Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
21,301–21,350 of 99,068
David Odenthaldavidodenthal.de
E-commerce · Germany
53Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
David Odenthal operates as a specialized expert and consultant in conversion optimization and behavioral economics, targeting medium-sized enterprises, SaaS providers, and online shops primarily in Germany. The website presents a professional and comprehensive digital presence, leveraging WordPress with Elementor and advanced SEO plugins to deliver a high-quality user experience. The business model focuses on strategic consulting, keynote speaking, and digital growth facilitation through data-driven methods. Technically, the site uses modern web technologies and maintains good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies could be improved. Overall, the site reflects a trustworthy and credible business with strong branding and client testimonials.
Real Estate · Germany
51Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Deutsche Gesellschaft für Home Staging und Redesign® e.V. (DGHR) is a German association dedicated to promoting professional standards and education in the home staging and redesign sector. The website serves as an informational and networking platform for professionals and stakeholders in the real estate staging market in Germany. The site is built on WordPress with SEO optimization via Yoast SEO Premium, indicating a moderate level of digital maturity. The technical infrastructure includes standard web technologies and external services such as Google Maps and FontAwesome for enhanced user experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and compliance aspects.
Website is not foundmangomarketing.de
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.mangomarketing.de currently serves a placeholder page indicating that the site has been unpublished or deleted by the owner. No active business content, contact information, or policies are present. The domain uses name servers associated with rzone.de and is in a 'connect' status, but lacks detailed WHOIS registrant information. The absence of content and security features suggests the website is not operational at this time. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with resources hosted on onecdn.io. There is no evidence of a CMS or advanced frameworks. The page is mobile responsive at a basic level but lacks SEO optimization and accessibility features. No security headers or HTTPS information were detected in the provided data. Security posture is weak due to the lack of HTTPS, security headers, and absence of privacy or cookie policies. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also indicating no active user engagement. The WHOIS data is minimal and does not provide sufficient information to verify legitimacy or business claims. Overall, the website is inactive and does not currently represent an operational business presence. Strategic recommendations include reactivating the website with proper security configurations, publishing privacy and cookie policies, adding contact information, and improving technical and content quality to establish trust and compliance.
- Owners Club
ownersclub.immo
Real Estate · Germany
50Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Owners Club is a German real estate focused platform aiming to increase property ownership rates and provide access to previously inaccessible market segments. The website offers investment webinars, market news, and tools for property owners, targeting investors and homeowners primarily in Germany. The platform uses WordPress CMS with a moderate technical infrastructure including Matomo analytics and social media integrations. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a professional and trustworthy image but could improve in compliance and security transparency.
- BBVFI Akademie
bvfi-akademie.de
Real Estate · Germany
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
BVFI Akademie is a specialized educational platform focused on real estate and professional development training in Germany. It offers a variety of courses including live webinars, video on demand, and in-person seminars, targeting real estate professionals and individuals seeking management and personal growth skills. The website is affiliated with the BVFI Verband, a recognized professional association, enhancing its credibility and market position. Technically, the website is built on the Contao CMS platform and utilizes a modern JavaScript stack including jQuery and related libraries. The site is mobile-optimized with good navigation and user experience, though accessibility features could be improved. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses cookies for session management and CSRF protection. A cookie consent mechanism is implemented, supporting GDPR compliance. However, explicit security headers are missing, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security posture. Overall, the website presents a professional and trustworthy front for its educational services with a solid technical foundation and good privacy compliance. Strategic enhancements in security policies and accessibility would further strengthen its position and user trust.
- DDeutsche Eigentümer Allianz BVFI24
bvfi24.de
Real Estate · Germany
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Deutsche Eigentümer Allianz BVFI24 operates as a real estate community and membership platform targeting property owners, investors, and individuals interested in real estate acquisition primarily in Germany and the D-A-CH region. The website offers networking opportunities, educational content, expert access, and VIP property search services, positioning itself as a modern and comprehensive real estate alliance. Technically, the site is built on a modern stack with CDN delivery, PWA support, and uses Facebook Pixel for marketing analytics. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and incident response information. Privacy compliance is partial due to missing privacy policy and terms of service pages. Overall, the site is professional and trustworthy but could improve transparency and security practices.
- AACCESS RESTRICTED
trainercentralsite.eu
Other
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website trainercentralsite.eu currently displays an access restricted page indicating that the content is blocked and not publicly accessible. The page is branded with a logo and link to trainercentral.com, suggesting a relationship or partnership. Due to the restricted access, no detailed business information, privacy policies, or contact details are available for analysis. The technical infrastructure uses older versions of jQuery and Bootstrap, with no evidence of modern CMS or advanced SEO and accessibility features. Security posture is minimal with no visible security headers or HTTPS status provided. Overall, the site appears professionally registered through MarkMonitor International Limited, indicating legitimacy, but the lack of accessible content limits comprehensive evaluation.
- DDeutsche Immobilienmesse - BVFI
deutsche-immobilienmesse.de
Real Estate · Germany
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Deutsche Immobilienmesse website serves as a comprehensive network and event platform for the German real estate industry, primarily targeting small and medium enterprises and professionals. It offers a variety of services including event listings, webinars, industry news, and educational content. The site is affiliated with the Bundesverband für die Immobilienwirtschaft (BVFI), enhancing its credibility and market position. Technically, the site uses a custom CMS hosted on 1AND1/IONOS infrastructure, integrates modern tracking and marketing tools, and employs CDN for content delivery. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit privacy and terms policies are missing. Overall, the website is professional, well-structured, and trustworthy, but could improve privacy compliance and explicit contact information to enhance user trust and regulatory adherence.
- The Council for Community and Economic Research
stateincentives.org
Government · United States
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.stateincentives.org is operated by The Council for Community and Economic Research and serves as a comprehensive database for state business incentive programs across the United States. It targets businesses, economic researchers, and policymakers seeking detailed information on tax credits, grants, loans, and other incentive programs offered by all 50 states and territories. The platform provides interactive visualizations and up-to-date program data, positioning itself as a niche authoritative resource in the government and non-profit sector. Technically, the site employs a traditional web stack with jQuery 1.11.0 and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The content is well-structured with clear navigation and professional design, although some modern enhancements could improve user experience further. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security policies. No forms with input fields are present on the homepage, reducing immediate attack surface. The absence of explicit cookie consent and privacy policy on the homepage suggests room for improvement in privacy compliance. WHOIS data is unavailable due to a malformed query, limiting domain trust analysis, but the site’s branding and contact information support its legitimacy. Overall, the website presents a solid informational resource with good business credibility but could benefit from enhanced security practices, privacy compliance, and updated technical infrastructure to strengthen trust and user confidence.
wechange eGwechange.coop
Technology · Germany
51Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
wechange eG is a recently founded cooperative based in Germany that develops and operates digital community portals tailored for organizations and municipalities. Their business model focuses on providing cloud-hosted, open source collaboration tools emphasizing data privacy, security, and sustainability. The website is professionally designed using WordPress and Elementor, featuring clear navigation, relevant content, and strong trust signals such as testimonials and partner logos. Technically, the site uses modern technologies and integrates well-known open source tools like Nextcloud, Collabora, BigBlueButton, and Rocket.Chat. Security posture is good with HTTPS and self-hosted EU servers, but could be improved by enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies. Privacy compliance is strong with a comprehensive privacy policy, though a cookie consent mechanism is missing. Overall, the site is trustworthy and well-positioned in its niche.
Non-profit · Germany
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Open Knowledge Foundation Deutschland e. V. is a reputable non-profit organization based in Germany focused on promoting open knowledge, transparency, and civic participation through various digital projects and community initiatives. Their key services include youth technology education, civic tech community building, freedom of information portals, and support for open government data and open source projects. The organization is well-positioned in the non-profit sector with a strong community and trust indicators such as NGOsource certification and membership in Transparency International's Initiative Transparente Zivilgesellschaft. Technically, the website is built using the Hugo static site generator, ensuring fast performance and security benefits. It employs Matomo analytics with cookies disabled, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with a clean and professional design that supports excellent user experience. From a security perspective, the site enforces HTTPS and provides an OpenPGP public key for secure communications. However, it lacks explicit cookie consent mechanisms, a published security policy, incident response contacts, and a vulnerability disclosure policy, which are areas for improvement. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, with minor gaps in privacy compliance and security policy transparency. Strategic improvements in these areas would further enhance their security posture and regulatory compliance.
Spazio50 50&Piùspazio50.org
Media · Italy
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Spazio50 is a specialized Italian media portal dedicated to the over 50 demographic, providing news, articles, and community information on topics such as health, culture, technology, lifestyle, and events. It operates under the Associazione 50&Più, positioning itself as a niche content provider with a focus on senior citizens in Italy. The website features regularly updated content and a webinar calendar, supporting community engagement and information dissemination. Technically, the site is built on WordPress with popular plugins for event management and SEO, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and demonstrates good design and navigation clarity.
- IIn manutenzione
50epiuturismo.it
Other · Italy
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website 50epiuturismo.it currently presents only a maintenance placeholder page in Italian, indicating temporary unavailability. The domain is well-established, created in 2006, and registered with a valid status, suggesting a legitimate business presence. However, the lack of accessible content, metadata, or business information severely limits the ability to assess the company's operations, market position, or services. Technically, the site lacks visible security features such as HTTPS, security headers, or privacy policies, which are critical for user trust and regulatory compliance. The absence of contact information and business disclosures further reduces credibility. Overall, the website is not currently functional for end users or evaluators, and significant improvements are needed to restore full operational status and compliance.
Patronato 50&PiùEnasco50epiuenasco.it
Government · Italy
59Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Patronato 50&PiùEnasco is a well-established Italian social assistance institution providing free assistance and consultancy services primarily related to pensions, social security, disability, and family support. The organization operates nationally with a clear focus on serving Italian citizens, especially workers, pensioners, invalids, and immigrants. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service descriptions. It leverages modern web technologies including WordPress, Bootstrap, and popular plugins for SEO and user engagement. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. However, the site lacks explicit security and incident response policies. Overall, the website is trustworthy, professional, and well-suited to its non-profit social assistance mission.
50&PiùCaf50epiucaf.it
Other · Italy
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
50&PiùCaf is an established Italian fiscal assistance center providing a wide range of tax and social welfare services primarily targeting employees, pensioners, companies, and professionals across Italy. The company has a strong market presence with over 800,000 users annually and offers services including tax declarations, ISEE, IMU, succession declarations, and family collaborator management. The website reflects a professional and consistent brand image with clear service offerings and user engagement features such as contact forms and membership options. Technically, the site is built on WordPress with popular plugins and tracking tools, ensuring a modern and responsive user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and provides transparent contact information, supporting its credibility and trustworthiness.
- EEdison Next
edisonnext.it
Energy · Italy
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Edison Next is a professional energy services company focused on ecological transition and decarbonization, targeting businesses, public administrations, and territories primarily in Italy. The website showcases a broad portfolio of services including sustainable self-production, green gas, energy efficiency, smart city solutions, sustainable mobility, circular economy, and consulting. The company positions itself as a key player in the energy transition market with a strong emphasis on sustainability and innovation. Technically, the website is built on modern frameworks such as Next.js and Material-UI, hosted likely on AWS infrastructure, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site demonstrates good performance, mobile optimization, and basic accessibility features, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses a recognized cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement to enhance trust and compliance. Overall, the website is professional, trustworthy, and aligned with its business goals, but could benefit from enhanced privacy and security transparency to further strengthen its compliance posture and user trust.
Manageritaliamanageritalia.it
Other · Italy
67Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Manageritalia is a professional organization serving managers, executives, and professionals in the tertiary sector including commerce, transport, tourism, and services in Italy. The website positions itself as a key reference point offering membership services, networking events, specialized solutions, and a magazine for its audience. The digital infrastructure is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security and incident response policies are not publicly visible. Overall, the site is professional, trustworthy, and compliant with GDPR cookie regulations, serving a medium-sized organization in Italy.
FederDistribuzionefederdistribuzione.it
Retail · Italy
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FederDistribuzione is a prominent Italian federation representing companies in the modern food and non-food distribution sector. The website serves as a comprehensive platform for institutional information, news, sustainability reports, and publications relevant to its members and stakeholders. The organization positions itself as a key player in advocating for the interests of modern distribution companies in Italy, emphasizing sustainability and regulatory engagement. Technically, the website is built on WordPress with modern libraries such as jQuery and Font Awesome, and integrates Google Tag Manager and Iubenda for analytics and cookie compliance respectively. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit policies could enhance trust and compliance. Overall, the site is professional, content-rich, and trustworthy, with a high legitimacy score based on WHOIS data and domain consistency.
La Bibbia - leggila dal sito ufficiale CEIbibbiaedu.it
Education · Italy
63Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bibbiaedu.it is an Italian educational website dedicated to providing access to official Bible texts and facilitating comparative study of different Bible translations, including Italian, Hebrew, and Greek versions. The platform targets Italian-speaking users interested in religious studies and biblical scholarship. The website offers search functionality and comparison tools for various Bible versions, positioning itself as a niche educational resource in the religious education sector. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Matomo Analytics, and a cookie consent management system, indicating a moderate to advanced digital maturity. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks DNSSEC and visible security headers, suggesting room for improvement in security hardening. No privacy policy or terms of service pages were detected, and no direct contact information is provided on the homepage, which may impact trust and compliance. The domain is well aged, registered since 2000, consistent with the site's educational purpose, and shows no suspicious patterns. Overall, the site is trustworthy and safe, with a solid foundation but could benefit from enhanced privacy and security disclosures.
Other
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.mastercardgiftcard.com is currently inaccessible due to blocking by the Incapsula Web Application Firewall (WAF). The WHOIS lookup failed to return any registration data, indicating the domain may not be registered or is using privacy protection that is not publicly disclosed. The site contains minimal HTML content with no visible business information, contact details, or policies. This severely limits the ability to assess the business, technical infrastructure, or security posture. The lack of HTTPS information, security headers, and privacy compliance further compounds the risk profile. Overall, the site appears non-functional or under protection, raising significant trust and legitimacy concerns.
Other
70Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website careasy.org is currently inaccessible, returning a 403 Forbidden error with minimal HTML content indicating access denial. This prevents any meaningful content or metadata extraction. The domain is registered with GoDaddy.com, LLC since 2011, showing a stable and consistent registration history without privacy protection. However, the lack of accessible content, absence of privacy and cookie policies, and missing contact information significantly limit the ability to assess the business or security posture. Technically, no security headers or HTTPS information were available, suggesting potential security weaknesses. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user and security experience.
Other
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website givingproperty.org is currently inaccessible, returning a 403 Forbidden error with minimal content, indicating restricted or blocked access. The domain is registered with GoDaddy.com, LLC since February 2022, which is consistent with a relatively new business or project. Due to the lack of accessible content, no business description, services, or contact information can be determined. The website lacks metadata, scripts, forms, or any visible technologies, suggesting it is either under development or improperly configured. From a technical perspective, the site shows no evidence of modern web technologies, security headers, or SSL configuration details. DNSSEC is not enabled, and no privacy or cookie policies are present. The absence of contact or social media information further limits the ability to assess business credibility or user engagement. The security posture is weak due to the lack of visible security best practices and the blocked content. Overall, the risk assessment is elevated due to the inability to verify the website's legitimacy or content. The domain registration is transparent and consistent, but the inaccessible website content and missing policies reduce trustworthiness. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, improving website accessibility, and ensuring proper security headers and configurations to enhance trust and compliance.
Channeltivitychanneltivity.com
Technology
72Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Channeltivity is a technology company specializing in Partner Relationship Management (PRM) software and partner portals, targeting technology companies and channel partner teams. Their market position is that of a recognized leader offering enterprise-grade, user-friendly SaaS solutions that enable partner enablement, channel marketing, and sales automation. The website demonstrates a mature digital presence with a WordPress CMS, AngularJS frontend components, and integrations with modern marketing and analytics tools such as Google Tag Manager and Iubenda for privacy compliance. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional website and business presence. Overall, the site is well-designed, content-rich, and compliant with GDPR and cookie regulations.
Semesterspiegelsemesterspiegel.de
Media · Germany
64Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Semesterspiegel is a German student-run media platform primarily serving the university community in Münster. It offers a variety of articles covering politics, culture, campus life, and society, supplemented by a weekly newsletter and opportunities for student involvement. The website is built on WordPress and hosted by Variomedia, utilizing modern web technologies and privacy-respecting analytics via Matomo. The site demonstrates good content quality, consistent branding, and a clear focus on its target audience of university students and young adults. Security practices include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response disclosures. Overall, the domain registration and hosting details align well with the website's purpose, indicating a legitimate and trustworthy operation.
Government · Italy
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.turchia.it serves as the official cultural and tourism information portal of the Turkish Embassy's Cultural and Information Office in Italy. It provides comprehensive information about Turkey's destinations, cultural heritage, events, and UNESCO sites, targeting general audiences interested in Turkish tourism and culture. The site is positioned as an authoritative source for promoting Turkey's tourism in Italy, leveraging official branding and social media channels to enhance outreach. Technically, the website is built on WordPress using the Elementor page builder and Yoast SEO plugin, indicating a modern and maintainable infrastructure. It employs Google Analytics and Google Tag Manager for analytics and tracking, with asynchronous script loading to optimize performance. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. No incident response or vulnerability disclosure information is provided, which could be improved to bolster trust. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security header implementation. Addressing these gaps would improve the site's security posture and regulatory adherence.
- VVisit Greece
visitgreece.gr
Hospitality · Greece
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
VisitGreece.gr is the official tourism website for Greece, providing comprehensive travel inspiration, guides, event information, and destination details to tourists worldwide. The site is well-positioned as a government-backed platform promoting Greek tourism, offering rich content tailored to various traveler interests including culture, gastronomy, nature, and leisure. The website demonstrates a mature digital infrastructure with modern JavaScript libraries, analytics tools, and a responsive design optimized for accessibility and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, professional, and serves as a key resource for travelers planning visits to Greece.
Finance
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website oppwa.com currently presents no accessible content, metadata, or visible information, indicating it may be blocked, under maintenance, or misconfigured. The domain is registered since 2014 with RegistryGate GmbH and uses Akamai name servers, suggesting a stable and legitimate registration. However, the lack of any visible content or security and privacy policies severely limits the ability to assess the business or security posture from the website itself. The absence of HTTPS and security headers further reduces the security posture score. Overall, the site appears to be either inactive or protected by a web application firewall or security mechanism that blocks content access. From a technical perspective, the site shows no detectable technologies, scripts, or analytics, indicating minimal digital maturity or a placeholder state. The domain age and registration details are consistent with a legitimate business, but no business information or contact details are available on the site to confirm this. Security-wise, the lack of HTTPS, security headers, and privacy documentation are critical gaps. No incident response or vulnerability disclosure information is present. The domain does not use DNSSEC, which is a recommended security enhancement. The overall risk is elevated due to the lack of transparency and content, and strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, and providing contact and security information to improve trust and compliance.
- Electronic Security Association
esaweb.org
Technology
65Medium
NIS2 47 · GDPR 85
NIS2 47 · GDPR 85
The Electronic Security Association (ESA) operates a professional membership website focused on providing training, advocacy, savings, and services to companies in the electronic security industry. With a domain established in 2009 and a large membership base employing over 500,000 professionals, ESA holds a strong market position as an industry association. The website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for enhanced user experience and marketing integration. The site is mobile optimized and SEO friendly, supporting its outreach and member engagement goals. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks advanced security headers and DNSSEC, which are recommended for improved resilience. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected in the main content. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security hardening would enhance its compliance and risk profile.
Stand Up To Cancerstanduptocancer.org
Non-profit · United States
75Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Stand Up To Cancer is a well-established non-profit organization focused on raising awareness and funding innovative cancer research. The website serves as a platform for donations, fundraising campaigns, and educational resources targeting the general public, cancer patients, and researchers. The organization holds a strong market position as a leader in cancer research funding with a large audience and multiple partnerships. Technically, the website is built on WordPress using the Avada theme and integrates several modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Overall, the website is professional, trustworthy, and effective in its mission, but could improve transparency and security documentation.
- VVIVOTEK Inc.
vortexcloud.com
Technology · Taiwan
68Medium
NIS2 67 · GDPR 53
NIS2 67 · GDPR 53
VORTEX, operated by VIVOTEK Inc., is a leading provider of AI-powered cloud surveillance solutions designed to enhance security operations through advanced video analytics, real-time alerts, and seamless cloud integration. The platform targets businesses seeking scalable and hybrid cloud surveillance capabilities, leveraging over 20 years of security expertise from its parent company. The website demonstrates a mature digital presence with comprehensive content, professional design, and clear navigation, reflecting a strong market position in the technology security sector. Technically, the site employs modern frameworks such as Astro, integrates multiple analytics and marketing tools, and is likely hosted on AWS, supported by AWS certifications and partnerships. Security posture is robust, with HTTPS enforced, certifications like ISO 27001, and cookie consent mechanisms, although some security headers could be explicitly confirmed or enhanced. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall trust indicators and business information support a credible and professional operation. Strategic recommendations include publishing an incident response policy, enhancing security header implementation, and increasing transparency on data retention and vulnerability disclosures.
Consisto GmbHgossensass.org
Hospitality · Italy
52Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website www.gossensass.org serves as a comprehensive tourism portal for Colle Isarco/Gossensass, a mountain holiday destination in South Tyrol, Italy. It offers detailed information about local attractions, activities, events, and leisure options, targeting tourists and holiday visitors. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages to cater to an international audience. The business model focuses on regional tourism promotion, leveraging partnerships with nearby tourism sites to enhance visitor engagement. Technically, the website is built on the Consisto CMS platform using ASP.NET Web Forms technology. It integrates modern web technologies including Google Tag Manager and Google Analytics for tracking and marketing purposes, alongside a GDPR-compliant cookie consent management system by Avacy. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is unavailable or privacy protected, which is common for such business types and does not raise immediate concerns given the professional nature of the site. Overall, the website presents a low-risk profile with strong privacy compliance and a trustworthy business presence. Strategic recommendations include enhancing security headers, auditing third-party scripts regularly, and improving accessibility features to further strengthen the site's security posture and user experience.
- RRETE BLU S.p.a
play2000.it
Media · Italy
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Play2000.it is a media streaming website operated by RETE BLU S.p.a, an Italian media company based in Rome. The site offers live TV streaming, program schedules, and entertainment news primarily targeting a general Italian-speaking audience. The business is positioned as a reputable media content provider with consistent branding and a clear focus on quality content delivery. Technically, the website is built using modern frameworks such as Next.js and React, with integrations for cookie consent and user analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. WHOIS data confirms the legitimacy of the domain and company, with no privacy protection masking registrant details. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
- BBlend-a-dent
blend-a-dent.de
Healthcare · Germany
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Blend-a-dent is a well-established brand specializing in denture adhesives and related dental care products, operating under the Procter & Gamble family. The website targets German-speaking denture wearers, providing detailed product information, usage instructions, and customer support through a contact form. The brand leverages strong market positioning with international sister brands and partners such as Oral-B and For Me. Technically, the site is built on modern frameworks like Next.js, hosted on Microsoft Azure, and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security practices, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates good content quality, professional design, and compliance with GDPR through consent overlays, but lacks explicit privacy and cookie policy pages. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Other · Italy
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website felirent.it is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked or restricted. The page served is minimal, containing only an error message and no business or contact information. The domain is registered since 2018 and appears legitimate based on WHOIS data, but no registrant details are publicly available. The lack of DNSSEC and security headers suggests limited security hardening. No privacy, cookie, or terms of service policies are present, and no forms or tracking technologies are detected. Overall, the website's digital presence is minimal and inaccessible, preventing a full assessment of business operations or security posture.
- WWaiting for the redirectiron...
devellis.it
Other · Italy
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website devellis.it currently presents a Cloudflare security challenge page, blocking direct access to its main content. The domain is well-established, registered since 2000, and protected with DNSSEC, indicating legitimate ownership. However, the visible content is minimal and primarily technical, showing outdated CMS technologies such as Joomla 1.5 and WordPress 2.5, which are known to have multiple security vulnerabilities. No privacy, cookie, or terms of service policies are found, and no contact information is publicly available, limiting transparency and trust. The site uses Cloudflare and BitNinja for security and analytics, but lacks modern security headers and best practices in visible content. Overall, the site’s security posture is moderate due to HTTPS and DNSSEC but weakened by outdated software and lack of visible policies.
- 1Stack Cloud
1stack.cloud
Technology
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
1Stack Cloud is a small cloud solutions provider targeting channel partners and resellers, founded in 2020. The website presents a minimalistic design with a clear focus on cloud solutions for the channel but lacks detailed business or contact information. The technical infrastructure uses common front-end libraries such as Bootstrap and Font Awesome, and integrates Google Analytics for visitor tracking. Hosting details are unclear, with name servers pointing to dynamic DNS domains. Security posture is basic, with no DNSSEC enabled, no visible security headers, and no published privacy or cookie policies. The domain registration is consistent with the business age and shows no privacy protection, indicating transparency in ownership. Overall, the website is functional but lacks comprehensive content, security best practices, and compliance documentation.
Consisto GmbHratschings-jaufen.it
Transportation · Italy
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website www.ratschings-jaufen.it serves as a professional digital portal for the Ratschings-Jaufen ski area in Italy, offering comprehensive information about winter sports, mountain cableways, and related tourism services. The site targets winter tourists, families, and nature enthusiasts, positioning itself as a regional leader with modern infrastructure and a variety of winter activities. The business model revolves around tourism and transportation services in the mountain region, supported by partnerships with ski schools and local tourism entities. Technically, the site is built on the Consisto CMS platform, utilizing modern JavaScript libraries and Google Analytics for tracking. The design is responsive and user-friendly, with good SEO and accessibility practices, although some improvements are possible. Security-wise, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms, but lacks explicit published security policies or incident response contacts. Overall, the domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.
- Museo miniere Alto Adige
museominiere.it
Other · Italy
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Museo miniere Alto Adige operates a provincial mining museum with four physical locations in the South Tyrol region of Italy. The museum offers cultural, educational, and historical exhibitions focused on mining heritage, targeting a general audience including tourists and local visitors. The website is professionally designed, mobile-optimized, and provides clear navigation to various museum sites and programs. Technically, the site uses modern JavaScript libraries such as jQuery, Owl Carousel, and PhotoSwipe, and integrates analytics tools like Matomo and Facebook Pixel with a compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website reflects a trustworthy and legitimate regional cultural institution with a strong digital presence.
Tourismusverein Ratschingsracines.info
Hospitality · Italy
60Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website www.racines.info is a professionally designed tourism portal focused on promoting the Racines region in Italy. It provides comprehensive information about outdoor activities, family programs, ski facilities, sustainability initiatives, and local culture. The site targets tourists interested in mountain vacations, families, and outdoor enthusiasts. Technically, it is built on the Consisto CMS platform, uses modern JavaScript libraries, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and employs a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and standard security headers present, though it lacks explicit security policy or incident response pages. WHOIS data is privacy-protected, which is typical for this business type and does not raise immediate concerns. Overall, the site is trustworthy, well-maintained, and suitable for its audience.
Consisto GmbHcolleisarco.org
Hospitality · Italy
52Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website www.colleisarco.org serves as a regional tourism portal for Colle Isarco, a mountain vacation destination in Alto Adige, Italy. It provides comprehensive information about local activities, events, and accommodations targeting families and tourists interested in mountain holidays. The site is professionally designed with multilingual support and clear navigation, enhancing user experience. Technically, it is built on ASP.NET Web Forms with a modern CMS (Consisto.CMS), integrates Google Analytics and Tag Manager for analytics, and uses AVACY for cookie consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly visible. The domain WHOIS data is privacy protected, which is common for such websites, and no suspicious indicators were found. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its niche.
- Ccrossengage.io | 523: Origin is unreachable
crossengage.io
Other
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website crossengage.io is currently inaccessible due to a Cloudflare 523 error indicating that the origin server is unreachable. This prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered since 2015 with privacy protection via NameCheap, and DNS is managed through Cloudflare. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or security posture. The technical infrastructure relies on Cloudflare for DNS and security, but the origin server appears offline or misconfigured, causing the site to be blocked. Security posture is weak due to the unavailability of the site and absence of security headers or policies. Overall, the risk is elevated due to lack of transparency and accessibility, and the site requires urgent remediation to restore service and enable proper evaluation.
GSMA Intelligencegsmaintelligence.com
Telecommunications · United Kingdom
68Medium
NIS2 29 · GDPR 65
NIS2 29 · GDPR 65
GSMA Intelligence is a leading provider of telecom industry data, insights, and research, empowering the global mobile ecosystem with comprehensive intelligence to drive innovation and strategic investments. The website offers a rich data platform, extensive research reports, custom consulting services, and authoritative mobile network coverage data. The target audience includes mobile operators, regulators, governments, enterprises, investors, and researchers worldwide. Technically, the site is built on modern frameworks such as Next.js, uses industry-standard libraries and tools, and implements strong privacy and cookie consent mechanisms. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility, but the absence of WHOIS data raises a moderate concern regarding domain registration transparency.
The Eli and Eydthe Broad Foundationbroadfoundation.org
Non-profit · United States
67Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
The Eli and Edythe Broad Foundation is a well-established philanthropic organization focused on entrepreneurship for the public good in education, science, and the arts. Founded in 1999, it operates primarily in the United States with a large organizational size and a strong market position supported by flagship initiatives and a 50-year history of giving. The website reflects a professional and consistent brand image, targeting non-profit organizations, educational institutions, and the general public interested in philanthropy. Technically, the site is built on WordPress and leverages modern JavaScript libraries and optimization tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and domain registration protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy and safe, with no adult or questionable content detected.
Discovered USA, Inc.discovered.tv
Media · United States
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Discovered USA, Inc. operates discovered.tv, a globally connected digital platform and social network designed to empower filmmakers, musicians, and content creators by providing a revenue-sharing model. The platform offers live streaming, video on demand, and social networking features, targeting creators and fans seeking to monetize and engage with media content. The company has established a moderate market position within the media streaming niche, emphasizing creator monetization and community engagement. Technically, the website employs modern web technologies including jQuery, Bootstrap, and integrates with multiple app platforms such as Android, iOS, Roku, and Amazon Appstore. Hosting and DNS services leverage Cloudflare for performance and security. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism detected. Overall, the platform demonstrates a good level of professionalism and technical maturity suitable for its business model.
- CCTV Camera Pros
viewtron.com
Technology
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
CCTV Camera Pros operates an e-commerce website specializing in Viewtron security cameras and video surveillance systems. The company positions itself as the exclusive world supplier of Viewtron products, targeting businesses and consumers seeking advanced security solutions. The website offers a broad catalog of products, including custom systems, IP cameras, DVRs, and accessories, supported by consultation and software resources. Technically, the site is built on the Volusion e-commerce platform, leveraging modern JavaScript libraries such as jQuery and Google Analytics for tracking. The site is mobile-optimized with good navigation and professional design. Security-wise, HTTPS is enabled, but advanced security headers are not detected, and privacy compliance documentation is missing, which could be improved. The absence of WHOIS data reduces domain trustworthiness, but the website content and technology usage suggest a legitimate business presence. Overall, the site demonstrates moderate digital maturity with room for enhancements in privacy and security practices.
- Hanwha Group
hanwha.com
Energy · South Korea
66Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hanwha Group is a large South Korean conglomerate with diversified business sectors including clean energy, aerospace, finance, and retail services. The website presents a professional and comprehensive digital presence with rich multimedia content, clear navigation, and global reach indicators. Technically, the site uses modern tracking and performance monitoring tools such as Google Tag Manager and Akamai Boomerang, hosted likely on Akamai infrastructure, ensuring fast and responsive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response contacts are not clearly published. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the strong corporate branding and content quality. Overall, the website is professional, secure, and compliant with privacy regulations, serving a global audience effectively.
Other
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website at geovision.com is currently inaccessible, returning a 403 Forbidden error page served by openresty. Due to this access restriction, no meaningful content, metadata, or business information can be extracted or analyzed. The lack of accessible content prevents assessment of the company's business model, services, or market position. Technically, the site shows no evidence of modern web technologies, security headers, or compliance policies. The security posture is unknown but likely poor given the absence of visible HTTPS or security best practices. Overall, the site presents a high risk due to lack of transparency and accessibility, and further analysis requires direct access or cooperation from the site operators.
Technology · China
68Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
ShenZhen Foscam Intelligent Technology Co.,Ltd. is a well-established company founded in 2007 specializing in the design, manufacture, and distribution of IP video cameras and home security solutions globally. The company has a strong market presence with distribution in over 80 countries and millions of products sold. Their offerings include a broad range of security cameras, cloud storage services, and video management systems, targeting both consumer and business markets. The website reflects a professional and consistent brand image with clear navigation and relevant content.
D-Linkdlink.com
Technology · Finland
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
D-Link is a well-established technology company specializing in smart home, SMB, and enterprise networking solutions. Their website targets a broad audience including home users, small to medium businesses, and enterprise customers, offering products such as Wi-Fi routers, smart cameras, switches, and business network management solutions. The company maintains a consistent brand presence with multiple regional language versions and a professional website design. The technical infrastructure leverages modern JavaScript frameworks like React, integrates Google Tag Manager and TrustArc for consent management, and uses New Relic for performance monitoring. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers are not explicitly visible. Privacy compliance is strong with clear policies and GDPR consent management. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the website is professional, secure, and compliant, supporting D-Link's market position as a trusted technology provider.
- airbank.co.uk
cpplus.com
Other
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website airbank.co.uk currently serves primarily as a parked domain with minimal content and advertising placeholders. There is no substantive business information, contact details, or user engagement features present. The domain is registered since 2014 with Dynadot, indicating a stable registration but no clear business presence or branding. Technically, the site uses basic HTML, CSS, and JavaScript with Google Adsense and Bodis advertising scripts integrated. The site lacks modern CMS or frameworks and shows only basic mobile optimization and accessibility features. Security posture is weak with no security headers detected and no cookie consent mechanisms, despite having a privacy policy page. No forms or data collection mechanisms are present, reducing risk but also limiting business functionality. Overall, the site appears to be a placeholder or parked domain rather than an active business website.