Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
34,551–34,600 of 99,067
Nicosia Book Fest | Book Festival | Park Akropolis, Strovolosnicosiabookfest.com
Other
68Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
The website www.nicosiabookfest.com appears to be a minimal or placeholder site built on the Wix platform, likely intended for a book festival event. However, the domain WHOIS data indicates that the domain is not registered or the data is unavailable, which raises significant concerns about the legitimacy and operational status of the website. The site lacks critical business information such as contact details, privacy policies, cookie consent mechanisms, and terms of service, which are essential for trust and compliance. Technically, the site uses Wix's standard JavaScript libraries and polyfills but does not demonstrate advanced SEO, accessibility, or security configurations. The absence of HTTPS and security headers further weakens the security posture. Overall, the site is not currently suitable for professional or public use without significant improvements in registration legitimacy, security, privacy compliance, and business transparency.
Media · Greece
70Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website www.amna.gr represents the Αθηναϊκό - Μακεδονικό Πρακτορείο Ειδήσεων, a prominent Greek national news agency providing timely and reliable news coverage from Greece, Europe, and worldwide. The site targets a general audience interested in news and media content, offering continuous updates and news distribution services. The business model centers on news reporting and media content provision, positioning itself as a key player in the Greek media sector. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, and Cookiebot for GDPR compliance. The presence of multiple third-party integrations such as Echobox and Spotify indicates a mature digital infrastructure. The site is mobile-optimized with good SEO practices and a moderate performance profile. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism with granular user controls, reflecting good privacy compliance. However, explicit security headers are not detected in the provided content, and no published security or incident response policies were found. No critical vulnerabilities or exposed sensitive data were identified. Overall, the website demonstrates a solid risk posture with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and improving accessibility features to further strengthen the security and compliance posture.
- DDefault Web Site Page
dnsireland.com
Other
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The domain dnsireland.com is registered since 2004 with eNom, LLC as the registrar and has a long registration period until 2029. However, the website currently serves a default cPanel placeholder page indicating that no active website content is deployed. The page provides minimal information, primarily a contact email for the webmaster and some generic troubleshooting instructions related to DNS and server configuration. There is no business description, branding, or services presented on the site. The technical infrastructure is basic, relying on standard HTML and CSS with cPanel hosting indications but lacks modern CMS or frameworks. Mobile responsiveness is present but limited by the lack of content. From a security perspective, the site does not show evidence of HTTPS enforcement or security headers, and no forms or interactive elements are present to secure. No privacy, cookie, or terms of service policies are found, indicating poor compliance with privacy regulations. WHOIS data is consistent and public, showing no privacy protection but also no registrant organization details. The domain age is appropriate for a mature domain but the lack of active content reduces trustworthiness. Overall, the website is not currently operational as a business or service platform. The security posture is weak due to missing HTTPS and security headers, and privacy compliance is absent. The site appears to be parked or under maintenance. Strategic recommendations include deploying actual website content, enabling HTTPS, adding privacy and cookie policies, and implementing security best practices to improve trust and compliance.
- captcha.eu
captcha.at
Technology
54Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
Captcha.eu is a specialized technology provider offering GDPR-compliant bot protection solutions as an alternative to traditional services like reCAPTCHA. The company targets website owners and developers who require privacy-focused, compliant bot and spam protection. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and accessibility. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is emphasized with comprehensive privacy and cookie policies and consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the site is trustworthy and professional, with a legitimacy score supported by consistent branding and privacy focus.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website lex4web.app currently presents only minimal content consisting of a simple Spanish greeting with no additional business or service information. The lack of metadata, structured data, or contact details indicates a very early or placeholder stage of development. The technical infrastructure cannot be fully assessed due to the absence of scripts, technologies, or security headers in the provided HTML snippet. No evidence of HTTPS or SSL configuration was found, which is a critical security deficiency. The WHOIS data is privacy protected, limiting transparency about the registrant and reducing trustworthiness. Overall, the website lacks essential elements for business credibility, user engagement, and compliance with privacy regulations.
Advokatfirmaet Wiersholmwiersholm.no
Finance · Norway
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Advokatfirmaet Wiersholm is a leading Norwegian fullservice law firm specializing in business law, serving a broad range of clients across industries with expert legal advice and complex assignments. The firm is well-established with a domain age of over 20 years and holds a strong market position evidenced by top-tier rankings such as IFLR1000 Tier 1 placements. The website reflects a mature digital presence built on WordPress with modern SEO practices and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements can be made by adding security headers and formal security policies. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-suited for its target audience of business clients and legal professionals.
- Gorrissen Federspiel
gorrissenfederspiel.com
Other · Denmark
62Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Gorrissen Federspiel is an established international law firm based in Denmark, founded in 2006. The firm provides comprehensive legal advisory services across all branches of business law, targeting corporate clients and professionals. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting its market position as a reputable legal service provider. Technically, the site is built on WordPress with a modern tech stack including jQuery, Yoast SEO, and multiple analytics and tracking tools such as Matomo, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized and performs moderately well. Security-wise, the website enforces HTTPS, uses clientTransferProhibited domain status, and employs Cookiebot for GDPR-compliant cookie consent management. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. No explicit security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- GGiant Panda LLC
giantpanda.com
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Giant Panda LLC operates a specialized domain monetization platform focused on helping domain investors and registrars maximize revenue from organic domain traffic. The company combines technology with human review to optimize domain monetization, offering advanced analytics, smarter domain sales tools, and comprehensive traffic revenue extraction. The website presents a professional and consistent brand image with clear service descriptions targeting domain owners and registrars. Technically, the website uses modern web standards including HTML5, CSS3, JavaScript, and Google Fonts, with DNS managed by Cloudflare. The site is mobile optimized and has good SEO practices, though no CMS or major frameworks are detected. Performance is moderate with room for improvement in accessibility and security headers. No analytics or advertising scripts are embedded in the main HTML content. From a security perspective, the domain is well-registered with GoDaddy since 2015 and protected by multiple EPP status locks. However, DNSSEC is not enabled, and no security headers or incident response policies are published. Privacy compliance is partial with a privacy policy and terms of service present but lacking cookie consent mechanisms. No contact information or security contact channels are provided. Overall, the website is trustworthy and professional but could improve security posture and privacy compliance. There are no signs of malicious activity or adult content, making it safe for general audiences.
Amadeus Hospitalitytravelaudience.com
Hospitality
69Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Amadeus Hospitality operates as a provider of destination management software solutions aimed at helping organizations identify visitors, understand their preferences, and engage effectively. The website presents a professional and consistent brand image with a focus on the hospitality sector, targeting destination management organizations and tourism stakeholders. The technical infrastructure is based on WordPress CMS with integration of multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital marketing approach. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit privacy or cookie policies in the analyzed content. The absence of WHOIS data raises concerns about domain registration transparency, though the website content and structured data suggest a legitimate business presence. Overall, the site is well-designed and functional but would benefit from enhanced transparency and security best practices.
WonderPushwonderpush.com
Technology
75Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
WonderPush is a technology company providing push notification services for web, iOS, and Android platforms. Positioned as a subscription-based SaaS provider, it targets developers and businesses seeking scalable and GDPR-compliant push notification solutions. The company emphasizes ease of setup, real-time analytics, automation, and segmentation features. It is a subsidiary of Brevo, enhancing its market credibility. Technically, the website is built on WordPress using the Divi theme, hosted on Google Cloud, and employs Matomo for analytics, reflecting a modern and privacy-conscious infrastructure. Security posture is generally good with HTTPS enforced and open-source SDKs, but lacks explicit security headers and published security policies. The absence of WHOIS data is a concern for transparency but is somewhat mitigated by strong branding and client references. Overall, the website is professional, well-structured, and trustworthy, though improvements in privacy disclosures and security transparency are recommended.
- Televiziunea Română
tvrplus.ro
Media · Romania
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TVR+ is the official video portal of Televiziunea Română, Romania's national public broadcaster. The website offers live streaming and recorded content from multiple TVR channels, targeting a general audience with a focus on cultural, news, and entertainment programming. The platform is well-branded and consistent with the parent organization's identity, serving as a key digital extension of TVR's broadcast services. Technically, the site employs modern web technologies including Bootstrap, jQuery, Flowplayer for video streaming, and HLS.js for adaptive streaming. Hosting and DNS services leverage Cloudflare and a CDN for video delivery, ensuring moderate performance and good mobile optimization. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS and implements some best practices like frame busting. However, it lacks DNSSEC, explicit security headers, and formal privacy or cookie policies, which are important for compliance and user trust. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, TVR+ presents a professional and trustworthy digital presence aligned with a large public media entity. The main risks relate to privacy compliance and security hardening, which should be addressed to enhance user trust and regulatory adherence.
- Eurovision Sport
eurovisionsport.com
Media
71Medium
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
Eurovision Sport operates as a free streaming platform specializing in live and on-demand sports content from around the world. The service targets sports enthusiasts seeking accessible, subscription-free sports viewing across multiple devices. The platform leverages modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure, and integrates popular analytics and marketing tools such as Hotjar, Google Tag Manager, Facebook Pixel, and TikTok Pixel. The website demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and domain locking in place, though DNSSEC is not enabled and no explicit security or privacy policies are published. The absence of direct contact information and privacy policy documents represents a compliance gap. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.
- BBorlabs GmbH
borlabs.io
Technology · Germany
64Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Borlabs GmbH is a German technology company specializing in premium WordPress plugins focused on GDPR compliance, website caching, and form double opt-in solutions. Established since 2006 with plugin development since 2016, Borlabs has positioned itself as a trusted provider in the WordPress ecosystem, leveraging Paddle.com for secure payment processing. The website demonstrates a mature digital presence with active content updates and social media engagement. Technically, the site is built on WordPress with a modern tech stack including popular plugins and themes, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is professional, trustworthy, and well aligned with its business objectives.
START Munich & Legal Tech Colabhacking-legal.org
Technology · Germany
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Hacking Legal is a specialized event platform organizing a Legal Tech Hackathon in Munich, targeting students and young professionals interested in law and technology. The event is hosted by reputable organizations including START Munich, Liquid Legal Institute, and Legal Tech Colab, positioning it well within the niche legal tech innovation market. The website provides comprehensive event information, registration via a contact form, and leverages modern web technologies such as Webflow and Cloudflare Turnstile CAPTCHA for user experience and security. The domain registration aligns with the event timeline, indicating a legitimate and planned launch. Security posture is moderate with HTTPS enforced and anti-bot measures in place, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy linked via a partner site but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.
- V
Media · Germany
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Verlag C.H.Beck GmbH & Co. KG is a well-established Munich-based publishing company specializing in legal, tax, business, literature, and scientific publications. The website serves as a central hub linking multiple specialized platforms including online legal databases, e-commerce book sales, educational seminars, and job market services. The company targets professionals in law, tax, business, academia, and students, positioning itself as a leading media group in Germany with a diversified digital presence. Technically, the website employs modern web technologies such as jQuery and Bootstrap, hosted on Microsoft Azure DNS infrastructure. It integrates Usercentrics for GDPR-compliant cookie consent and uses Matomo analytics with user consent mechanisms, reflecting a mature digital infrastructure. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers in the HTML response. No vulnerabilities or exposed sensitive data were detected. The absence of published incident response contacts or vulnerability disclosure policies suggests room for improvement in security transparency. WHOIS data aligns well with the website's claims, indicating legitimacy and consistent domain registration. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized audience with high-quality content and services. Strategic improvements in security headers, incident response visibility, and accessibility could further enhance trust and resilience.
- Bayerische Staatsregierung
bayern.de
Government · Germany
57Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website www.bayern.de serves as the official digital portal for the Bavarian State Government, providing comprehensive information on government activities, citizen services, press releases, and political topics relevant to the Free State of Bavaria. It targets citizens, media, and stakeholders interested in Bavarian governance and public affairs. The portal is well-positioned as a trusted government source with a large audience and extensive content offerings. Technically, the site is built on WordPress 6.8.2, leveraging modern front-end libraries such as Bootstrap, jQuery, and Owl Carousel for responsive and interactive user experience. It integrates Matomo Analytics with explicit user consent, ensuring privacy compliance. Accessibility features such as easy language, sign language support, and read-aloud functionality demonstrate a commitment to inclusivity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, it lacks visible security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its audience. Strategic improvements in security headers and incident response transparency would further strengthen its security stance.
UnternehmerTUM GmbHunternehmertum.de
Technology · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
UnternehmerTUM GmbH is a prominent European center for innovation and entrepreneurship, established in 2002 and closely affiliated with the Technical University of Munich. The organization supports startups, founders, and established companies by providing acceleration, incubation, funding, and networking services. Their market position is strong, with a large-scale operation and multiple subsidiaries focused on various innovation and venture activities. The website reflects a mature digital presence with excellent content quality, professional design, and comprehensive service offerings targeting entrepreneurs and innovators. Technically, the website employs modern JavaScript frameworks, consent management tools, and analytics services while being hosted on reputable infrastructure. The site is mobile-optimized, fast, and SEO-friendly, indicating a high level of digital maturity. Security posture is solid with HTTPS enforcement and privacy compliance, though there is room for improvement in explicit security headers and incident response transparency. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness. Strategically, UnternehmerTUM should consider enhancing their security documentation, adding vulnerability disclosure policies, and publishing incident response contacts to further strengthen trust and compliance. Their digital infrastructure and business model position them well for continued leadership in the innovation ecosystem.
- Tally BV
tally.so
Technology · Belgium
67Medium
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Tally BV operates a modern, privacy-conscious online form builder platform accessible globally. Founded in 2020 and headquartered in Belgium, Tally offers a freemium SaaS model with a strong emphasis on unlimited free forms and submissions, advanced features like conditional logic, e-signatures, payments, and extensive integrations with popular productivity tools. The company positions itself as a user-friendly and GDPR-compliant alternative to traditional form builders, targeting creators, product teams, marketers, HR, and office users. The website is professionally designed, mobile-optimized, and rich in content, including testimonials and social proof, reinforcing its market credibility. Technically, the platform leverages modern web technologies including React and Next.js, hosted with Cloudflare DNS and integrated with Stripe for payments and automation platforms like Zapier, Make, and Pipedream. The site demonstrates good SEO, accessibility, and performance characteristics. Security practices are robust with HTTPS enforced, data encryption in transit and at rest, and hosting within the EU to comply with GDPR. However, there is room for improvement in publishing explicit security policies, incident response information, and enabling DNSSEC. The security posture is strong with standard security headers and privacy-friendly design, but lacks a dedicated vulnerability disclosure program and cookie consent mechanism. The WHOIS data aligns well with the business claims, showing consistent domain registration and no privacy protection, indicating transparency. Overall, the risk profile is low with no detected vulnerabilities or suspicious patterns. Strategic recommendations include enabling DNSSEC, publishing a formal security policy and incident response page, implementing a cookie consent banner, and establishing a vulnerability disclosure program to further enhance trust and compliance.
AJdG Solutionsajdg.solutions
Technology
67Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
AJdG Solutions is a small technology company specializing in the development and sale of WordPress, ClassicPress, and WooCommerce plugins, with a flagship product line including AdRotate Pro and AdRotate Banner Manager. The company targets website owners, bloggers, small businesses, agencies, and newspapers seeking to manage advertising campaigns and enhance website functionality. The business model is primarily software sales supplemented by support and installation services, with a market position as a niche leader trusted by over 50,000 users. Technically, the website is built on WordPress using the Storefront theme and WooCommerce platform, leveraging jQuery and PHP technologies. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. Analytics are handled via a self-hosted Matomo instance, reflecting a privacy-conscious approach. The website includes comprehensive metadata, structured data, and SEO optimizations. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. The absence of a security.txt file and direct contact information for security incidents suggests room for improvement in transparency and readiness. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits external verification of domain ownership. Overall, AJdG Solutions presents a professional, trustworthy online presence with solid technical foundations and good privacy practices. Strategic recommendations include enhancing security headers, publishing incident response information, and improving contact transparency to further strengthen trust and compliance.
ARD Plusardplus.de
Media · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
ARD Plus is a German streaming platform offering a rich catalog of German TV classics, children's films, and the largest Tatort archive. The service targets a general audience interested in German television history and culture, positioning itself as a key player in the German media streaming market. Technically, the website employs modern React technology, is hosted on Amazon AWS infrastructure, and uses HTTPS with Cloudfront CDN for media delivery, indicating a mature digital infrastructure. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The security posture is moderate with room for improvement in headers and incident response transparency. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.
Media · Germany
73Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Sportschau.de is a leading German sports media platform affiliated with ARD, providing comprehensive sports news, live tickers, videos, results, and podcasts primarily targeting German-speaking sports fans. The website demonstrates a mature digital infrastructure with modern web technologies, optimized performance, and responsive design. Security posture is strong with HTTPS enforcement and likely security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the German sports media market.
CleverReach GmbH & Co. KGcleverreach.com
Technology · Germany
54Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
CleverReach GmbH & Co. KG operates a professional email marketing platform targeting businesses and marketers primarily in Europe. The website offers multilingual support and country-specific content, reflecting a mature SaaS business model established since 2007. The company positions itself as a reliable provider in the email marketing technology sector with a medium-sized business footprint based in Germany. Technically, the website is built on WordPress with modern web standards including HTML5, CSS3, and JavaScript, and demonstrates good mobile optimization and user experience. However, the site lacks visible security headers, privacy and cookie policies, and explicit contact information, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is professional but could improve in security and privacy transparency.
- バイク買取ショップバブル
one-trust.com
Transportation · Japan
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website represents a small Japanese motorcycle buying business named バイク買取ショップバブル, operating primarily in Tokyo, Kanagawa, and surrounding prefectures. It offers specialized services including purchase of various motorcycle types from small scooters to large bikes, including accident and modified vehicles. The business emphasizes quick, free estimates and multiple contact channels including phone, email, and LINE. The website content is in Japanese and targets local individual customers seeking motorcycle resale services. Technically, the website uses a traditional tech stack with jQuery 1.9.1, Google Analytics, Google Tag Manager, and Google Ads for tracking and marketing. The site is moderately optimized for mobile and SEO, with basic accessibility features. Hosting and domain registration are consistent with the business location in Japan, though DNSSEC is not enabled and some security headers are missing. The site lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no advanced security headers or policies are detected. The use of an outdated jQuery version presents a potential vulnerability. No incident response or security policy information is published. WHOIS data is consistent and domain age supports legitimacy. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and credible for its business purpose but would benefit from improved security practices, privacy compliance enhancements, and modernization of technical components to reduce risk and improve user trust.
- Porsche Holding Salzburg
porsche-holding.com
Transportation · Austria
75Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Porsche Holding Salzburg is Europe's largest and most successful automobile trading company, founded in 1947 and operating in 29 countries across three continents. As a wholly owned subsidiary of Volkswagen AG, it focuses on distributing Volkswagen Group brands including Volkswagen, Škoda, SEAT, CUPRA, Audi, Lamborghini, Bentley, Ducati, and Porsche. The company offers a comprehensive range of services including automobile wholesale, retail, financial services, and IT systems, positioning itself as a key player in the automotive distribution sector. Technically, the website employs modern web technologies such as React and Next.js, with integrations for privacy management (OneTrust) and analytics (Google Tag Manager). The site is well-optimized for SEO and mobile devices, featuring a professional design and clear navigation. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. The security posture is strong with no visible vulnerabilities or blocking mechanisms. Privacy compliance is robust, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and external references strongly support its authenticity. Overall, Porsche Holding Salzburg's digital presence reflects a mature, professional, and secure corporate environment. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and enhancing accessibility features to further strengthen trust and compliance.
Modixmodix.de
Transportation · Germany
72Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Modix is a German-based company specializing in innovative digital solutions for automotive dealers and manufacturers, aiming to accelerate vehicle sales and enhance brand experiences. The company operates as part of Cox Automotive, a global leader in automotive services, which strengthens its market position and credibility. Modix offers a suite of products including websites, online trade platforms, online marketing, video and image solutions, and vehicle management systems tailored for the automotive sector. The website is professionally designed, multilingual, and targets automotive businesses seeking digital transformation.
- PParamount
cbsi.com
Media
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Paramount is a leading global entertainment company specializing in premium content production and streaming services. The website focuses on their streaming business, showcasing their market position and key services in delivering entertainment content worldwide. The site is professionally designed, mobile-optimized, and uses modern technologies such as Drupal 10 and Google reCAPTCHA to enhance user experience and security. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust analysis, but the overall digital maturity and branding consistency indicate a legitimate and well-managed online presence. Strategic recommendations include publishing detailed security policies and providing direct security contact channels to improve transparency and trust.
- PParamount
paramount.com
Media
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Paramount is a leading global media and entertainment company specializing in premium content production and distribution, reaching billions worldwide. The website reflects a mature digital presence with a professional design, clear navigation, and integration of modern technologies such as Drupal CMS, Google reCAPTCHA, and consent management tools. Security posture is strong with HTTPS enforcement and bot protection, though some security best practices like explicit security policies and security headers could be improved. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the corporate branding and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information.
- LLeven Labs, Inc.
strangeclocks.com
Other · United States
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The domain strangeclocks.com is currently serving a 404 Not Found error page with minimal content describing its use by Admiral, a service provider for digital copyright access control and privacy compliance. The domain is registered to Leven Labs, Inc., a US-based company, with a registration date in 2022, consistent with a relatively new service provider. The website lacks active business content, contact information, or user-facing services, limiting its utility and trustworthiness from a visitor perspective. Technically, the site is hosted on Google Cloud Platform with AWS DNS servers, uses standard web technologies (HTML, CSS, JavaScript), and enforces encryption with frequent certificate rotation. However, no security headers or advanced SEO and accessibility features are detected. Privacy compliance is basic but present, with no third-party cookies and GDPR consent mechanisms mentioned. Overall, the site is safe with no adult or questionable content but scores low on content quality and business credibility due to its error state and lack of information.
Belga Sharebelgashare.be
Media · Belgium
50Medium
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
Belga Share operates as a digital platform specializing in the distribution and discovery of press releases, primarily targeting journalists, news enthusiasts, and communication professionals. Founded in 2022, it positions itself as a key media resource in Belgium, offering access to press releases from companies, institutions, and individuals. The platform supports paid subscription plans, indicating a business model based on content access and premium services. The website demonstrates a consistent brand identity and professional content presentation.
- Whizeo
whizeo.com
Technology
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Whizeo is a technology company specializing in chatbot solutions designed to engage website visitors and convert them into customers 24/7. The company positions itself as a provider of customized chat technology that enhances user experience and drives conversions. The website is professionally designed using the Wix platform, featuring clear navigation and business-focused content. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Technically, the site uses modern web technologies and is hosted on Wix, with HTTPS enabled but lacking important security headers and privacy compliance documentation. No contact or incident response information is provided, limiting transparency and trust. Overall, the website presents a functional business presence but requires improvements in security, privacy, and legitimacy verification to enhance trustworthiness.
PenNewspencidesign.net
Media
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
PenNews is a WordPress theme provider specializing in themes for news, magazine, portfolio, business, and landing pages. The website serves as a demo platform showcasing multiple theme demos with drag & drop editing capabilities. The site is built on WordPress with WooCommerce, BuddyPress, and bbPress plugins, indicating a mature technical infrastructure suitable for content-rich and community-driven websites. The use of modern web technologies and SEO plugins like Yoast demonstrates a focus on digital maturity and search engine visibility. Security posture is moderate with HTTPS enabled and secure login forms, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data for the subdomain reduces domain trustworthiness, but the overall professional presentation and consistent branding support moderate business credibility. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and compliance.
- React Flow
reactflow.dev
Technology
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
React Flow is a specialized React library focused on building node-based user interfaces such as workflow builders, no-code applications, and visualizers. The website serves as a comprehensive documentation and marketing platform, offering extensive tutorials, API references, examples, and a Pro subscription tier for advanced features. The business targets developers and software engineers seeking customizable graph and flow chart solutions. Technically, the site is built on modern frameworks including React and Next.js, hosted on Vercel, and employs best practices in performance, accessibility, and SEO. Security posture is strong with HTTPS and modern security headers, though explicit privacy and cookie policies are absent. The domain registration is consistent and transparent, supporting the legitimacy of the business. Overall, the site is professional, trustworthy, and well-positioned in the developer tools market.
Exclusive Cars Vertriebs GmbHbentley.at
Transportation · Austria
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Exclusive Cars Vertriebs GmbH operates as the official Bentley dealership in Vienna, Austria, offering a comprehensive portfolio of new and certified pre-owned Bentley vehicles. The company targets affluent customers seeking luxury automobiles and provides additional services including financing, accessories, and aftersales support. The website reflects a professional and consistent brand presence aligned with Bentley Motors' global identity. Technically, the site is built on Modix CMS with integration of modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the digital infrastructure supports a positive user experience with good mobile optimization and SEO practices. The WHOIS data for the subdomain is unavailable, which is typical, but the main domain is a reputable Bentley Motors domain, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing a security.txt file to improve transparency and security readiness.
Audi Österreichaudi.at
Transportation · Austria
60Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Audi Österreich operates as the official Austrian portal for the Audi brand, providing comprehensive information on vehicle models, electric mobility, sales, and after-sales services. The website targets consumers in Austria interested in premium automotive products, offering digital tools such as vehicle configurators and access to dealer networks. The site demonstrates a mature digital infrastructure using modern frameworks like Next.js and integrates cookie consent mechanisms to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and formal security policies are absent. Overall, the website is professional, trustworthy, and well-branded, supporting Audi's market leadership in Austria.
- Porsche Austria GmbH & Co OG
cupraofficial.at
Transportation · Austria
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
CUPRA Österreich, operated under Porsche Austria GmbH & Co OG, is a premium automotive brand specializing in performance, electric, and hybrid vehicles targeting the Austrian market. The website showcases a modern digital presence with comprehensive product information, dealer networks, and configurator tools, reflecting a mature and professional business model. Technically, the site leverages Next.js and React frameworks, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-aligned with its parent company's identity.
Porsche Austria GmbH & Co OGseat.at
Transportation · Austria
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
SEAT Austria, operated under Porsche Austria GmbH & Co OG, is a well-established automotive brand website offering comprehensive vehicle information, configuration options, and after-sales services tailored for the Austrian market. The site demonstrates a mature digital presence with modern web technologies including React and Next.js, integrated with Google Tag Manager and OneTrust for privacy compliance. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for consumers and business clients alike. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data limits domain trust analysis but does not detract from the overall legitimacy given the brand affiliation and content quality. Strategic recommendations include publishing security policies, vulnerability disclosure mechanisms, and incident response contacts to enhance transparency and trust.
- Škoda Österreich
skoda.at
Transportation · Austria
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Škoda Österreich operates as the official Austrian branch of the Škoda automotive brand, providing comprehensive information on vehicle models, offers, and services including e-mobility and accessories. The website is well-structured, professionally designed, and targets consumers and businesses in Austria interested in Škoda vehicles. The digital infrastructure leverages modern web technologies such as React and Next.js, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature digital presence consistent with a large automotive brand, with high trustworthiness and compliance with privacy regulations.
Porsche Austria GmbH & Co OGvw-nutzfahrzeuge.at
Transportation · Austria
70Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Volkswagen Nutzfahrzeuge Österreich operates as the official Volkswagen commercial vehicles brand presence in Austria, managed under Porsche Austria GmbH & Co OG. The website provides comprehensive information on vehicle models, offers, services, and dealer locations, targeting commercial vehicle customers in Austria. The digital infrastructure is built on modern web technologies including React and Next.js, with integrated cookie consent and analytics via OneTrust and Google Tag Manager. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the site demonstrates a mature digital presence with good privacy compliance and professional branding, supporting a large enterprise business model in the transportation sector.
Ferncastferncast.de
Technology · Germany
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Ferncast is a specialized technology company focused on optimizing audio logistics through innovative software and hardware solutions. Their product suite includes audio streaming, communication, multiplexing, loudness control, transcoding, podcasting, and security solutions, targeting media, broadcasting, and telecommunications sectors. The company offers both traditional product sales and subscription-based models, complemented by consulting and system architecture services. Their website reflects a professional and consistent brand image with detailed product information and customer testimonials, positioning them as a niche player in the audio technology market. Technically, the website is built on modern web technologies including Webflow CMS, Google reCAPTCHA, and CookieYes for privacy compliance. It features multimedia content and interactive elements, providing a good user experience with mobile optimization and basic accessibility. Security posture is solid with HTTPS, secure forms, and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS data for the domain is a notable concern, reducing domain trustworthiness despite the professional website content. Overall, Ferncast demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.
UNSERDINGunserding.de
Media · Germany
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
UNSERDING is a regional media platform operated under the Saarländischer Rundfunk umbrella, focusing on music, local news, events, and entertainment for the Saarland region in Germany. The website offers live radio streaming, podcasts, and curated content targeting young adults and the general public interested in regional culture and music. It maintains a strong market position as a trusted local media outlet with professional branding and consistent content quality. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and specialized media players such as ARD Player. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. External integrations include social media platforms and music research services. From a security perspective, the site uses HTTPS and includes some tracking and marketing scripts with an opt-out mechanism. However, it lacks some recommended security headers like Content-Security-Policy and X-Frame-Options. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks an explicit cookie consent banner. Contact information is available via phone and a secure contact form. Overall, UNSERDING presents a low-risk profile with a professional digital presence. Strategic improvements in security headers and privacy consent mechanisms would enhance compliance and user trust.
- Saarländischer Rundfunk
sr-mediathek.de
Media · Germany
67Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website www.ardmediathek.de/sr is the official regional media platform for Saarländischer Rundfunk (SR), part of the ARD public broadcasting network in Germany. It offers video streaming, live TV, and on-demand content primarily targeting the general German-speaking audience in the Saarland region. The platform is well-established and professionally maintained, reflecting the stature of a large public media entity. Technically, the site employs modern web technologies such as React and Swiper.js, ensuring a responsive and performant user experience across devices. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. The domain uses brand protection DNS services, which aligns with the organization's need to safeguard its brand and digital assets. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable source for regional media content.
- Schwarzmeier GmbH - Neue Medien
topblogs.de
Media · Germany
57Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
TopBlogs.de is a German-language blog directory and ranking platform operated by Schwarzmeier GmbH - Neue Medien. Established since 2006, it serves as one of the largest blog top lists for German-speaking bloggers and readers, offering blog indexing, search, and ranking services. The website is built on WordPress with SEO optimization and a GDPR-compliant cookie consent mechanism, reflecting a moderate to good level of digital maturity. Hosting is provided by Strato, a reputable provider, ensuring stable infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy online presence with good content quality and user experience.
Media · Germany
51Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Bloggerei.de is a German-language blog directory platform that offers curated listings of blogs across various categories, including business, technology, lifestyle, and more. The platform targets bloggers and blog readers in Germany, providing editorially reviewed blog entries and topical news aggregation. It holds a popular position within the German blog directory niche, offering services such as blog search, categorization, and top blog lists. The business model is primarily media-focused, relying on advertising revenue and user engagement.
BERMUC Immobilien GmbHsbermuc.de
Real Estate · Germany
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
BERMUC Immobilien GmbHs is a medium-sized real estate company specializing in the acquisition and management of existing properties in Berlin and the Brandenburg region. The company offers services including asset management, project management, and property sales and rentals, targeting investors and property owners in the regional market. The website is professionally designed with a clear focus on real estate services and features detailed property listings and asset management information. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics for tracking, and employs a consent management platform to comply with cookie regulations. The hosting and DNS are managed via Cloudflare, providing good security and performance. Security posture is solid with HTTPS enforced, but the site lacks explicit security headers and published security policies. Privacy compliance is partial, as no dedicated privacy policy or terms of service pages were found in the provided content. Overall, the website is safe, trustworthy, and well-positioned in its market niche, but could improve transparency and compliance by adding privacy and security documentation.
tpi Media® GmbHseo-berlin.de
Other · Germany
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
tpi Media® GmbH operates the website seo-berlin.de as a specialized SEO agency based in Berlin, Germany. The company offers a comprehensive suite of SEO services including OnPage SEO, OffPage SEO, Local SEO, technical SEO, keyword analysis, and free SEO checks. The website is professionally designed using WordPress and Elementor, with strong SEO optimization and positive customer testimonials that reinforce its market position as a trusted local SEO provider. The technical infrastructure leverages modern plugins such as Rank Math PRO and WP Rocket, indicating a mature digital presence with good performance and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages in the provided content. Overall, the website presents a credible and professional business front with clear contact information and trust signals.
Certify360 EdTech Groupcertify360.com
Education
74Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Certify360 EdTech Group is a specialized provider focused on end-to-end certification through education and examination services. The company appears to target educational institutions, certification bodies, and learners, positioning itself as a niche player in the education technology sector. Founded in 2005, the business has a mature domain presence and consistent branding across its website. The website content is professional and relevant to its business model, emphasizing certification and educational services. From a technical perspective, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Fonts. The hosting provider is identified as Hosting Concepts B.V. d/b/a Registrar.eu. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is adequate with proper meta tags and Open Graph data. Security posture is moderate; HTTPS is properly enabled with a valid SSL certificate, and the domain status includes clientTransferProhibited, which helps prevent unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, which are areas for improvement. The site lacks explicit privacy, cookie, and terms of service policies, as well as incident response or vulnerability disclosure information, which impacts compliance and trust. Overall, the website is safe, professional, and focused on its educational certification niche. The absence of privacy and security policies and contact information reduces its privacy compliance and security posture scores. Strategic improvements in these areas would enhance trust and compliance.
- TVR
tvrinfo.ro
Media · Romania
58Medium
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
TVRInfo.ro is a Romanian news website affiliated with the national broadcaster TVR, providing news articles, live streaming, and video content primarily targeting Romanian-speaking audiences. The site is well-established with a domain age since 2008 and maintains a consistent brand presence with official social media channels and live TV streaming. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, hosted behind Cloudflare DNS, and optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve in privacy transparency and security best practices.
EFEAGROefeagro.com
Media · Spain
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EFEAGRO is a specialized Spanish media agency focused on providing multi-format information about the agro-food sector. Established in 2007, it serves professionals and stakeholders in agriculture, livestock, fishing, food, and related industries. The website offers news, sector analysis, multimedia content, and a newsletter subscription, positioning itself as a niche media outlet with a consistent brand and a strong social media presence. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Tag Manager, Google Analytics, and advertising platforms such as Google Ad Manager and InMobi. The site is mobile-optimized and SEO-friendly, with good content quality and user experience. Security-wise, the site uses HTTPS and a consent management platform for GDPR compliance but lacks some advanced security headers and explicit security policies. The domain registration is consistent and legitimate, supporting the business credibility. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency by publishing privacy and terms policies explicitly.
EFE Sport businessefesportbusiness.com
Media · Spain
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EFE Sport business is a newly launched sports business news platform created by Agencia EFE, a reputable Spanish news agency. The website provides industry-specific information and news targeting professionals and stakeholders in the sports business sector. It positions itself as a specialized information highway to satisfy demand in the sports industry. Technically, the site is built on WordPress using the Elementor page builder, hosted on WordPress.com infrastructure, and integrates common marketing and analytics tools such as Google Tag Manager, Jetpack Stats, and Brevo for email marketing. The site is mobile optimized and has good SEO practices but lacks explicit privacy and cookie policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.
EFEMINISTAefeminista.com
Media · Spain
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EFEMINISTA is a Spanish-language feminist news portal affiliated with Agencia EFE, focusing on feminism, gender equality, and women's rights. The website offers news articles, interviews, videos, and galleries targeting a Spanish-speaking audience interested in social issues and equality. It holds a niche market position as a specialized media outlet with consistent branding and good content quality. Technically, the site is built on WordPress with modern plugins and frameworks such as Elementor and Yoast SEO, supported by Google Analytics and push notification services. The hosting environment appears stable and moderately performant with good mobile optimization. Security posture is solid with HTTPS enforced and basic security best practices, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, but lacks explicit incident response or security policy disclosures. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and trustworthiness. Recommendations include enhancing DNS security, adding security.txt, and improving security headers and accessibility.