Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
18,851–18,900 of 99,068
Other
58Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website gdholz-events.de is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or policy documents are available for review. The domain is registered with two name servers, but WHOIS data is minimal and does not provide registrant details or domain age. The lack of accessible content and metadata prevents a thorough technical and security assessment. Consequently, the website's security posture cannot be confidently evaluated, and no evidence of compliance with privacy regulations such as GDPR is found. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.
OPmobilityopmobility.com
Transportation
75Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
OPmobility is an enterprise-level automotive supplier specializing in sustainable and connected mobility solutions. The company positions itself as a leader in the automotive sector, offering a range of products and services including exterior and lighting components, modules, fuel systems, hydrogen and fuel cell technologies, and software solutions. The website targets industry professionals, partners, investors, and customers interested in innovative and sustainable automotive technologies. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and Divi Builder, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and explicit security policies. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive privacy compliance indicate a legitimate business. Overall, the site is well-structured and trustworthy, though improvements in security disclosures and contact information visibility are recommended.
Transportation · France
57Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
The Comité des Constructeurs Français d'Automobiles (CCFA) is a professional association representing major French automotive manufacturers including Stellantis, Renault, and Renault Trucks. Founded in 1898, it serves as a key industry body advocating for economic and industrial interests nationally and internationally. The organization also operates AAA DATA, a subsidiary providing automotive data solutions. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations, targeting industry professionals and stakeholders. Contact information and legal policies are clearly presented, supporting transparency and compliance. Security measures include HTTPS and hCaptcha integration, with GDPR cookie consent mechanisms in place, though explicit security policies and incident response details are absent.
OTRE Occitanieotre-occitanie.org
Transportation · France
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
OTRE Occitanie is a regional professional organization representing road transporters in the Occitanie region of France. The website serves as a platform to provide information about the organization's services, partnerships, and news relevant to transport professionals. The business model focuses on advocacy and service provision for transporters, positioning itself as a key regional player in the transportation sector. The website content is primarily in French and targets transport professionals and stakeholders in the region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Fonts. The site is hosted by OVH sas, a reputable hosting provider. Performance and mobile optimization are good, with SEO optimization evident through meta tags and structured data. Cookie consent is implemented via tarteaucitron.io, indicating attention to privacy compliance, although explicit privacy and terms of service pages are not found. From a security perspective, the site uses HTTPS and has domain status protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No vulnerability disclosure or incident response policies are visible, and no direct contact emails or phone numbers are provided, which could impact user trust and security communication. Overall, the website presents a professional and trustworthy front for the organization, with moderate technical maturity and security posture. Strategic improvements in privacy policy transparency, security headers, and DNSSEC implementation would enhance compliance and trustworthiness.
GedMouvgedmouv.com
Transportation · France
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
GedMouv is a specialized B2B platform offering shared traceability solutions for the transport and logistics industry, enabling real-time data exchange and delivery tracking among customers, carriers, and drivers. The company operates under the parent entity B2PWeb and targets transport companies, freight forwarders, and shippers primarily in France. The website is professionally designed using WordPress with modern technologies such as Bootstrap, jQuery, and slick carousel, and integrates multiple analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in HTTP security headers and explicit security policies are recommended. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, but the overall business presence and content quality support a trustworthy profile.
Transportez-Vous Bientransportezvousbien.fr
Transportation · France
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Transportez-Vous Bien is a French health prevention program specifically designed for non-executive employees in the transport sector. Managed by Carcept Prévoyance, it offers a range of free health-related services including coaching, workshops, and support to improve employee well-being. The website is professionally designed, content-rich, and targets both employees and transport companies. It leverages WordPress CMS with modern plugins and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but the business legitimacy is supported by detailed content and partner references.
- Bundesinstitut für Öffentliche Gesundheit (BIÖG)
jung-und-schwanger.de
Government · Germany
72Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
jung-und-schwanger.de is a German government-backed informational website operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG). It provides comprehensive support and guidance for young pregnant individuals and young fathers, focusing on pregnancy, childbirth, parenting, education, and legal matters. The site is well-positioned as an authoritative resource in its niche, offering telephone helpline services and online counseling referrals. Technically, the website is built on TYPO3 CMS and uses Matomo for privacy-conscious analytics. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS, anonymizes IPs in analytics, and uses a cookie consent banner, though it lacks explicit security headers and published security policies. Overall, the site demonstrates a strong commitment to privacy and user support, with no adult or explicit content, making it safe for general audiences.
Musikbüro Baselmusikbuerobasel.ch
Media · Switzerland
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Musikbüro Basel is a regional non-profit organization dedicated to promoting pop music and supporting the music community in the Basel region of Switzerland. The organization offers various funding programs, workshops, infrastructure support, and networking opportunities to musicians, bands, clubs, and event organizers. Their website reflects a clear focus on community engagement and cultural support, positioning them as a key player in the local music scene. Technically, the website is built on Magnolia CMS and uses modern web technologies including HTML5, CSS, and JavaScript. It integrates Google Analytics with IP anonymization and provides a cookie consent mechanism, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and offers good navigation and content relevance. From a security perspective, the site uses HTTPS with a good SSL configuration and anonymizes user IPs in analytics. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, suggesting a solid but improvable security posture. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations such as GDPR. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance their security and compliance stance.
- R
Government · Switzerland
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Römisch-Katholische Kirche Basel-Stadt website serves as the official online presence of the Roman Catholic Church in Basel-Stadt, Switzerland. It provides comprehensive information about church activities, pastoral care, social services, and community engagement. The site targets local residents and members of the Catholic community, offering resources and news relevant to their spiritual and social needs. The business model is non-profit, focusing on religious and community services within the regional government and non-profit sectors. Technically, the website employs a modern web application framework (webIQ 6.1) and integrates popular JavaScript libraries such as jQuery and Bootstrap for responsive design. It uses multiple analytics platforms including Matomo, Microsoft Clarity, and Google Analytics, alongside a robust privacy consent management system powered by Truendo. The site is mobile-optimized and demonstrates good performance and accessibility basics. From a security perspective, the website enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional, trustworthy, and secure platform for its intended audience, though improvements in privacy policy transparency, security header implementation, and contact information visibility are recommended.
- digitaleheimat GmbH
digitaleheimat.de
Technology · Germany
64Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
digitaleheimat GmbH is a German digital agency specializing in comprehensive online marketing solutions including SEA, SEO, social media marketing, and programming services. Established in 2011, the company has a strong market presence supported by certifications such as Google Premium Partner and a portfolio of over 1000 campaigns. The website reflects a mature digital infrastructure built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though lacking explicit security policies and headers. Overall, the business demonstrates credibility and professionalism with room for improvement in privacy and security transparency.
Verband Deutscher Naturparke e.V.naturparke.de
Non-profit · Germany
51Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Verband Deutscher Naturparke e.V. is a German non-profit umbrella organization dedicated to the preservation, development, and public awareness of nature parks in Germany. The website serves as an informational and educational platform, providing extensive resources about nature parks, their projects, and programs. It targets nature enthusiasts, members, partners, and the general public interested in environmental conservation and sustainable regional development. The organization holds a strong national position as the voice of German nature parks and collaborates closely with partner organizations such as Nationale Naturlandschaften e.V.
Bayerische Mykologische Gesellschaftpilze-bayern.de
Other · Germany
72Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
The Bayerische Mykologische Gesellschaft (BMG e.V.) is a regional non-profit organization dedicated to the research and education of native mushrooms in Bavaria, Germany. Their website serves as an informational platform targeting mushroom enthusiasts, mycologists, and the general public interested in mycology. The organization focuses on mushroom consulting, research, and training mushroom consultants, positioning itself as a specialized entity within the regional scientific and educational community. Technically, the website is built on WordPress 6.8.3 using the Astra theme and several plugins including Yoast SEO and Smart Slider 3, indicating a modern and maintainable infrastructure. The site is mobile-optimized and employs SEO best practices, although some accessibility features are basic. Performance is moderate, with no major issues detected. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent banner, but lacks explicit security headers and detailed privacy or security policies. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and compliance. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is a well-structured, professional platform for a small non-profit organization with moderate security and privacy compliance. Strategic improvements in security headers, explicit privacy policies, and contact information would enhance its trustworthiness and compliance posture.
- M. DESAX AG
mdesaxag.ch
Transportation · Switzerland
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
M. DESAX AG is a Swiss family-owned company established in 1999 specializing in the sale, rental, and installation of construction elevators and transport platforms. The company serves the Swiss construction and event markets with a broad product range including transport platforms, material elevators, and rope winches. Their market position is solid with a large rental fleet and references from significant projects, indicating reliability and expertise. Technically, the website uses a proprietary CMS (admiralCX) with modern technologies such as jQuery, FontAwesome, Google Analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides clear contact information. Security posture is good with HTTPS and standard security headers, but lacks explicit security policies or incident response contacts. Privacy compliance is supported by a detailed cookie consent mechanism, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and suitable for its target audience.
- Macardo Swiss Distillery GmbH
macardo.ch
Hospitality · Switzerland
68Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Macardo Swiss Distillery GmbH operates a professional and well-branded website focused on premium spirits production, hospitality services including a bed and breakfast, and event hosting in the Thurgau region of Switzerland. The company positions itself as a premium Swiss distillery with a strong local presence and an e-commerce platform for direct sales. The website demonstrates a mature digital infrastructure built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, indicating legitimacy and transparency. Overall, the website reflects a trustworthy and credible business with room for enhanced security policies and incident response disclosures.
- Gemeinde Salenstein
salenstein.ch
Government · Switzerland
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Gemeinde Salenstein operates as the official municipal government website for the Salenstein area in Switzerland, providing residents and visitors with comprehensive information about local governance, services, infrastructure, social programs, and community events. The site serves as a digital portal for accessing municipal services including online applications, contact information, and public announcements. The target audience primarily consists of local residents, businesses, and visitors seeking official information and services. Technically, the website is built on a modern CMS platform (i-web.ch) with a responsive design optimized for mobile devices. It employs standard web technologies such as HTML5, CSS3, JavaScript, and Bootstrap framework components. The site includes accessibility features and SEO optimizations, with a moderate performance profile. Security is enforced through HTTPS, secure login forms, and an opt-in consent mechanism for anonymized web analytics. From a security perspective, the website demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS registration data and website content, indicating legitimacy. The site is free from suspicious content or security red flags, making it a reliable source of municipal information. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure to further strengthen the security posture.
Klingen Gastro GmbHburghohenklingen.com
Hospitality · Switzerland
75Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Restaurant Burg Hohenklingen operates a historic medieval castle venue near Stein am Rhein, Switzerland, offering French cuisine, event hosting including weddings and banquets, and unique cultural experiences. The business targets local residents, tourists, and event organizers seeking a distinctive location. The website is built on WordPress with modern SEO and marketing integrations, including Google Analytics and Mailchimp, reflecting a moderate digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response disclosures. The domain registration is consistent with the business history, enhancing trustworthiness. Overall, the site presents a professional and credible online presence for a small hospitality business.
Thurgau Tourismusthurgau-bodensee.ch
Hospitality · Switzerland
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Thurgau Tourismus operates a regional tourism website promoting the Thurgau and Bodensee region in Switzerland, focusing on nature experiences, culture, and family-friendly activities. The website provides travel tips, hotel recommendations, and leisure activity suggestions, targeting tourists and families interested in this Swiss region. The business model centers on tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on the Contao Open Source CMS with Bootstrap for styling and includes modern integrations such as Weglot for multilingual support, Cookiebot for GDPR-compliant cookie management, Plausible Analytics for privacy-friendly visitor tracking, and Google Tag Manager for marketing tags. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses a robust cookie consent mechanism with granular controls. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for regional tourism information. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security posture and user trust.
Other
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.seetickets.com is currently inaccessible, presenting an Access Denied error page with no visible content or metadata. This prevents any meaningful analysis of the business, technical infrastructure, or security posture. The WHOIS lookup for the domain returned no registration data, indicating the domain may be unregistered, expired, or protected by privacy mechanisms that block WHOIS queries. Due to these factors, the website's legitimacy and operational status cannot be verified. The lack of accessible content and WHOIS data results in a very low trust and credibility score. From a technical perspective, the absence of accessible HTML content means no technologies, frameworks, or hosting details can be identified. The site appears to be blocked by a generic access control mechanism, possibly a firewall or server configuration, which severely limits any security or compliance evaluation. No security headers, SSL information, or privacy policies are available for review. Security posture assessment is not feasible given the lack of data. The domain's unregistered or inaccessible status is a critical risk indicator. Without contact information, privacy policies, or incident response details, the site does not meet basic compliance or trust standards. Overall, the site is currently non-operational or heavily restricted, and further investigation or direct contact with the domain owner or hosting provider is recommended. Strategic recommendations include resolving access issues to restore website availability, registering or updating domain WHOIS information, implementing standard security and privacy policies, and establishing clear contact and incident response channels to improve trust and compliance.
- 224 Stops
24stops.info
Other
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
24 Stops is a cultural and artistic project focused on guided walks, events, and installations, supported by regional partners such as Fondation Beyeler and others. The website provides information about the project, event registration, and partner links, targeting a general audience interested in culture and art. The technical infrastructure includes common web technologies such as jQuery, Cookiebot for consent management, Google Tag Manager, and Vimeo for video content. The site is hosted behind AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is good with a visible privacy policy and cookie consent mechanism. Overall, the website is professionally presented with consistent branding and trustworthy partner associations, but could improve in technical security and contact transparency.
- Papoo Software & Media GmbH
ccm19boros.de
Technology · Germany
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website ccm19boros.de serves as a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH. The business focuses on providing software solutions to help website operators manage cookie consent in compliance with privacy regulations. The site targets businesses requiring cookie consent management and offers a multilingual login interface. The market position appears niche, with a small company footprint and limited publicly available business information. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The infrastructure is hosted on servers indicated by the nameservers your-server.de and second-ns.de. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or major frameworks are detected beyond custom theme scripts. From a security perspective, the site uses HTTPS (assumed from URL) and a POST login form with autocomplete attributes. However, no security headers such as Content-Security-Policy or HSTS are present, and no privacy or cookie policies are visible on the login page. There is no contact information or incident response details provided, which limits transparency and trust. The WHOIS data is minimal, showing only nameservers without registrant details, reducing domain trustworthiness. Overall, the website is functional for its login purpose but lacks comprehensive privacy, security, and business transparency features. The risk level is moderate due to missing policies and security headers. Strategic improvements in privacy compliance, security hardening, and business information disclosure are recommended to enhance trust and compliance.
Collettivo A/Inoblogs.org
Technology
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
NoBlogs.org is a niche, non-commercial blogging platform focused on radical activism, privacy, and social justice. Operated by the Collettivo A/I, it provides a space for activists and like-minded individuals to communicate and publish content without commercial influence. The platform is multilingual and emphasizes privacy and antifascist, antisexist values. Technically, the site runs on WordPress with a modern but modest tech stack, hosted by autistici.org, a known activist collective. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced DNS security and published security policies. Privacy compliance is good with a clear cookie banner and privacy policy, though no terms of service or incident response information is provided. Overall, the site is trustworthy and well-aligned with its mission but could improve in security transparency and technical hardening.
- VVelo Willi
velowilli.ch
Transportation · Switzerland
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Velo Willi is a small local bicycle workshop and sales business based in Switzerland, operating under the subdomain velowilli.weebly.com hosted on the Weebly platform. The business offers new and used bicycles, repairs, custom builds, and limited edition music-related products. The website is designed with a clear structure, good navigation, and mobile optimization, providing relevant content for local bicycle customers. Technically, the site uses Weebly CMS with jQuery 1.8.3, Google Analytics, and Snowplow for analytics. While HTTPS is implied, no advanced security headers are detected, and the use of an outdated JavaScript library presents potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Contact information is limited to a phone number, with no email or detailed business registration data available. Overall, the site is functional and trustworthy for its business purpose but would benefit from improved security and privacy practices.
- Gemeinde Riehen
schulraum-riehen.ch
Government · Switzerland
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.schulraum-riehen.ch serves as the official municipal portal for the community of Riehen, Switzerland, focusing primarily on the school space strategy and related educational infrastructure planning. It targets local residents, families, and stakeholders interested in municipal development and education. The site is built on the Weblication CMS platform and uses jQuery for client-side scripting. The design is professional and consistent, with good navigation and mobile optimization. Structured data is implemented for SEO benefits. Security posture is adequate with HTTPS enabled and some meta security policies, but lacks comprehensive security headers and privacy compliance documentation. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. The domain registration data aligns well with the municipal government entity, supporting high legitimacy. Overall, the website is trustworthy and serves its informational purpose effectively, though it would benefit from enhanced privacy and security policy disclosures.
Gemeinde Riehen Kulturbüroriehen-tourismus.ch
Hospitality · Switzerland
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.riehen-tourismus.ch serves as the official tourism portal for the municipality of Riehen in Switzerland. It provides comprehensive information about local attractions, cultural sites, events, parks, dining, and accommodations, targeting tourists and visitors interested in exploring the region. The site is recognized by Switzerland Tourism and the Federal Office of Culture, enhancing its credibility and market position as a trusted local tourism authority. The business model focuses on destination marketing and visitor information services, supporting local tourism growth and cultural engagement. Technically, the website is built on Drupal 10, leveraging modern JavaScript libraries such as Splide.js for UI components and Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism ensuring GDPR compliance. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong SSL configuration, contributing to a secure user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data aligns well with the website's municipal identity, showing consistent registration information and no suspicious patterns. Overall, the website is professional, trustworthy, and well-suited for its purpose as a tourism information portal. Strategic improvements include publishing formal security and incident response policies and adding vulnerability disclosure information to strengthen user trust and security readiness.
quantaquanta.io
Technology
74Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Quanta is a technology company specializing in web performance optimization and digital sobriety solutions aimed at improving conversion rates and reducing environmental impact. The company serves a B2B market with a SaaS model, trusted by over 500 sites worldwide including notable brands such as Veepee, Cultura, Michelin, and Orange. Recently acquired by Centreon, Quanta positions itself as a key player in digital observability and environmental responsibility. Technically, the website is built on WordPress using the Divi theme, enhanced with modern technologies like jQuery, Google reCAPTCHA, and HubSpot forms. The site is well-optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and use of CAPTCHA, though security headers and explicit security policies are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a clear market focus and modern digital infrastructure.
- Bbestview
bestview.ch
Other · Switzerland
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website bestview.ch currently serves as a placeholder page indicating that the site is no longer available. It provides minimal content limited to a logo and a message in German stating the unavailability of the page along with a contact email address. There is no business description, no services listed, and no additional contact information such as phone numbers or physical addresses. The website uses basic HTML and CSS with Google Fonts for typography but lacks any advanced technical infrastructure or CMS. No analytics, tracking, or advertising technologies are detected. Security posture is weak due to absence of visible security headers and no confirmation of HTTPS usage. Privacy and cookie policies are missing, and no GDPR compliance indicators are present. The domain WHOIS data is privacy protected, limiting transparency about the registrant and domain age. Overall, the site appears inactive or abandoned with very limited business or security information available.
LANKELEISI.CO.UKlankeleisi.co.uk
Transportation · United Kingdom
73Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
LANKELEISI.CO.UK operates as the official UK online store for Lankeleisi electric bikes, specializing in dual motor e-bikes, all-terrain models, and accessories. The business is relatively young, founded in 2021, and leverages the Shopify platform for e-commerce operations. The website presents a professional and consistent brand image with a focus on quality products backed by a three-year warranty. The target audience includes UK consumers interested in electric bikes and related gear. Technically, the site uses modern web technologies and integrates multiple third-party services for marketing, reviews, and shipping protection, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and headers could be improved. Privacy compliance is basic, with cookie consent implemented but lacking a visible privacy policy. Overall, the site is trustworthy and functional but could enhance transparency and contact accessibility.
Transportation
75Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Lankeleisi.eu operates as an e-commerce platform specializing in the sale of high-performance electric bikes, including dual motor, all-terrain, fat tire, and city commuter models. The business emphasizes product quality with a three-year warranty, targeting consumers interested in electric mobility solutions. The website is built on the Shopify platform, leveraging various third-party marketing and analytics tools to enhance customer engagement and sales performance. The technical infrastructure is modern and moderately optimized for performance and mobile use, with a consistent and professional brand presentation. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but could benefit from enhanced security headers and published security policies. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site presents a legitimate and professional e-commerce business with room for improvement in privacy and security transparency.
Wirtschaftsförderung Region Hannoverroboticscity.de
Technology · Germany
62Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Robotics City Hannover is a regional robotics innovation network supported by the economic development agency of the Hannover region. It serves as a platform to promote robotics technology, support educational and startup initiatives, and foster collaboration among industry, academia, and government. The website is professionally designed, mobile-optimized, and provides comprehensive information about robotics projects, events, and news relevant to the Hannover region. The technical infrastructure includes modern JavaScript libraries and privacy-respecting Matomo analytics. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site reflects a credible and trustworthy regional government initiative with a focus on technology and innovation.
Region Hannoverdenkdieweltneu.de
Government · Germany
65Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website 'Denk die Welt neu - Das Social Innovation Center' is a regional government-supported platform focused on fostering social entrepreneurship and innovation in the Hannover and Niedersachsen region of Germany. It offers a free four-month entrepreneurship program, workshops, mentoring, and coworking spaces to support social startups. The site is well-branded with consistent use of official logos and provides comprehensive contact information and downloadable resources. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, and employs Matomo analytics configured for privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR and cookie consent regulations.
- CChecking your browser before accessing. Just a moment...
hibs-germany.com
Other
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website hibs-germany.com is currently inaccessible beyond a browser checking security challenge page, indicating the presence of a Web Application Firewall or similar security mechanism blocking direct content access. Due to this, no substantive business content, contact information, or policies are available for review. The domain is registered with BigRock Solutions Ltd in 2022 and is set to expire in 2026, suggesting a relatively new but legitimate registration. Technical infrastructure appears minimal with basic JavaScript challenge scripts and no advanced frameworks or CMS detected. Security posture is limited with no DNSSEC and no visible security headers, though HTTPS is presumably enabled given the domain status. Overall, the site lacks transparency and content, limiting trust and business credibility assessments.
- hannoverimpuls GmbH
health-innovation-hannover-region.de
Healthcare · Germany
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Health Innovation Hannover Region is a German-based open innovation platform focused on advancing healthcare solutions by connecting stakeholders from science, research, healthcare providers, payers, and industry. Coordinated by hannoverimpuls GmbH, it fosters collaboration and innovation to develop future-oriented healthcare services rooted in the Hannover region with national and international visibility. The platform offers networking, support, and community engagement primarily targeting healthcare providers, SMEs, startups, and research institutions. Technically, the website employs modern web technologies including jQuery, Swiper, and Matomo analytics configured for privacy compliance. The site is well-structured, mobile-optimized, and accessible, with a cookie consent mechanism and HTTPS enforced. Security posture is solid with privacy-respecting analytics and no visible vulnerabilities, though security headers and incident response policies could be improved. Overall, the website presents a professional and trustworthy digital presence aligned with its business goals.
Techfactorytechfactory.de
Technology · Germany
70Medium
NIS2 2 · GDPR 60
NIS2 2 · GDPR 60
Techfactory is a German-based innovation hub focused on deep tech projects, offering co-working spaces and campus facilities primarily targeting startups and innovators in the technology sector. The website presents a professional and consistent brand image with a clear focus on fostering innovation in Hannover, Germany. The business model revolves around providing infrastructure and community support for deep tech innovation, positioning itself as a regional hotspot in this niche. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations such as Matomo for privacy-conscious analytics and Google Maps and YouTube embeds controlled via user consent mechanisms. Hosting appears to be managed through DomainDiscount24, and the site demonstrates moderate performance with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy compliance aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professionally maintained, with a solid privacy posture and a clear business focus. Strategic enhancements in transparency around security policies and contact information would further strengthen its credibility and user trust.
- Hhtw saar
htwsaar-jobportal.de
Education · Germany
51Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website htwsaar-jobportal.de serves as the official student job portal for htw saar and FITT, primarily targeting students seeking internships, practical study phases, thesis opportunities, and part-time jobs. It also provides companies a platform to connect with motivated students and participate in related events such as the Firmenkontaktmesse. The portal is a niche regional platform focused on educational services within Germany, specifically the Saarland region. Technically, the site is built on WordPress with common plugins like Contact Form 7 and WP Job Manager, hosted on a German hosting provider (rzone.de). The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security-wise, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security policies. The presence of copy protection scripts may affect user accessibility. Overall, the site is trustworthy and professionally maintained but could improve in security and compliance documentation.
LOGPAY Financial Services GmbHlogpay.de
Transportation · Germany
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
LOGPAY Financial Services GmbH operates as a specialized payment and financial services provider within the European transport and mobility sectors. As a 100% subsidiary of Volkswagen Financial Services AG, LOGPAY offers seamless payment solutions including the Charge&Fuel card for vehicle fleets and factoring services for mobility providers. Their market position is strong in Germany, serving fleet managers, public transport operators, and mobility companies with integrated payment and mobility solutions. The website reflects a professional and modern digital presence built on Adobe Experience Manager, with comprehensive content and clear navigation.
PTTCpttc.be
Transportation · Belgium
73Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
PTTC is a Belgian non-profit organization specializing in professional training for the transport sector, focusing on continuous education and ADR certification for transport companies and drivers. Established in 2009, it holds a stable market position as a reference training center in Belgium. The website is built on WordPress with modern optimization and compliance tools, providing a user-friendly and informative platform. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Overall, PTTC demonstrates a mature digital presence aligned with its business goals and regulatory requirements.
Paycoverpaycover.be
Other · Belgium
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Paycover is a specialized social secretariat operating in various sectors including transport, logistics, hospitality, construction, food, cleaning, moving, garage, and metal industries. The company offers tailored services adapted to the complex regulations specific to these sectors, targeting businesses active in these professional fields primarily in Belgium. The website is professionally designed using the Squarespace platform, featuring good mobile optimization and SEO practices. However, it lacks explicit contact information and comprehensive privacy or terms of service policies. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. WHOIS data is restricted, which reduces transparency but is common for privacy protection. Overall, the website presents a legitimate small business with room for improvement in security and compliance documentation.
S-Comsparkassen-finanzportal.de
Finance · Germany
70Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
S-Com is a creative agency embedded within the Sparkassen-Finanzgruppe ecosystem, specializing in brand communication, digitalization, and customer experience solutions. The company positions itself as a trusted partner with over 25 years of experience, serving financial institutions primarily in Germany. The website reflects a mature digital presence built on Adobe Experience Manager, with modern web technologies and a professional design. Security measures such as HTTPS and a strict Content-Security-Policy are implemented, alongside a consent management platform to comply with cookie regulations. However, explicit privacy policies and terms of service are not found in the provided content, and contact information is absent, which could impact user trust and compliance. Overall, the site is well-structured, performant, and trustworthy, serving its target audience effectively.
Bauhaus Universität Weimarbauhaus4.eu
Education · Germany
62Medium
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
Bauhaus4EU is a European University Alliance hosted by Bauhaus Universität Weimar, offering a broad range of interdisciplinary courses and academic activities across ten European universities. The alliance focuses on innovative education in sustainability, digital transformation, culture, and leadership, targeting students, academics, and university staff. The website is built on TYPO3 CMS and uses modern web technologies to provide a rich user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced but lacks some security headers and cookie consent mechanisms. The domain WHOIS data is privacy protected under EURid policy, which is typical for .eu domains and does not indicate suspicious activity. Overall, the website is trustworthy, professional, and well-positioned as an educational alliance platform.
Bauhaus-Universität Weimarbauhaus-kolloquium.de
Education · Germany
69Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website www.bauhaus-kolloquium.de represents the XV International Bauhaus Colloquium, an academic event organized by Bauhaus-Universität Weimar. It serves as a platform for interdisciplinary research exchange in humanities, arts, and architecture, focusing on the politics of research. The event has a long-standing history dating back to 1976 and is positioned as a niche academic conference with a strong cultural and educational focus. Technically, the website is built on WordPress and hosted on university-managed DNS servers, indicating institutional support and reliability. The site demonstrates good content quality and mobile optimization but lacks advanced SEO and accessibility features. Performance is moderate, with no evident use of modern JavaScript frameworks or analytics tools. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, it lacks visible security headers and published security policies such as privacy, cookie, or incident response policies. No contact information or vulnerability disclosure mechanisms are provided, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and relevant to its academic audience but would benefit from enhanced privacy compliance and security best practices to improve its security posture and user trust.
- SStudierendenwerk Thüringen
stw-thueringen.de
Education · Germany
50Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Studierendenwerk Thüringen is a public law institution dedicated to supporting students in Thuringia, Germany, by providing essential services such as student housing, university dining facilities, financial aid administration, counseling, and cultural programs. The organization serves multiple universities in the region and is a key player in the local education support ecosystem. The website reflects a well-structured and professional digital presence with clear navigation and comprehensive service information tailored to its student audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, and ConsentFriend for cookie management, hosted on Robhost servers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and cookie consent banner adhering to GDPR requirements. Overall, the site is trustworthy, accessible, and professionally maintained, supporting the organization's mission effectively.
ITSCitsc.de
Healthcare · Germany
62Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
ITSC is a well-established German company specializing in digital transformation and IT services for statutory health insurance providers. With over 25 years of experience, ITSC offers a broad portfolio including strategic consulting, application management, business process outsourcing, and AI-driven platform solutions. The company positions itself as a trusted partner in the healthcare sector, leveraging modern technologies and certifications to deliver innovative solutions. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, integrating privacy-conscious analytics via Matomo and a clear cookie consent mechanism using Klaro. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, ITSC maintains strong practices including HTTPS enforcement, ISO 27001 and ISO 9001 certifications, and privacy-focused analytics. However, there is room for improvement in publishing explicit security headers, incident response contacts, and data protection officer details. No critical vulnerabilities or blocking mechanisms were detected. Overall, ITSC presents a professional, trustworthy, and secure digital presence aligned with its business focus. Strategic recommendations include enhancing security header implementation, incident response transparency, and further privacy disclosures to strengthen compliance and trust.
Healthcare · Germany
52Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
inside partner Verlag und Agentur GmbH is a specialized publishing and agency company focusing on the healthcare, social insurance, and health sectors. Established in 2014, it offers media development, agency services, lettershop, and literature management primarily targeting health insurance companies, associations, and institutions. The company positions itself as a trusted and experienced partner with a niche focus, leveraging extensive domain expertise. Technically, the website is built on WordPress using the Avada theme and incorporates modern SEO tools like Yoast SEO and Revolution Slider, indicating a mature digital presence. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in its sector.
Other
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website ad-delivery.net appears to be a minimalistic domain primarily serving static JavaScript files and tracking pixels related to advertising delivery, specifically using prebid.js technology. The domain is registered since 2017 with Cloudflare as the registrar and DNS provider, indicating a stable but anonymous setup with no public business identity or contact information. The site lacks any visible content such as privacy policies, cookie consent mechanisms, terms of service, or contact details, which limits its transparency and trustworthiness. Technically, the site hosts small JavaScript files and a tracking pixel, suggesting its role as an ad delivery or header bidding service. The hosting and DNS are managed by Cloudflare, but no security headers or HTTPS status were provided, raising concerns about security posture. The site does not implement any user-facing forms or data collection interfaces, and no analytics or marketing tools beyond basic ad scripts are detected. From a security perspective, the absence of HTTPS, security headers, and privacy compliance documents are significant weaknesses. The domain registration is consistent and not privacy protected, but the lack of business information and policies reduces credibility. No adult or questionable content is present, and the site is safe for general audiences. Overall, the site scores low on content quality, security, and privacy compliance, reflecting a basic technical setup focused solely on ad delivery functionality. Strategic recommendations include implementing HTTPS with valid SSL certificates, publishing privacy and cookie policies to comply with GDPR, adding contact and incident response information, and improving website content and structure to enhance trust and SEO. These steps would significantly improve the site's security posture, compliance, and business credibility.
dns-bait.com (2×2)dns-bait.com
Other · Denmark
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website dns-bait.com presents minimal content, consisting solely of a single image on a dark background with no textual information, metadata, or interactive elements. The domain WHOIS data shows inconsistencies, including a future creation date and the registrant being a registrar entity rather than an end-user or business, which raises questions about the domain's legitimacy. No privacy, cookie, or terms of service policies are published, and no contact or security-related information is available on the site. Technically, the site lacks security headers, DNSSEC, and advanced configurations, and no analytics or advertising technologies are detected. Overall, the site appears to be either under development, placeholder, or potentially suspicious due to WHOIS anomalies.
healthadvisor.ch GmbHhealthadvisor.ch
Healthcare · Switzerland
69Medium
NIS2 22 · GDPR 68
NIS2 22 · GDPR 68
HealthAdvisor.ch GmbH is a Swiss-based company providing modular practice management software tailored for therapists, coaches, and complementary medicine practitioners. Founded in 2013, the company positions itself as a niche SaaS provider with a strong emphasis on compliance, data security, and user-friendly solutions. Their software supports billing according to Swiss Tarif 590 and offers features like online appointment booking and 2-factor authentication, hosted securely in Switzerland with ISO 27001 certification. Technically, the website is built on WordPress with a modern theme and plugins supporting SEO, testimonials, and layered sliders. The infrastructure is hosted in Switzerland with a focus on security and privacy, reflected in the cookie consent mechanism and comprehensive privacy policy. Performance is moderate with good mobile optimization and basic accessibility. Security posture is strong with HTTPS enforced, ISO 27001 hosting, and secure authentication options. However, some security headers could be improved, and no explicit incident response or vulnerability disclosure information is found. Privacy compliance is robust with GDPR-aligned policies and cookie management. Overall, the website and business demonstrate high professionalism, trustworthiness, and a clear focus on their target market. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen their security and compliance stance.
Other
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at emr.ch is currently inaccessible, returning a 503 Service Temporarily Unavailable error with minimal HTML content. Due to this, no meaningful content, metadata, or business information can be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or technical infrastructure. Security posture cannot be evaluated beyond noting the absence of visible HTTPS or security headers. The domain uses WHOIS privacy protection, limiting transparency about the registrant. Overall, the site appears inactive or under maintenance, resulting in a low trust and credibility rating.
- Cranio Suisse®
craniosuisse.ch
Healthcare · Switzerland
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Cranio Suisse® is a Swiss professional association representing over 1,300 active Craniosacral therapists. The organization advocates for its members in public and professional policy contexts, emphasizing quality assurance and providing a broad range of member services. The website is well-structured, primarily in German, with additional language options, and offers comprehensive information about the profession, training, and therapy benefits. The association holds a strong market position within the Swiss healthcare non-profit sector, with a founding date consistent with its domain registration in 2007. Technically, the website employs a mature technology stack including Bootstrap 3.3.5, jQuery 1.9.1, RoyalSlider, and Google Tag Manager for analytics and marketing. The CMS used is bestContent 2.1, indicating a custom or specialized content management system. The site is mobile-optimized with good accessibility features such as skip links and responsive menus. Performance is moderate, with room for modernization, especially updating legacy libraries. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam. However, it lacks visible security headers and a formal security or incident response policy. No cookie consent mechanism was detected, which is a compliance gap under GDPR. The site uses Google Analytics and Google Ads, indicating moderate user tracking. No vulnerabilities or suspicious domains were found. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, trustworthy, and well-positioned for its audience but would benefit from enhanced privacy compliance and security hardening to improve its security posture and regulatory adherence.
LANKELEISI FRlankeleisi.fr
Transportation · France
75Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
LANKELEISI FR operates an official e-commerce website specializing in electric bicycles with a focus on dual motor and off-road models, targeting French-speaking consumers. The company offers a range of electric bikes and accessories, backed by a three-year warranty, positioning itself as a reliable brand in the transportation and e-commerce sectors. The website is built on the Shopify platform, leveraging modern web technologies and third-party integrations for customer reviews, marketing, and analytics. The technical infrastructure is robust, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced, cookie consent implemented, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site presents a professional and trustworthy online presence.
Other · France
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
randopedestre.com is a niche French website dedicated to the dissemination and discovery of hiking events both in France and internationally. It provides a free platform for hiking event organizers to publish their events and for hikers to find upcoming hikes via a calendar, search tools, and an interactive map. The website is relatively new, launched in late 2023, and targets hiking enthusiasts and event organizers. Technically, it is built on WordPress using Bootstrap 5 and jQuery, with integrations including Google Maps API, Matomo analytics, and Google AdSense for monetization. SEO is well implemented with Yoast SEO plugin and structured data. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking and advertising. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is functional, professional, and trustworthy for its niche but could improve in security and privacy transparency.