. The site employs common web technologies such as jQuery, Yoast SEO for search engine optimization, and WP Rocket for performance optimization. Google Analytics is used for visitor tracking. The website is well-designed with good mobile optimization and clear navigation, providing a positive user experience. However, the absence of visible privacy policy and terms of service pages, as well as the lack of contact information, limits its privacy compliance and business credibility. Security posture is moderate with HTTPS enforced and a Content-Security-Policy header present, but additional security headers and vulnerability disclosure mechanisms are missing. WHOIS data is unavailable or privacy protected, which slightly reduces trust but is not uncommon for small media websites. Overall, the site is functional and professional but could improve transparency and security practices.
Trips et Tipstripsandtips.fr
Media · France
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Trips et Tips is a French travel-focused media website providing news, trends, and tips for travel enthusiasts. The site targets a French-speaking audience passionate about travel and offers a variety of articles and guides related to global travel destinations. The business model centers on content publishing with SEO optimization to attract organic traffic. The website is built on WordPress using popular plugins such as Yoast SEO, WP Rocket, and Elementor, indicating a modern and maintainable technical infrastructure. Performance and mobile optimization are good, supporting a positive user experience. Security posture is solid with HTTPS and Content Security Policy implemented, though additional security headers could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site appears legitimate and professional, with no signs of malicious activity or content safety concerns.
Veynesville-veynes.fr
Media · France
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.ville-veynes.fr is a French local news and informational portal branded as 'Veynes - l'actu live'. It provides a variety of content categories including news, auto, business, finance, real estate, leisure, home, fashion & beauty, health, and technology. The site targets a general French-speaking audience interested in current events and lifestyle topics. The business model appears to be content publishing with monetization likely through advertising and affiliate links. The site is small in scale and uses WordPress CMS with popular plugins such as Yoast SEO, WP Rocket, Elementor, and WPBakery Page Builder, indicating a moderate level of digital maturity and technical infrastructure.
Flash Immobilierflash-immobilier.fr
Real Estate · France
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Flash Immobilier is a French real estate information website providing news, advice, and trends related to property investment, insurance, financing, moving, and renovation. The site targets individuals interested in real estate projects and offers a variety of content categories to support their needs. Technically, the website is built on WordPress using Elementor and WP Rocket, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, but lacks some advanced security headers and privacy compliance features. The absence of WHOIS data for the domain reduces trustworthiness from a domain legitimacy perspective. Overall, the site is professional and content-rich but should improve privacy policies and contact transparency to enhance compliance and trust.
Web Portailweb-portail.fr
Media · France
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Web Portail is a French-language online media portal providing news and informational content across a broad range of categories including business, finance, health, technology, and lifestyle. The website leverages WordPress CMS with Elementor and WP Rocket plugins, indicating a modern and maintainable technical infrastructure. The site is optimized for SEO with Yoast SEO plugin and uses Google Analytics and Google Tag Manager for visitor tracking. Security posture is moderate with HTTPS enforced and a Content-Security-Policy header present, though additional security headers could enhance protection. Privacy and cookie policies are absent, which is a compliance gap. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy and trustworthiness. Overall, the site presents professional content and design but would benefit from improved privacy compliance and domain registration transparency.
Jaccedejaccede.com
Other
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Jaccede is a small, collaborative platform dedicated to improving accessibility information for public places, primarily targeting people with reduced mobility and related communities. The website currently displays a paused state message indicating a phase of reinvention and invites community and partner engagement. The platform operates on Webflow and uses Cloudflare services for DNS and CDN, with a moderate technical infrastructure. The website content is minimal but relevant, with no privacy or cookie policies present, and contact is limited to a single email address. Security posture is basic, with domain protections in place but lacking DNSSEC and security headers. Overall, the site is legitimate and consistent with its stated mission but requires improvements in privacy compliance and security best practices.
- Venues | AXS Map
axsmap.com
Technology
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
AXS Map is an accessibility-focused online platform designed to help users find and map inclusive venues and community spaces. The website leverages modern web technologies including React and Google Maps API to deliver an interactive user experience. The platform supports community engagement through mapathons and team collaboration features, targeting individuals seeking accessibility information. The domain is well-established since 2010, indicating a mature presence in its niche. Technically, the website is built on a modern JavaScript framework with integration of Google services and is hosted with DNS managed by Cloudflare. Performance and mobile optimization are adequate, though accessibility features could be enhanced. Security posture is reasonable with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers which are recommended for improved security. From a compliance perspective, the site currently lacks visible privacy, cookie, and terms of service policies, which are important for GDPR and general privacy compliance. No contact or incident response information is provided, limiting transparency and user trust. Google Analytics is used for tracking without a visible consent mechanism, indicating potential privacy compliance gaps. Overall, AXS Map presents a focused and professional service with good technical foundations but would benefit from enhanced security practices and privacy compliance measures to strengthen trust and regulatory adherence.
Healthcare · Germany
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The Verband der Privaten Krankenversicherung e.V. is a prominent German association representing private health and nursing insurance providers and their insured members. The website serves as an information and advocacy platform, targeting private insured individuals, insurers, policymakers, and media. It offers news, policy positions, educational content, and links to subsidiary organizations. Technically, the site is built on TYPO3 CMS, uses Bootstrap for styling, and integrates Matomo for analytics, reflecting a moderate level of digital maturity. The presence of embedded YouTube videos and social media integration indicates active engagement with audiences. Security-wise, the site uses HTTPS and privacy-respecting analytics but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, with a solid business credibility and moderate technical implementation.
Healthcare · Germany
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The Deutsche Krankenhausgesellschaft e. V. (DKG) is a prominent German hospital federation dedicated to representing hospital interests and influencing healthcare policy. The website serves as an information hub for healthcare professionals, policymakers, and the public, offering position papers, event information, and advocacy content. The organization operates as a non-profit entity with a strong market position in Germany's healthcare sector. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Slick Carousel for UI components. It implements GDPR-compliant cookie consent mechanisms and uses Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent tools but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data aligns with the organization's German identity, reinforcing legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the organization's mission effectively. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.
talentsconnectjob-shop.com
Technology · Germany
74Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
talentsconnect is a German-based HR technology company specializing in software and consulting services that optimize recruiting and employee retention for medium to large enterprises. Their product suite includes innovative recruiting platforms like JobShop, retention tools such as Internal JobShop and Preboarding, and AI-driven conversational recruiting solutions. The company positions itself as a strategic partner helping HR teams transform from cost centers to profit centers through data-driven talent acquisition and retention strategies. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.
WISTA Management GmbHwista.de
Real Estate · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
WISTA Management GmbH is a landeseigene Wirtschaftsförderungsgesellschaft focused on business support, innovation promotion, and real estate management in Berlin and Brandenburg. The company operates technology parks and innovation centers, supports startups and established companies, and fosters cooperation between science and industry. Their market position is strong as a government-affiliated entity with multiple subsidiaries and partner sites. The website is built on TYPO3 CMS, hosted on manitu.net, and demonstrates good technical maturity with modern frameworks and accessibility features. Security posture is solid with HTTPS and basic security headers, though improvements are recommended in cookie consent and explicit security policies. Overall, the site is professional, trustworthy, and well-structured, targeting business and innovation stakeholders in the region.
Thinwhite - Tim Hack & Phil Danielsthinwhite.co.uk
Other · United Kingdom
55Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Thinwhite, operated by Tim Hack and Phil Daniels, is a small, established graphic design and web development agency based in Gloucestershire, UK. With over 20 years of experience, the company offers creative solutions in print, branding, web design, and SEO, targeting artisan and niche businesses. The website reflects a professional and client-focused approach, emphasizing transparency and quality service without retainers. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and user experience. The site is mobile-optimized and uses standard web technologies including jQuery and FontAwesome. Hosting is provided by 123-Reg Limited, consistent with the UK location. Security posture is solid with HTTPS enforced, CAPTCHA on contact forms, and a GDPR-compliant cookie consent mechanism. However, explicit security headers are not detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy policies are present and comprehensive enough for GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, conducting regular security audits, and publishing a formal security policy to further strengthen trust and compliance.
- ITSG GmbH
itsg.de
Healthcare · Germany
69Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
ITSG GmbH is a medium-sized German company specializing in the development and operation of innovative IT applications for digital communication in the healthcare and social sectors. The company targets healthcare organizations and social service providers, offering specialized IT solutions to enhance digital communication. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and detailed privacy policies. No critical vulnerabilities or suspicious WHOIS data were found, indicating a trustworthy domain registration. Overall, the website presents a credible and professional digital presence aligned with its business focus.
FOOBYfooby.ch
Retail · Switzerland
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FOOBY is a culinary content platform operated under the Swiss retail giant Coop, offering recipes, cooking inspiration, and community engagement. The website targets general consumers interested in cooking and food culture, providing a rich set of features including recipe categories, cooking school content, and interactive tools like menu configurators and apps. The platform is well-branded and consistent with Coop's retail identity, positioning FOOBY as a trusted source for culinary content in Switzerland. Technically, the website employs modern web technologies including service workers, consent management via Usercentrics, and tag management with Tealium, indicating a mature digital infrastructure. However, explicit privacy policies and terms of service pages were not found in the analyzed content, which is a gap in compliance and transparency. Security posture is generally good with HTTPS and service workers, but lacks visible security headers and incident response contacts. Overall, FOOBY presents a professional, trustworthy, and content-rich platform with room for improvement in privacy and security disclosures.
- Verein LICHT INS DUNKEL
lichtinsdunkel.org
Non-profit · Austria
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Licht ins Dunkel is a well-established Austrian non-profit organization dedicated to promoting social inclusion and supporting families and individuals with disabilities. With over 50 years of history, the organization operates primarily through charitable donations and project funding to foster societal cohesion and provide immediate financial assistance. The website reflects a professional and trustworthy presence, featuring comprehensive content and clear navigation tailored to its target audience of vulnerable groups and supporting entities in Austria. Technically, the site is built on WordPress with modern JavaScript frameworks and privacy-conscious analytics, ensuring a good user experience across devices. Security posture is solid with HTTPS and privacy-respecting analytics, though improvements can be made by enabling DNSSEC, adding security headers, and implementing cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the organization's legitimacy and long-standing presence.
Kraftfahrt-Bundesamtkba-online.de
Government · Germany
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Kraftfahrt-Bundesamt (KBA) operates as a federal government authority in Germany, providing a range of online services related to vehicle registration, recall databases, driver points information, and other transport-related data management. The website serves a broad audience including citizens, businesses, and governmental bodies, positioning itself as the authoritative source for vehicle and traffic data in Germany. The business model is centered on public service delivery through digital platforms, enhancing accessibility and efficiency for users. Technically, the website employs modern frontend technologies such as Vue.js and Vuetify, ensuring a responsive and user-friendly interface optimized for mobile devices. The site demonstrates moderate performance and basic accessibility features, with room for improvement in SEO and security header implementation. Hosting and backend details are not explicitly disclosed but the use of official German name servers indicates a stable and secure infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries in the frontend. However, it lacks visible security headers and does not provide explicit security policies or incident response contact information, which are areas for enhancement. Privacy compliance is generally good with a comprehensive privacy policy and GDPR adherence, though the absence of a cookie consent mechanism is a minor gap. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental role. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility to further strengthen the security posture and user trust.
Domain Default pagelunaweb.org
Technology
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website lunaweb.org currently serves as a default placeholder page generated by Plesk, indicating that the domain is registered but not actively used for a dedicated business or service. The page primarily promotes Plesk hosting control panel and related tools such as Sitejet Builder and WP Guardian, targeting web professionals and site owners interested in hosting management. The website content is minimal and basic, lacking any direct business information or contact details. From a technical perspective, the site uses standard HTML, CSS, and JavaScript with hosting infrastructure involving Cloudflare DNS and Plesk control panel. The site is mobile responsive with basic accessibility and moderate performance. However, there are no advanced frameworks or CMS detected, and no analytics or tracking technologies are in use. Security posture is limited; no security headers are present, DNSSEC is not enabled, and there is no visible HTTPS enforcement information. The absence of privacy, cookie, and terms of service policies indicates low compliance with privacy regulations. The WHOIS data shows a long-registered domain with a reputable registrar but no privacy protection, consistent with a domain held but not actively developed. Overall, the site scores low to moderate on content quality, technical implementation, security, privacy compliance, and business credibility. It is safe for general audiences but lacks substantive business or security features. Strategic improvements should focus on activating the domain with real content, implementing security best practices, and adding compliance documentation.
- DDZ BANK
vr-media-online.de
Finance · Germany
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.vr-media-online.de serves as a financial information portal primarily targeting customers of German cooperative banks under the DZ BANK group umbrella. It provides access to the Börsenkompass content, gated by a residency and customer verification form. The site is built on Adobe Experience Manager and integrates Usercentrics for cookie consent and Matomo for analytics, reflecting a moderate level of digital maturity. However, the content quality is basic, with minimal visible business information and no explicit privacy or terms of service pages on the analyzed page. Security posture is moderate, with consent-based tracking but lacking visible security headers or detailed policies. Overall, the site appears legitimate and consistent with DZ BANK branding but would benefit from enhanced transparency and security documentation.
- SSmith+Nephew
smith-nephew.com
Healthcare
75Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Smith+Nephew is a globally recognized medical technology company specializing in medical devices and advanced wound care solutions. The company offers a broad portfolio including orthopaedics, sports medicine, ENT, trauma, and surgical products. Their website reflects a mature enterprise with a strong market position and a focus on healthcare professionals and institutions worldwide. The digital presence is professional, well-branded, and content-rich, supporting their global business model. Technically, the website employs modern technologies such as Google Tag Manager, Facebook SDK, and Cookiebot for consent management, alongside Sitecore CMS. The site demonstrates good performance, mobile optimization, and accessibility standards. Comprehensive privacy and cookie policies are implemented, indicating a strong commitment to GDPR compliance and user privacy. From a security perspective, the site enforces HTTPS, uses multiple security headers, and employs best practices such as CSRF protection and cookie consent mechanisms. However, explicit security policies and incident response information are not prominently published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The lack of public WHOIS data is typical for corporate domains using privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.
Healthcare · Germany
53Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
GerroMed Pflege- und Medizintechnik GmbH Hamburg is a specialized provider of patient care and medical technology products, focusing on patient positioning and decubitus prophylaxis. The company has recently integrated its operations into Arjo Deutschland GmbH, which now manages its rental business. The website clearly communicates this transition and provides resources such as user manuals and contact information for existing customers. The target audience primarily consists of healthcare professionals and institutions requiring specialized patient care equipment. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and jQuery UI, and is hosted on a reputable provider (1&1 IONOS). The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses session cookies with CSRF protection, but lacks explicit security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and incident response information are absent. Overall, the website is trustworthy and professional, with room for improvement in security transparency and policy disclosures.
Jubla Plaffeienjubla-plaffeien.ch
Non-profit · Switzerland
62Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Jubla Plaffeien is a small non-profit youth organization based in Switzerland, offering engaging leisure activities and diverse holiday camps for children and adolescents. The website serves as a community hub providing information about upcoming events, camps, and organizational details, targeting local youth and their families. The organization maintains an active presence on social media platforms such as Instagram and Facebook to foster community engagement. Technically, the website is built on the Ongoing CMS platform, utilizing standard web technologies including JavaScript, CSS, and HTML5. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. Security is enforced via HTTPS, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The security posture is adequate for a small non-profit, with no evident vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, privacy policies with GDPR compliance, and incident response contact information to enhance trust and compliance. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent domain registration. Overall, Jubla Plaffeien presents a trustworthy and professionally maintained online presence suitable for its community-focused mission, with room for enhancement in privacy and security practices.
Jubla Heitenriedjublaheitenried.com
Non-profit · Switzerland
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Jubla Heitenried is a small, local youth organization based in Switzerland, focused on community engagement and youth events such as camps and seasonal celebrations. The website is hosted on WordPress.com and uses common plugins like Yoast SEO and Jetpack to manage content and analytics. The technical infrastructure is modern and adequate for a small non-profit organization, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating a gap in compliance. Contact is primarily through a web form and social media channels. Overall, the website is functional and professional but could improve in privacy and security policy transparency.
JuBla Gurmelsjubla-gurmels.ch
Non-profit · Switzerland
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
JuBla Gurmels is a small non-profit youth organization based in Switzerland, focused on community building, youth engagement, and outdoor activities. The website serves as an informational and engagement platform for members and interested parties, providing event details, contact information, and organizational values. The site is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but lack advanced security headers and explicit security policies. Overall, the site is trustworthy and professional but could improve privacy compliance and security posture.
Jubla Düdingenjubladuedingen.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Düdingen is a Swiss non-profit youth organization providing engaging leisure activities and diverse holiday camps for children and adolescents. The website reflects a local community focus with clear information about upcoming events, camps, and organizational structure. The target audience is primarily children and youth, supported by a consistent and professional online presence. Technically, the website employs modern web technologies including lazy loading, responsive design, and a custom CMS platform, delivering a good user experience across devices. Security posture is adequate with HTTPS enforced and some best practices observed, though there is room for improvement in security headers and published policies. Privacy compliance is limited, lacking cookie consent mechanisms and GDPR-specific disclosures. Overall, the domain registration aligns well with the organization's identity, supporting legitimacy and trustworthiness.
Jungwacht Blauring Thunjublathun.ch
Non-profit · Switzerland
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Jungwacht Blauring Thun is a local non-profit youth organization based in Thun, Switzerland, offering leisure activities and holiday camps for children and adolescents. The website serves as an information hub for upcoming events, registration, and community engagement, including a WhatsApp channel for timely updates. The organization targets families and youth in the local community, positioning itself as a trusted provider of youth recreational services. Technically, the website is built on Neos CMS using the Ongoing.Base framework, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy found. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.
Jubla Spiezjublaspiez.ch
Non-profit · Switzerland
56Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Jubla Spiez is a small, local non-profit youth organization based in Switzerland, focused on providing community activities and events for children starting from the first grade. Their offerings include summer camps, annual events, and an active communication channel via WhatsApp and Instagram. The website is built on the cm4all CMS platform and hosted by Hostpoint, utilizing older JavaScript libraries and standard web technologies. While the site is functional and provides relevant information to its target audience, it lacks key compliance documents such as a privacy policy and terms of service. Security practices are basic, with HTTPS enabled and a cookie consent mechanism in place, but missing security headers and use of outdated libraries present potential risks. Contact information is limited to a phone number, with no email addresses publicly listed. Overall, the website is suitable for its community purpose but would benefit from enhanced security and compliance measures.
Jubla Lyss Bieljublalyssbiel.ch
Other · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Lyss Biel is a local youth organization based in Lyss, Switzerland, offering engaging leisure activities and varied holiday camps primarily targeting children and teenagers. The website provides information about upcoming events, summer camps, and a downloadable annual program, supported by a WhatsApp channel for timely updates. The organization maintains a modest but consistent online presence with social media links to Instagram and Facebook. Technically, the website is built on Neos CMS using the Ongoing.Base framework, featuring modern web technologies such as lazy loading and responsive design, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS but lacks several security headers and explicit privacy compliance mechanisms, which could be improved to enhance trust and regulatory adherence. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security policies to align with best practices.
Jubla Ostermundigenjubla-ostermundigen.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Ostermundigen is a non-profit youth organization based in Switzerland, offering engaging leisure activities and holiday camps for children and adolescents. The organization is affiliated with Swiss Olympic and adheres to the Swiss Olympic Ethics Charter, reflecting a commitment to ethical standards in sports and youth engagement. Their website provides comprehensive information about upcoming events, camps, sponsorships, and community involvement, targeting local youth and families. Technically, the website is built on the Ongoing Base CMS framework, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and lazy loading for images. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were found. The domain uses privacy protection for WHOIS data, which is justified given the non-profit nature of the organization. Overall, the security posture is solid but could be improved with additional headers and privacy compliance features. The overall risk is low, with no signs of malicious activity or suspicious content. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance.
Jubla Burgdorfjublaburgdorf.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Burgdorf is a non-profit youth organization based in Burgdorf, Switzerland, offering engaging leisure activities and diverse holiday camps primarily targeting children and adolescents. The organization maintains a strong local presence with affiliations to national and regional partners such as Jungwacht Blauring Schweiz and Swiss Olympic, enhancing its community credibility and outreach. The website reflects a well-structured, content-rich platform with clear navigation and a focus on community engagement through events, groups, and leadership opportunities. Technically, the website is built on TYPO3 Neos CMS using modern web technologies including lazy loading images and responsive design, ensuring good performance and mobile optimization. However, there is room for improvement in accessibility and SEO features. Security posture is solid with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a basic imprint page but no dedicated cookie consent or comprehensive privacy policy. Overall, the security posture is adequate for the organization's scope, with no critical vulnerabilities detected. The domain registration is consistent with the organization's identity and location, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen trust and compliance. The website is safe for general audiences, with no adult or explicit content detected.
- Blauring Binningen-Bottmingen
blauringbibo.ch
Non-profit · Switzerland
70Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Blauring Binningen-Bottmingen is a small Swiss non-profit organization focused on youth and community activities, including group meetings, summer camps, and local events. The website serves as an informational platform for members and interested community participants. The technical infrastructure is based on the BaseKit CMS and hosted by Hoststar AG, utilizing common web technologies such as jQuery and FontAwesome. The site is accessible, mobile-optimized, and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website reflects a modest community organization with room for improvement in security and compliance.
Jungwacht Blauring Allschwiljubla-allschwil.ch
Non-profit · Switzerland
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jungwacht Blauring Allschwil is a Swiss non-profit youth organization focused on providing engaging leisure activities and diverse holiday camps for children and adolescents. The organization aims to offer a pressure-free environment to foster the versatile skills of children through playful programs. The website reflects a local community-oriented entity with a clear target audience of youth and families in Allschwil, Switzerland. Their business model centers on community engagement and youth development rather than commercial profit. Technically, the website is built on the Neos CMS platform with a custom framework (Ongoing.Base), utilizing modern web technologies such as lazy loading, slick sliders, and Google Fonts. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site enforces HTTPS and uses deferred script loading and lazy loading for performance and security benefits. However, it lacks visible security headers and explicit privacy or cookie consent mechanisms, which are important for GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for maturity in security governance. Overall, the website is trustworthy and professional, with a strong community focus and good digital presence. The main risks relate to privacy compliance and security best practices, which can be improved to enhance user trust and regulatory adherence.
Jubla Rheinfelden Magdenjubla-rheinfelden.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Rheinfelden Magden is a small non-profit youth organization based in Switzerland, focused on providing group activities, events, and summer camps for children and youth in the Rheinfelden and Magden regions. Their offerings include regular group meetings, community events, and themed summer camps, fostering social engagement and recreational learning. The website is well-structured, professionally designed, and targets local families and children aged 5-7 years and older. Technically, the site is built on the Ongoing.Base framework, likely a TYPO3 Neos CMS variant, hosted on a dedicated CDN, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is supported by a comprehensive privacy policy, but lacks a cookie consent mechanism and terms of service. Contact information is clearly presented, including email, phone, and physical address, alongside active social media channels. Overall, the site is trustworthy, safe, and professionally maintained, serving its community effectively.
Jubla Möhlinjublamoehlin.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Möhlin is a Swiss non-profit youth organization focused on providing community and recreational activities for children and adolescents. The organization operates through a dedicated leadership team and various groups that regularly meet to participate in camps and events. The website reflects a well-structured local community presence with clear information about membership, activities, and partner organizations. Technically, the site is built on Neos CMS with a modern frontend framework, delivering a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy compliance mechanisms. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.
- Jubla Muttenz
jubla-muttenz.ch
Non-profit · Switzerland
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Muttenz is a local non-profit youth organization based in Muttenz, Switzerland, focused on providing engaging leisure activities and holiday camps for children and adolescents. The website serves as a community portal offering event agendas, contact information, and multimedia content to support its mission. The organization maintains a consistent brand presence and leverages social media channels such as Instagram and Facebook to engage its audience. Technically, the website is built on a custom CMS framework (Ongoing.Base) and employs modern web technologies including HTML5, CSS3, and JavaScript libraries like Slick Carousel. The site is mobile-optimized and demonstrates good SEO practices with structured data markup and meta tags. Security-wise, the site enforces HTTPS with excellent SSL configuration but lacks several security headers and explicit privacy compliance mechanisms such as cookie consent banners. No vulnerability disclosure or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-suited for its community-focused mission, but could benefit from enhanced privacy and security policies to align with GDPR and modern best practices.
jublagelterkindenjublagelterkinden.ch
Non-profit · Switzerland
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Jubla Gelterkinden is a small local non-profit youth organization based in Gelterkinden, Switzerland, focused on community and youth activities under the Jungwacht Blauring movement. The website serves as an informational and promotional platform for their events and engagement with the local youth. Technically, the site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks advanced security headers and formal security or privacy policies, which are areas for improvement. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy compliance and security practices.
Jubla Birsfeldenjubla-birsfelden.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Jubla Birsfelden is a local non-profit youth organization based in Birsfelden, Switzerland, offering engaging leisure activities and diverse holiday camps primarily targeted at children and adolescents. The website serves as an information hub for their groups, events, and camp registrations, reflecting a community-focused business model with a strong local presence. Their market position is that of a trusted youth organization within their community, supported by active social media channels and clear contact information. Technically, the website is built on the Ongoing CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and responsive design elements to ensure good mobile optimization and user experience. The site loads moderately fast and includes SEO-friendly metadata and structured data for enhanced search visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response contacts. Privacy compliance is partially addressed with a privacy policy present, though cookie consent mechanisms are absent. Overall, the site demonstrates a good security posture with room for improvement in privacy and security best practices. The domain registration data aligns well with the website's claims, indicating legitimacy and trustworthiness. Strategic recommendations include implementing security headers, adding cookie consent, and establishing a vulnerability disclosure channel to enhance compliance and security posture.
Jungwacht Blauring Reinachjublareinach.ch
Non-profit · Switzerland
56Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Jungwacht Blauring Reinach is a local non-profit youth organization based in Reinach, Switzerland, focused on providing children and young people with community-oriented activities such as group meetings, events, and holiday camps. The organization promotes values of acceptance, respect, and solidarity, engaging volunteers to lead diverse and age-appropriate programs. The website serves as an informational and engagement platform for members and the community, with clear navigation and relevant content in German. Technically, the site is built on WordPress using the Enfold theme, incorporating modern web technologies and Google Analytics for visitor insights. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's mission effectively.
- JJubla Arlesheim
jubla-arlesheim.ch
Non-profit · Switzerland
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Jubla Arlesheim is a small, non-profit youth scouting organization based in Switzerland, focused on providing community and scouting activities for children and teenagers. Their website serves as a hub for event announcements, group schedules, and community engagement, targeting local families and youth. The organization maintains an active presence with regular updates about seasonal camps, races, and group meetings. Technically, the website is built on the Jimdo Creator CMS platform, leveraging standard Jimdo hosting and scripts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and basic privacy and cookie consent mechanisms in place, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professionally maintained, and compliant with basic privacy regulations, serving its community effectively.
Healthcare · Germany
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Onkopedia is a well-established German-language medical guideline portal specializing in hematology and oncology. It serves healthcare professionals by providing up-to-date clinical guidelines, drug assessments, and educational webinars. The platform is affiliated with reputable medical societies in Germany, Austria, and Switzerland, reinforcing its credibility and market position as a leading oncology guideline resource in the German-speaking region. The business model is non-profit and focused on knowledge dissemination within the healthcare sector. Technically, the website is built on the Plone CMS, uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and is hosted by Hetzner Online GmbH. The site is mobile optimized with good navigation and professional design, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.
- WWISTA Management GmbH
fubic.energy
Energy · Germany
70Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
FUBIC is a German innovation center focused on transforming a former hospital site into a technology quarter emphasizing life sciences, health economy, and ICT. The project is notable for pioneering an all-electric, 100% renewable energy supply system for the campus, supported by a consortium of universities, startups, and energy companies, funded by the German Federal Ministry for Economic Affairs and Climate Action. The website is well-designed, content-rich, and uses modern web technologies, providing comprehensive information about the project, news updates, and multimedia resources. Security posture is adequate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its institutional affiliations and funding. Overall, the site presents a professional and trustworthy digital presence for a medium-sized research and innovation entity in the energy sector.
ARAGkarriere-bei-arag.de
Other · Germany
56Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website karriere-bei-arag.de serves as a career portal for ARAG, a well-established insurance and legal services company based in Germany. It targets job seekers interested in opportunities within ARAG. The site uses modern frontend technologies such as Vue.js and Nuxt.js, with extensive use of custom web fonts to enhance visual appeal. However, the content quality is basic, focusing primarily on career information without extensive business or security disclosures. Security posture is moderate but lacks important elements such as security headers and privacy policies. No signs of WAF or content blocking were detected, allowing full content access. Overall, the site is functional but could benefit from enhanced privacy compliance and security best practices.
Deine Karriere im ARAG Vertriebarag-vertrieb.de
Other · Germany
56Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website www.arag-vertrieb.de serves as a career portal for ARAG Vertrieb, likely a sales or distribution division of the ARAG insurance group. It targets job seekers interested in career opportunities within this sector. The site is built using modern web technologies such as Vue.js and Nuxt.js, with custom fonts hosted externally. However, the content quality is basic, focusing primarily on recruitment information without extensive business or security disclosures. From a technical perspective, the site demonstrates moderate performance and good mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is weak due to the absence of security headers, privacy policies, and incident response contacts. No analytics or tracking technologies were detected, indicating minimal user tracking. The WHOIS data is limited, providing only domain status and name servers without registrant details, which restricts full legitimacy assessment. No privacy, cookie, or terms of service policies were found, and no contact information such as emails or phone numbers was identified in the provided content. Overall, the website is safe for general audiences but requires significant improvements in privacy compliance, security practices, and business transparency to enhance trust and professionalism.
Healthcare · Germany
71Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V. (DGHO) is a well-established German professional medical society specializing in hematology and medical oncology. The organization provides comprehensive services including clinical guidelines via the Onkopedia portal, certification programs such as KoMedT, professional events, and member networking opportunities. Their website reflects a mature digital presence with a focus on healthcare professionals and researchers in Germany. The content is rich, professionally presented, and regularly updated with news and events relevant to their field. Social media integration and external partnerships further enhance their outreach and credibility. Technically, the website is built on the Plone CMS platform, utilizing standard web technologies like JavaScript and CSS. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security posture, particularly in implementing and displaying security headers such as CSP and HSTS. The site uses HTTPS but lacks visible cookie consent mechanisms, which could be enhanced to improve privacy compliance. From a security perspective, the site shows a moderate maturity level with secure login forms and HTTPS usage. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Incident response and explicit security policies are not prominently featured, suggesting an area for future enhancement. Overall, DGHO's website is a professional, trustworthy, and content-rich platform serving its niche audience effectively. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its compliance and security posture.
Einkaufen in Weil am Rheineinkaufen-in-weil.de
Retail · Germany
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website 'Einkaufen in Weil am Rhein' serves as a local shopping guide promoting small shops, boutiques, and local businesses in Weil am Rhein, Germany. It targets general consumers interested in local retail and services, providing an informational platform rather than direct e-commerce. The site is built using the Weblication® CMS, indicating a moderate level of technical infrastructure suitable for small business needs. The design is professional and mobile-optimized, with good accessibility and SEO practices observed. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which are essential for compliance and trust. No advanced analytics or tracking mechanisms are detected, suggesting minimal user tracking. The domain registration is standard but lacks detailed registrant information, which slightly impacts trustworthiness. Overall, the site is functional and informative but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.
- HC24 GmbH & Co. KG
hc24.de
Real Estate · Germany
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
HC24 GmbH & Co. KG operates an online platform specializing in furnished temporary housing rentals across Germany. The website offers a user-friendly search and booking experience for furnished apartments, rooms, and houses, targeting individuals seeking flexible living arrangements. The company positions itself as a trusted intermediary with verified listings and customer support. Technically, the website is built on modern frameworks such as Next.js and React, with media assets hosted on Amazon S3, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though lacks visible security headers and explicit security or privacy policy pages. Overall, the site is professional, trustworthy, and compliant with basic privacy regulations, but could improve transparency and security posture by publishing detailed policies and contact information.
Lofo-Gewerbeparklofo-gewerbepark.de
Real Estate · Germany
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Lofo-Gewerbepark is a commercial real estate provider specializing in offering industrial and production land and properties in Weil am Rhein, Germany, strategically located in the tri-border area of Germany, France, and Switzerland. The website presents a professional image with clear business focus on attracting handcraft and production companies seeking growth opportunities in a well-connected location. The technical infrastructure is based on the Weblication® CMS platform, with a moderate performance profile and good mobile and accessibility features. Security posture is moderate, with HTTPS likely enabled but lacking explicit security headers and detailed security policies. Privacy compliance is adequate with accessible privacy and cookie policies, though terms of service and incident response information are missing. Overall, the site is trustworthy and suitable for its business purpose but could improve in security and contact transparency.
Städte-Verlag E. v. Wagner & J. Mitterhuber GmbHstaedte-verlag.de
Media · Germany
61Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Städte-Verlag E. v. Wagner & J. Mitterhuber GmbH is a well-established media company specializing in cartographic advertising media such as city maps, brochures, online portals, and digital infoterminals. With over 70 years of market leadership in Germany and subsidiaries in neighboring countries, the company targets both end-users seeking orientation and businesses aiming to advertise in relevant local contexts. The business model centers on direct sales through a dedicated field sales team, supported by modern digital platforms and traditional print media. Technically, the website is built on TYPO3 CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency around security and vulnerability disclosures.
- Gemeinde Zell ZH
zell.ch
Government · Switzerland
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website www.zell.ch serves as the official digital presence of the Gemeinde Zell ZH, a small Swiss municipality. It provides comprehensive information about the community, including local governance, services, events, and economic activities. The site targets local residents, businesses, and visitors seeking municipal information or services. The business model is centered on public service delivery and community engagement, positioning the municipality as a trusted local authority. Technically, the website employs a modern CMS platform (i-web CMS) with a clean HTML5 and CSS3 implementation, leveraging JavaScript modules and Matomo analytics for visitor insights. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Performance is moderate, with no critical technical debt observed. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy and cookie policy, including user consent for analytics. Overall, the website is a well-maintained, trustworthy municipal portal with a strong focus on community service. Strategic improvements in security policy transparency and header implementation could further enhance its security posture and user trust.